Assistant General Counsel - AI, Privacy & Governance

📋 Description

• • Own Baseten’s legal and regulatory positioning under emerging AI laws including the EU AI Act, U.S. state AI laws, and NIST AI RMF.
• • Lead export and trade compliance efforts related to BIS/EAR advanced-computing and semiconductor controls, including end-use/end-user diligence and sanctions screening for compute access and model distribution.
• • Build and manage Baseten’s privacy program encompassing GDPR, CCPA compliance, data-subject requests, cross-border data transfer mechanisms, and the DPA/sub-processor framework as a data processor.
• • Own the governance and controls layer for certifications including SOC 2, ISO/IEC 42001, and HIPAA-eligible configurations, partnering with Security and Compliance on policy lifecycle, controls testing, evidence collection, and audit readiness.
• • Translate complex regulatory obligations into actionable operational controls, documentation, and training programs adopted by Engineering, Product, and GTM teams.
• • Serve as the primary legal partner to Security and GRC teams on regulated-data handling, customer and auditor assurance, and risk-acceptance decisions.
• • Support Model Labs and partnership agreements on AI-law, privacy, export, and IP-provenance terms, providing legal guidance on commercial deals involving AI infrastructure.
• • Advise the Chief Legal Officer and executive leadership on regulatory risk, monitor evolving global AI and data protection regimes, and recommend proactive readiness plans.
• • Contribute to customer and Sales deals as needed, ensuring legal alignment on AI governance, data privacy, and export compliance without detracting from core regulatory program ownership.
• • May assist on M&A and other strategic transactions involving regulatory due diligence, compliance integration, or governance alignment.
• • Operate at the intersection of AI regulation, data protection, export controls, and security governance to enable Baseten’s growth as an AI inference infrastructure provider.
• • Develop and maintain scalable compliance frameworks that support rapid scaling while maintaining legal and regulatory integrity across global operations.
• • Act as a trusted advisor to Engineering and Infrastructure teams on compliance-by-design principles for AI model deployment and compute access.
• • Stay current with global regulatory developments and proactively adapt Baseten’s policies to new or amended legal frameworks.
• • Foster cross-functional collaboration with Security, Compliance, Product, and Commercial teams to embed legal requirements into product development and customer workflows.
• • Promote a culture of compliance through clear communication, training, and accessible documentation tailored to technical and non-legal stakeholders.
• • Represent Baseten in regulatory engagements and audits, ensuring consistent and defensible positions on AI governance and data protection.
• • Maintain a deep understanding of Baseten’s role as a processor under customer DPAs and ensure operational alignment with customer compliance expectations.
• • Drive continuous improvement of compliance programs through feedback loops, audit findings, and evolving industry standards.
• • Balance speed and scalability with legal rigor, enabling business growth while mitigating regulatory risk in a fast-moving AI infrastructure environment.