Law in practice
Practical guidance for founders and technology teams working with Polish law and EU regulation. Explore the decisions behind startup governance, SaaS contracts, AI and product security.
Selected guides worth keeping close.
Startups
Agree how decisions, equity, IP and departures will work before forming your company. A founders agreement gives those discussions a structure, but the company documents must carry the arrangements through.
Read articleSaaS and platforms
An availability percentage only helps when the contract defines the outage, the measurement and the remedy. Learn what to check in a SaaS SLA, from exclusions and credits to recovery and repeated failures.
Read articleAI and the AI Act
Using an AI tool for email summaries and adapting it to rank candidates are different use cases. Under the EU AI Act, the change can affect the system's classification and your organisation's role.
Read articleFrom recent publications to earlier guides.
Page 1 of 334 articles
GDPR and InfoSec
Your SaaS provider reports a data breach. Find out who notifies the regulator, when the 72-hour period starts and what the provider must tell you.
Startups
Vesting may let you keep your shares while a lock-up still restricts their sale. Check permitted transfers, approvals and company documents before agreeing a secondary.
GDPR and InfoSec
A subprocessor notice can change where customer data goes. Check the authorisation, objection window and service consequences before the proposed change takes effect.
Startups
Agree what investors receive, how they verify it and where access stops. A useful reporting process needs clear metrics, confidentiality and workable data safeguards.
SaaS and platforms
A download button does not settle your SaaS exit plan. Check which data must move, the migration timetable, switching charges and the limits of the Data Act.
Employment in tech
A foreign company does not always need a Polish subsidiary to hire in Poland. Compare direct employment, EOR and genuine contracting, including payroll, IP and equity.
Startups
Owning 80% of a startup does not necessarily mean receiving 80% of the exit proceeds. Model investor priority, participation and later rounds before signing.
AI and the AI Act
An open dataset, a public register and a private website offer different rights. Check reuse terms, database protection, personal data and TDM before collecting.
AI and the AI Act
Energy information already matters for GPAI model documentation in the EU. Companies using external APIs need to distinguish those provider duties from their own procurement and governance needs.
GDPR and InfoSec
Mentioning @GitHub can give Copilot the whole thread as context. Check who can start work, what may be retained in an issue or pull request, and how to protect customer information.
Startups
Founders and product teams need consequences, options and a plan. Legal advice should distinguish genuine blockers from risks that can be reduced or managed.
Cybersecurity
The April 2026 pac4j vulnerabilities show why dependency inventory, patch ownership, customer communication and support contracts need to work together.
Tell us what your team needs to decide. In a free consultation, we can identify what to check and what support would help.
Book a free consultation