Will Revieu

Get the latest news, trends, and tactics in legal AI straight to your inbox: spellbook.com/newsletter?utm…

The head of HR scheduled a mysterious 15 minute sync with me to get what she described as a "quick blessing" on a standard termination package. I should've known immediately that absolutely nothing about this request was going to be standard or quick. She wanted to fire a mid-level account executive for cause, which'd effectively deny him his severance package and all of his unvested equity. I asked her to provide the documentation proving his persistent failure to meet performance quotas or any records of his formal disciplinary warnings. She informed me that the termination wasn't about quotas at all, it was actually about repeated time theft. I asked her how a salaried, legally exempt employee working entirely remotely could possibly commit time theft under our current employment policies. She shared her screen to show me a highly detailed dashboard from a third-party employee monitoring software platform I'd never seen before in my life. I asked her what exactly I was looking at and how she obtained this level of granular telemetry data on our staff. She explained that she quietly used her administrative privileges to install a background keylogger and webcam monitoring tool on all company-issued laptops last month. I felt the blood drain entirely from my face as I stared at the dashboard. She pointed to a graph showing the employee was physically away from his desk for roughly 2 hours every single afternoon. I asked her if she'd informed the employees or obtained written consent that their private keystrokes and home webcams were being actively monitored by the HR department. She said no, because telling them would completely defeat the purpose of catching them intentionally slacking off during business hours. I had to explain that secretly recording employees inside their own homes without their explicit consent is a massive, inexcusable violation of federal and state wiretapping laws. I pointed out that we currently have 45 employees living in California, which is famously a two-party consent state with incredibly aggressive privacy regulations. She asked if we could just fire him anyway and pretend we found out he was slacking off through other legal means. I explained that constructing a parallel narrative to cover up illegal corporate surveillance is called fraud and usually leads to depositions. She seemed genuinely hurt that I wasn't highly impressed by her proactive, data-driven approach to workforce optimization. I mandated that she uninstall the spyware immediately across the entire organization and delete all the collected data. I now have to draft a highly sensitive disclosure notice to the entire company admitting that the HR department has been illegally spying on them for a month. The account executive is getting his full severance package, his equity, and probably an apology fruit basket. I'm actively questioning every single life choice that led me to this chair.

We need to have a serious conversation about the phrase "publicly available data". Just because you can see a house from the street doesn't mean you can walk into the living room and take the furniture. There's a specific type of chaos that ensues when a junior engineer decides to solve a business problem without understanding the legal guardrails of the internet. Yesterday afternoon, I received a thick FedEx envelope containing a beautifully formatted C&D letter from a white shoe BigLaw firm representing our largest competitor. The letter accused our company of violating the Computer Fraud and Abuse Act, tortious interference, and trespass to chattels. They alleged that we'd launched a coordinated DDoS attack against their pricing servers and systematically scraped their proprietary database. I nearly spilled my coffee on my keyboard. We're a B2B analytics platform, not a state-sponsored hacker collective. I immediately convened an emergency meeting with the Head of Engineering and the CISO to figure out what was going on. The Head of Engineering looked incredibly uncomfortable and admitted that 1 of the new junior developers had built a side project to help the Sales team track competitor pricing. I asked to speak with the junior developer. He logged onto the Zoom call wearing a hoodie and looking completely unbothered by the fact that we were facing a federal lawsuit. I asked him to explain exactly what his side project did. He enthusiastically explained that he wrote a Python script to scrape the competitor's website every hour to ensure our Sales team had real-time pricing data. I asked him if he checked the competitor's robots.txt file or their terms of use before deploying the script. He scoffed and said robots.txt is just a polite suggestion, not a law, and that public data on the internet is public property. I had to close my eyes and massage my temples. I explained that while scraping public data is a nuanced legal gray area, hitting a server every 10 seconds with an automated bot that ignores rate limits is essentially a denial of service attack. He argued that their infrastructure should be robust enough to handle the traffic, so it's really an engineering failure on their part. I asked him if he genuinely believed that the legal defense to crashing a competitor's website is that they should've built a better website. He said yes, because in the tech world, code is law. I had to explain that in the actual world, the law is law, and federal judges don't care about his cyberpunk philosophy. I pointed out the cease and desist letter demanding we destroy all scraped data, provide an affidavit of compliance, and pay $50,000 for the server downtime. He asked if we could just deploy a stealthier bot using residential proxies so they couldn't trace it back to us. I had to mute my microphone so he wouldn't hear me scream. I spent 20 minutes explaining that actively attempting to evade IP blocks while continuing unauthorized access is the exact definition of criminal intent under the CFAA. I then had to get on a call with the BigLaw partner who drafted the letter. It was a partner at my old firm. I had to sit there and absorb his polite, condescending lecture about corporate responsibility, playing the exact role of the disorganized, reckless in-house counsel that we used to mock over drinks. I had to promise him we were implementing strict internal controls and deleting the data. I'm now drafting a company-wide policy on acceptable data gathering practices. I'm exhausted. Code isn't law. Law is law, and it's slowly destroying my will to live.

The CEO slacked me at 8 AM to ask if I could quickly rubber stamp a commercial lease agreement for our shiny new corporate headquarters. He said the commercial broker needed the fully executed document by noon or we'd immediately lose the space to a competitor. I opened the 65 page PDF and immediately scrolled to search for the indemnification provisions and the guarantor clauses. I quickly discovered that the landlord had quietly inserted a draconian personal guarantee clause binding our CEO's personal assets to the entirety of the 10 year lease. I called the CEO and asked if he was fully prepared to pledge his primary residence and personal savings to secure the new office space. He laughed and said the broker assured him it was just standard corporate boilerplate that never actually gets enforced in the real world. I explained that commercial landlords don't seize personal assets as a fun corporate formality, they do it because they enjoy getting paid. He told me the building had an incredible rooftop terrace, a private gym, and a kombucha tap on every single floor, so we simply had to make the deal work. I asked him if having access to artisanal fermented tea was genuinely worth risking personal bankruptcy. He paused for a second and then suggested I just cross out the personal guarantee with a red pen and send it back to the landlord as is. I explained that unilaterally striking the single most critical financial security clause in a massive commercial lease exactly 3 hours before a deadline isn't how complex negotiations work. He then asked if we could quickly set up a brand new subsidiary LLC with 0 actual assets to sign the lease instead to shield the parent company. I spent 20 minutes explaining the legal concept of corporate veil piercing to a man who recently raised a $50m series B. He finally agreed to let me negotiate a standard corporate letter of credit with our bank instead of risking his personal wealth. The real estate broker sent me a hostile email claiming I completely ruined his timeline and endangered the entire transaction. The CEO is visibly annoyed that he has to wait another week to finalize the deal for his luxurious rooftop terrace. I'm once again positioned as the ultimate corporate villain for simply ensuring my boss doesn't legally forfeit his house to a commercial property management firm. I really should've stayed in BigLaw where the sociopathic partners at least understood the basic fundamentals of contract law.

when you leave BigLaw to be an in-house GC

Our IT director bypassed procurement to sign a 5 year contract with a new cloud storage vendor. He told me he didn't need legal review because it was simple Stripe portal and he just clicked accept and paid with the corporate card. I asked him to send me the terms of service he blindly accepted for our entire organization. It took 2 minutes of reading to discover we've granted them a perpetual, irrevocable license to sell any data uploaded to their servers. I asked if he realized he legally authorized a random startup to sell our proprietary data to competitors. He said I was fear-mongering and nobody actually reads the terms of service anyway. I had to explain that federal judges are the one group of people who do actually read them. Please revoke my bar license.

General Counsel being denied headcount because “you can just use AI to review contracts”

The VP of Sales escalated an MSA review to me because I struck a clause guaranteeing 100% uptime with 0 hours of scheduled maintenance. I patiently explained that unless we've cured hardware degradation, we can't legally guarantee perpetual digital immortality. She argued the prospect will walk and I'm killing a 3 year deal over semantics. I asked who's paying the $500,000 penalty when our AWS servers inevitably go down for 15 minutes in October. She suggested creating a shell company to sign the contract so liability doesn't flow back to us. I spent 30 minutes explaining piercing the corporate veil to a woman who makes 3 times my salary. I really thought in-house law meant fewer conversations about basic fraud.

me sitting with everyone who actually read the terms and conditions

"the board wants to know if we can just use a disclaimer instead of doing a full regulatory filing" me:

My absolute favorite genre of fantasy fiction is sales interpreting our MSA.

HR decided to save money on outside counsel by using ChatGPT to draft our new employee handbook. They deployed the 80 page document company-wide this morning without legal review. I found out when an engineer asked how to apply for the 3-month paid sabbatical the handbook claims everyone gets after a year of service. I called the Head of HR to ask why we're offering Scandinavian social benefits on a startup budget. She laughed and said the AI hallucinated but the vibe aligned with our core values. I explained that employment law doesn't operate on vibes and a published employee handbook creates legally binding expectations. She asked if we could say it was a 1-time social experiment. I'm writing an apology email to 400 people. I hope no one booked tickets yet.

me

I've discovered that our CFO has been conducting unauthorized legal negotiations via Slack messages with our primary cloud provider. He thought our indemnification caps in the MSA were too restrictive, so he sent a thumbs up 👍 to a message where their rep suggested removing our cap entirely. I found out because their legal counsel formally requested an amendment memorializing the Slack agreement. I walked into his office and asked why he unilaterally agreed to assume unlimited, uncapped liability for a $2 billion enterprise. He chuckled and said business is about relationships, not rigid legal frameworks. I asked him if his relationship was going to pay the settlement when a data breach bankrupts us. He told me I was being overly dramatic and that I need to adopt a more commercial mindset. I'm a lawyer, my entire job is to be dramatic about hypothetical catastrophes so they don't become actual catastrophes. I just drafted a 5 page memo explaining why a thumbs up isn't a valid execution mechanism for corporate amendments. 👍

There's a fundamental misunderstanding in this building about what the phrase "just a quick look" means in a legal context. This morning, Marketing slacked me a 40 page SaaS vendor agreement and asked me to give it a quick look before her 11 AM signing deadline. It was 10:15 AM. I opened the document to find a governing law clause pointing to the jurisdiction of Dubai. There was also an auto-renewal clause with a 200% price escalator and a limitation of liability capped at $100. I told her we can't sign this because it bankrupts us if they lose our data. She sighed and said the vendor promised it was just their standard boilerplate and they don't actually enforce those clauses. I had to explain that a contract is literally a document designed to be enforced. She asked if I could just redline the bad parts in the next 10 minutes so she doesn't lose her quarterly discount. I'm going to walk into the ocean.

We're doing due diligence for our Series C and the audit flagged a massive block of open source code in our proprietary billing engine. I pulled the lead developer into a Zoom to ask about the GNU General Public License attached to his latest commit. He explained that he found an elegant solution on GitHub and copy-pasted it into our repo to save time. I asked if he realized that using GPL code in a commercial software product legally obligates us to open source our entire proprietary codebase. He told me we don't need to worry because he changed all the variable names. I felt a vein throb in my forehead. I had to explain that find-and-replace isn't a recognized legal defense against copyright infringement. He then suggested we just delete the license file so the auditors wouldn't see it. I had to spend 20 minutes explaining the concept of spoliation of evidence to a man wearing a Naruto t-shirt and flip-flops. What even is my life anymore

Opposing counsel saying it looks fine isn't a legal opinion.

Marketing just forwarded me a thread where our VP of Sales promised a prospect we'd build them a bespoke integration for free. He also told me they'd own all the underlying IP. This was done in a casual email that concluded with "sent from my iPhone." I asked him why he thought he had the authority to give away our core proprietary technology as a throw-in on a $50,000 SaaS deal. He told me it was just a sales tactic to build momentum and that we could always walk it back in the MSA. I had to explain that written promises made by an executive officer are actually binding, regardless of whether they were typed with two thumbs. He asked if we could claim his email was hacked. I'm currently drafting a retraction email that will definitely tank the deal. At least in BigLaw I was billing $800 dollars an hour to suffer like this.