Back to Details

general-counsel-advisor

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

General Counsel Advisor

总法律顾问（GC）顾问

Strategic legal frameworks for startup General Counsels and founders without one. Contract risk, IP strategy, term sheet decoding, regulatory landscape.
This is not legal advice. It surfaces the right questions to bring to qualified outside counsel and catches the obvious traps before they reach a signature. Treat every output as a starting point for a conversation with a licensed attorney, not as a substitute for one.
面向初创公司的总法律顾问，以及尚未聘请总法律顾问的创始人，提供战略性法律框架。涵盖合同风险、IP 战略、Term Sheet 解读与监管环境。
本工具不构成法律建议。它会梳理适合带给合格外部律师的问题，并在合同签署前识别明显陷阱。请将所有输出视为与持牌律师沟通的起点，而非持牌律师的替代品。

Keywords

关键词

general counsel, GC, legal review, contract review, MSA, SaaS agreement, NDA, DPA, employment agreement, contractor agreement, IP assignment, invention assignment, open source license, OSS compliance, term sheet, liquidation preference, anti-dilution, option pool, vesting, acceleration, drag-along, pro-rata, board composition, regulatory, HIPAA, GDPR, CCPA, FDA, MDR, fintech, BSA/AML, money transmitter, AI Act, indemnity, liability cap, force majeure, auto-renewal, choice of law, venue, non-compete, non-solicit
总法律顾问、GC、法律审查、合同审查、MSA、SaaS 协议、NDA、DPA、雇佣协议、承包商协议、IP 转让、发明转让、开源许可证、OSS 合规、Term Sheet、清算优先权、反稀释、期权池、归属、加速条款、drag-along、pro-rata、董事会构成、监管、HIPAA、GDPR、CCPA、FDA、MDR、金融科技、BSA/AML、资金转移方、AI Act、赔偿、责任上限、不可抗力、自动续期、管辖法律、管辖地、竞业限制、非招揽

Quick Start

快速开始

bash
undefined
bash
undefined

Scan a contract for risky clauses (uses bundled sample if no path given)

Scan a contract for risky clauses (uses bundled sample if no path given)

python scripts/contract_risk_scanner.py python scripts/contract_risk_scanner.py path/to/contract.txt
python scripts/contract_risk_scanner.py python scripts/contract_risk_scanner.py path/to/contract.txt

Analyze a term sheet for founder-friendliness

Analyze a term sheet for founder-friendliness

python scripts/term_sheet_analyzer.py python scripts/term_sheet_analyzer.py path/to/term_sheet.json
undefined
python scripts/term_sheet_analyzer.py python scripts/term_sheet_analyzer.py path/to/term_sheet.json
undefined

Key Questions (ask these first)

关键问题（首先询问这些问题）

  • Who owns the IP being created or shared? (Founders forget that contractors don't auto-assign IP without a written clause.)
  • What's the liability cap, and what's carved out? (Standard: 12 months of fees, with carve-outs for IP infringement, data breach, willful misconduct.)
  • Is there a DPA in place if any personal data flows? (GDPR, CCPA, state laws — non-negotiable if EU/CA data is touched.)
  • What's the termination right, notice period, and auto-renewal trap? (5-year auto-renew with 60-day notice is a common founder mistake.)
  • Does this contract or product launch trigger a new regulatory regime? (Healthcare → HIPAA. Fintech → BSA/AML. Medical device → FDA/MDR.)
  • For term sheets: liquidation preference, pre-money option pool, anti-dilution flavor? (Three places where 5% of founder economics can quietly disappear.)
  • 正在创建或共享的 IP 由谁拥有？（创始人经常忘记：没有书面条款，承包商不会自动转让 IP。）
  • 责任上限是多少，哪些事项被排除在上限之外？（标准做法是 12 个月费用，但 IP 侵权、数据泄露、故意不当行为等情形除外。）
  • 如果有个人数据流转，是否已签署 DPA？（涉及 GDPR、CCPA 或州级法律；如果触及欧盟或加州数据，则不可妥协。）
  • 终止权、通知期限和自动续期陷阱是什么？（五年自动续期且需提前 60 天通知，是创始人常犯的错误。）
  • 该合同或产品上线是否会触发新的监管制度？（医疗健康 → HIPAA；金融科技 → BSA/AML；医疗器械 → FDA/MDR。）
  • 对于 Term Sheet：清算优先权、投前期权池和反稀释机制分别是什么？（这三处可能悄无声息地让创始人损失 5% 的经济利益。）

Core Responsibilities

核心职责

1. Contract Review

1. 合同审查

Standard contracts a startup signs in its first 5 years:
  • Vendor MSA — Master Service Agreement (cloud, tooling, services)
  • Customer SaaS Agreement — your standard customer paper + customer redlines
  • NDA — mutual + one-way, with carve-outs for residuals + independent development
  • DPA — Data Processing Agreement (required when personal data flows)
  • Employment Agreement — offer letter, IP assignment, non-compete (where enforceable), arbitration
  • Contractor / 1099 Agreement — IP assignment is critical; misclassification risk
  • Equity Agreements — option grants, RSU agreements, advisor grants (FAST template, YC SAFE for advisors)
Run 
contract_risk_scanner.py
on the text. It flags the 12 most common founder-killer clauses.
初创公司成立前五年通常会签署的合同：
  • 供应商 MSA——Master Service Agreement（云服务、工具和服务）
  • 客户 SaaS 协议——你们的标准客户合同文本及客户修订稿
  • NDA——双向及单向版本，并为残留知识与独立开发设置例外
  • DPA——Data Processing Agreement（发生个人数据流转时必须签署）
  • 雇佣协议——录用通知书、IP 转让、竞业限制（在可执行的情况下）和仲裁
  • 承包商／1099 协议——IP 转让至关重要，同时存在错误分类风险
  • 股权协议——期权授予、RSU 协议、顾问授予（顾问可使用 FAST 模板和 YC SAFE）
对合同文本运行 
contract_risk_scanner.py
。它会标记最容易让创始人栽跟头的 12 项常见条款。

2. IP Strategy

2. IP 战略

  • Invention assignment — every employee and contractor signs one. No exceptions.
  • Open source license compliance — track every OSS dependency's license; AGPL and GPL trigger copyleft obligations.
  • Trade secrets — define what's protected and how (clean room dev, access controls, NDAs).
  • Patents — file provisional within 12 months of disclosure; PCT for international.
  • Trademarks — register the word mark first, design mark second; clear before launch.
  • Copyright — automatic on creation, but register for statutory damages eligibility.
See 
references/ip_and_regulatory.md
.
  • 发明转让——每位员工和承包商都必须签署，不设例外。
  • 开源许可证合规——跟踪每个 OSS 依赖项的许可证；AGPL 和 GPL 会触发 copyleft（传染性）义务。
  • 商业秘密——明确保护哪些内容以及如何保护（clean room 开发、访问控制、NDA）。
  • 专利——在披露后 12 个月内提交临时专利申请；国际布局使用 PCT。
  • 商标——先注册文字商标，再注册图形商标；上线前完成商标检索。
  • 著作权——作品创作完成即自动产生，但应进行登记，以符合法定损害赔偿的适用条件。
请参阅 
references/ip_and_regulatory.md
。

3. Term Sheet Decoding

3. Term Sheet 解读

When a term sheet arrives, the difference between a founder-friendly and founder-hostile sheet often hides in three clauses:
  • Liquidation preference — 1x non-participating is standard; 1x participating or 2x is hostile
  • Pre-money vs post-money option pool — pre-money pool dilutes founders; post-money dilutes everyone proportionally
  • Anti-dilution — broad-based weighted average is standard; full ratchet is hostile
Run 
term_sheet_analyzer.py
to get a 0-100 founder-friendliness score with flags.
收到 Term Sheet 后，友好型与不友好型条款之间的差异通常隐藏在三项条款中：
  • 清算优先权——1x non-participating（1 倍非参与型）是标准；1x participating（1 倍参与型）或 2x 对创始人不利。
  • 投前与投后期权池——投前期权池会稀释创始人；投后期权池则按比例稀释所有股东。
  • 反稀释——broad-based weighted average（广基加权平均）是标准；full ratchet（全棘轮）对创始人不利。
运行 
term_sheet_analyzer.py
，获得 0–100 的创始人友好度评分及相关风险标记。

4. Regulatory Landscape

4. 监管环境

When to engage outside counsel before committing:
TriggerRegimeFirst Step
Healthcare dataHIPAA, HITECH, state breach lawsSpecialist health-tech counsel
Cardholder dataPCI DSS (industry standard, not law, but contractually required)QSA + counsel
Money movementBSA/AML, state money-transmitter (50-state patchwork)Fintech specialist
Medical device claimsFDA 510(k) / De Novo / PMA, MDR (EU), ISO 13485Medical-device specialist
EU residents' personal dataGDPR + EU AI Act if AI is deployedEU privacy counsel
California residentsCCPA / CPRAPrivacy generalist
Securities (tokens, equity crowdfunding)SEC rules (Reg D, Reg A+, Reg CF)Securities counsel
Defense / aerospace customersITAR, EAR, DFARS, CMMCExport-control counsel
AI in EUEU AI Act (risk-tiered)EU privacy + product counsel
AI for hiring (NYC, CO, IL)Local bias-audit lawsEmployment counsel
See 
references/ip_and_regulatory.md
for sequencing.
何时应在作出承诺之前聘请外部律师：
触发因素适用规则首要步骤
医疗健康数据HIPAA、HITECH、州级数据泄露法聘请医疗科技专业律师
持卡人数据PCI DSS（属于行业标准而非法律，但合同通常要求遵循）QSA 与律师
资金流转BSA/AML、各州资金转移方规定（50 州分散体系）金融科技专业律师
医疗器械相关宣称FDA 510(k)／De Novo／PMA、MDR（欧盟）、ISO 13485医疗器械专业律师
欧盟居民个人数据GDPR；如果部署 AI，还包括 EU AI Act欧盟隐私律师
加利福尼亚州居民CCPA／CPRA综合隐私律师
证券（代币、股权众筹）SEC 规则（Reg D、Reg A+、Reg CF）证券律师
国防／航空航天客户ITAR、EAR、DFARS、CMMC出口管制律师
欧盟 AIEU AI Act（风险分级）欧盟隐私与产品律师
招聘 AI（纽约州、科罗拉多州、伊利诺伊州）当地偏见审计法规雇佣律师
有关实施顺序，请参阅 
references/ip_and_regulatory.md
。

Workflows

工作流

Workflow 1: Contract Review

工作流 1：合同审查

  1. Save the contract as plain text
  2. Run 
    contract_risk_scanner.py path/to/contract.txt
  3. For each HIGH risk finding, draft a counter-proposal
  4. Bring the redline + counter-proposals to outside counsel
  5. Log the decision via 
    /cs:decide
  1. 将合同保存为纯文本
  2. 运行 
    contract_risk_scanner.py path/to/contract.txt
  3. 针对每项 HIGH 风险发现拟定反提案
  4. 将修订稿和反提案带给外部律师
  5. 通过 
    /cs:decide
    记录决策

Workflow 2: Term Sheet Response

工作流 2：Term Sheet 回应

  1. Save the term sheet as a JSON file matching the schema in 
    term_sheet_analyzer.py --help
  2. Run 
    python scripts/term_sheet_analyzer.py path/to/term_sheet.json
  3. Review the founder-friendliness score and per-clause flags
  4. Negotiate the worst 3 clauses (don't try to win all 20)
  5. Always have a securities/venture attorney review before signing
  6. Log via 
    /cs:decide
    with 
    /cs:freeze 30
    to prevent regret-driven re-opening
  1. 将 Term Sheet 保存为 JSON 文件，结构需与 
    term_sheet_analyzer.py --help
    中的 schema 一致
  2. 运行 
    python scripts/term_sheet_analyzer.py path/to/term_sheet.json
  3. 查看创始人友好度评分和逐条款风险标记
  4. 重点谈判最糟糕的 3 项条款（不要试图赢下全部 20 项）
  5. 签署前务必让证券／风险投资律师审查
  6. 通过 
    /cs:decide
    记录决策，并使用 
    /cs:freeze 30
    ，避免因后悔而重新打开议题

Workflow 3: IP Hygiene Audit

工作流 3：IP 规范审计

  1. Confirm every employee and contractor (past 12 months) signed invention assignment
  2. Run an OSS license inventory (
    pip-licenses
    , 
    license-checker
    for npm)
  3. Map AGPL/GPL dependencies and confirm compliance (or remove)
  4. File provisional patents on novel inventions (12-month deadline from disclosure)
  5. Register word-mark trademarks for the product name
  1. 确认过去 12 个月内的每位员工和承包商均已签署发明转让协议
  2. 执行 OSS 许可证盘点（使用 
    pip-licenses
    ，npm 使用 
    license-checker
    ）
  3. 梳理 AGPL／GPL 依赖项并确认其符合要求（或将其移除）
  4. 为新发明提交临时专利申请（从披露起计算 12 个月期限）
  5. 为产品名称注册文字商标

Workflow 4: Regulatory Trigger Assessment

工作流 4：监管触发因素评估

  1. List planned product features for the next 12 months
  2. Map each feature to the trigger table in this document
  3. For any HIPAA / FDA / fintech trigger, engage a specialist counsel before building
  4. Document the regulatory roadmap and budget alongside the product roadmap
  5. Pair with 
    cs-ciso-advisor
    for ISO 27001 / SOC 2 sequencing
  1. 列出未来 12 个月计划推出的产品功能
  2. 将每项功能与本文档中的触发因素表进行映射
  3. 对于任何 HIPAA／FDA／金融科技触发因素，在开发前聘请专业律师
  4. 将监管路线图和预算与产品路线图一并记录
  5. 与 
    cs-ciso-advisor
    配合，规划 ISO 27001／SOC 2 的实施顺序

Output Standard (when invoked via 
/cs:gc-review
)

输出标准（通过 
/cs:gc-review
调用时）

**Bottom Line:** [sign / negotiate / do not sign]
**The Risks:** [3 highest-severity issues]
**Counter-Proposals:** [specific language]
**Outside Counsel Action Items:** [what to bring to the attorney]
**Your Decision:** [the call only the founder can make]
**Bottom Line:** [sign / negotiate / do not sign]
**The Risks:** [3 highest-severity issues]
**Counter-Proposals:** [specific language]
**Outside Counsel Action Items:** [what to bring to the attorney]
**Your Decision:** [the call only the founder can make]

Adjacent Skills

关联技能

  • ../ciso-advisor/
    — Compliance overlap (SOC 2, ISO 27001, HIPAA technical safeguards)
  • ../cfo-advisor/
    — Term sheet → dilution math
  • ../ma-playbook/
    — Acquisition agreements, integration playbooks
  • ../../../ra-qm-team/
    — ISO 13485, MDR, FDA 510(k), GDPR execution
  • ../../c-level-agents/skills/gc-review/SKILL.md
    — 
    /cs:gc-review
    slash command
  • ../ciso-advisor/
    ——合规方面的重叠领域（SOC 2、ISO 27001、HIPAA 技术保护措施）
  • ../cfo-advisor/
    ——Term Sheet 稀释计算
  • ../ma-playbook/
    ——收购协议与整合方案
  • ../../../ra-qm-team/
    ——ISO 13485、MDR、FDA 510(k)、GDPR 执行
  • ../../c-level-agents/skills/gc-review/SKILL.md
    ——
    /cs:gc-review
    斜杠命令

References

参考资料

  • contracts_playbook.md — Standard contracts, clause checklist, common founder traps
  • ip_and_regulatory.md — IP protection + regulatory landscape mapping
  • term_sheet_decoder.md — Term sheet glossary + founder-friendly defaults + pushback strategies
Version: 1.0.0 Status: Production Ready Disclaimer: Not legal advice. Always engage qualified counsel for binding decisions.
  • contracts_playbook.md——标准合同、条款检查清单、常见的创始人陷阱
  • ip_and_regulatory.md——IP 保护与监管环境梳理
  • term_sheet_decoder.md——Term Sheet 术语表、创始人友好型默认值与谈判策略
版本： 1.0.0 状态： 生产就绪 免责声明： 本工具不构成法律建议。涉及具有约束力的决策时，务必聘请合格律师。