Legal Counsel II

Commercial Contracting, Privacy & Product Compliance

We build the identity verification and onboarding AI that banks, NBFCs, insurers, brokers, telcos and fintechs run their customers through, across India, the US, ASEAN and Africa. Hundreds of millions of verifications, in markets where a regulator is watching each one.

Which means our legal team does not sit downstream of the product. Whether a feature can exist, where the data can live, how long we can keep it, what the model can learn from, those are legal questions before they are engineering questions. We are looking for a lawyer who wants to answer them.

The Role

As Legal Counsel II, you will own commercial contracting and compliance for HyperVerge’s identity AI business and HyperStart, our contract lifecycle management platform. You will be the day-to-day legal partner to Sales, Product, Security, Engineering, Finance and Strategy.

The role is roughly two-thirds contracting and privacy operations, one-third regulatory and product counsel - and the balance shifts toward the second as you build depth.

What You’ll Own

Commercial Contracting

- Run NDAs, MSAs, SOWs, order forms, DPAs, SLAs, security addenda and vendor agreements end to end - with enterprise counterparties across India, the US, ASEAN and MEA.
- Negotiate directly with counterparty counsel, including large, regulated institutions with entrenched paper.
- Own the terms that decide deals: liability and indemnity, data ownership and AI model governance, audit and regulator inspection rights, sub-processing, service levels, exit and transition.
- Sharpen the playbooks, fallback matrices and redline standards as you go, so the next deal moves faster than the last one.

Regulatory & Product Compliance

- Translate BFSI regulation into product guardrails - RBI’s KYC Master Direction (including CKYC), RBI’s outsourcing of IT services framework, IRDAI’s outsourcing and cyber security norms, SEBI’s cyber resilience expectations and what each of them means for a technology service provider sitting inside a regulated entity’s supply chain.
- Advise Product and Engineering early, at design stage, on data residency, retention,



consent architecture, cross-border transfer and sub-processing.
- Run DPDP implementation on the ground, and handle GDPR, CCPA and PDPA diligence from customers, their auditors and their regulators.
- Own the compliance artefacts that get scrutinized in a real audit: DPIAs, records of processing, incident response runbooks, vendor risk assessments, policy acknowledgment workflows and customer diligence dockets.

AI Governance

- Work on questions that do not yet have settled answers and involve evolving regulation: including governance and design for compliance of obligations under the AI laws and regulatory guidance across India, VN, The Philippines, US and Nigeria.
- Build the positions the company will rely on and be able to defend them to a customer’s risk committee.

Corporate, IP & Open Source

- Support the Head of Legal on cross-border corporate and entity work as we expand, intra-group arrangements, employment and EOR structures in current markets, and coordination with external counsel on filings. Real exposure to how a multi-jurisdiction structure gets built, without carrying it alone.
- Maintain trademark filings and brand protection; track open-source usage and licensing obligations; escalate AI and IP issues that need deeper review.

Legal Operations

- Own the legal intake queue and contracting pipeline; track and move the numbers on turnaround time.
- Automate the repeatable work. We run our own CLM and build our own AI-assisted review tools, you will use them, stress-test them, and tell us what to build next.

What Great Looks Like

First 90 days. Fluent on the product stack, the top enterprise contracts, the playbooks and the BFSI regulatory map. Closing standard and mid-complexity deals independently.



One real friction point in the contracting lifecycle found and fixed.

By month six. Negotiating MSAs, DPAs and security addenda with regulated clients without supervision. At least one privacy or compliance workflow operationalized end to end. The person Sales, Product and Security call first.

By year one. Owning a regulatory or product-compliance domain outright, the person the company relies on for that answer, internally and in front of customers.

What We’re Looking For

- 3–5 years’ post-qualification experience in technology specifically fintech or general corporate law - in-house or at a firm. In-house exposure to a regulated or regulated-adjacent business is a strong plus.
- Hands-on commercial SaaS contracting, including negotiating against BFSI counterparties and their procurement and risk teams.
- A working understanding of the banking, insurance and broking ecosystem - how these entities are regulated, and how those obligations flow down to their technology service providers.
- Practical experience with privacy frameworks - DPDP, GDPR or CCPA - not just a reading of them.
- A sound grasp of SaaS commercial models, IP and open-source licensing.
- LL.B. required. LL.M. or a privacy certification (CIPP/E, CIPM or equivalent) is a plus, not a substitute for judgment.
- Clear, plain-English drafting and a calm, solution-oriented negotiating style.

You’ll Thrive Here If You

- Would rather understand how the product works than take the PM’s word for it.
- Are willing to give a reasoned answer in an area where the regulator has not given one yet, and to show your working.
- Escalate genuine edge cases early and unblock everything else yourself.
- Ask “how do I make this repeatable” the second time you do something.Want to build positions, processes, tools and not only review.

How We Work

- An intentional small, high ownership legal team with real accountability.
- Direct access to founders, business heads and product leadership. Legal is in the room when decisions are made.
- We invest in legal technology and AI-assisted workflows, and we expect our lawyers to work at the front of that curve.

📌 Senior Legal Counsel (Bengaluru)
🏢 HyperVerge
📍 Bengaluru