Cases
AI Law Practice
How We’ve Helped AI Companies, Investors, and Creators
A selection of projects across AI governance, corporate structuring, digital likeness, and cross-border compliance. Client details are anonymised.
12 projects
Selected cases
EU · UAE · UK · US
Jurisdictions
AI companies · VC funds · Creators
Client types
AI Governance
SaaS · Germany
EU AI Act readiness for a multi-product AI platform
Technology company deploying LLMs across client-facing and internal products with no AI governance structure and unclear risk classification.
→
Full risk classification across all AI use-cases (minimal / limited / high-risk)
→
Internal AI policy with approval flows and prohibited use rules
→
AI governance committee with defined roles and escalation procedures
→
Training delivered to legal, product, and engineering teams
⏱ 5–6 weeks
AI Governance
Fintech Bank · France
AI governance for high-risk credit scoring and KYC systems
International bank using ML models for credit decisions and AML automation. High-risk classification under EU AI Act, explainability and human oversight required.
→
Gap analysis against EU AI Act high-risk obligations
→
Human-in-the-loop procedures for credit and compliance decisions
→
Explainability and auditability requirements for deployed models
→
AI risk assessment methodology with bias testing protocols
⏱ 6–8 weeks
AI Risk & Liability
AI SaaS Platform · Germany
Liability framework and MSA rebuild for a B2B AI platform
LLM platform automating decisions for enterprise fintech and healthtech clients. Aggressive indemnification demands in RFPs, unclear liability split across model providers.
→
Supply chain liability map across own models, cloud APIs, external LLMs
→
Rebuilt MSA with AI-specific liability caps and indemnification structure
→
Customer obligation allocation: data control, human oversight, final decisions
→
Sales negotiation playbook for enterprise liability discussions
⏱ 4–6 weeks
AI Regulatory Opinions
AI Startup · Germany · Series B
Investor due diligence opinion on EU AI Act classification
B2B HR platform using LLMs for candidate screening. Investor requested formal legal opinion on EU AI Act classification before closing a funding round.
→
HR screening classified as high-risk under EU AI Act Annex III
→
Formal opinion on applicable obligations (Annex IV, human oversight)
→
Compliance roadmap included for investor reference
→
Q&A memo responding to investor follow-up questions
⏱ 2–3 weeks
AI Structuring
AI SaaS Startup · Germany · Series A
IP holding structure before a Series A fundraising round
AI startup with distributed R&D across Germany and Eastern Europe. Investors required clean IP ownership chain — models, datasets, and code — before closing.
→
Structure: holding + IP holding + German operating GmbH
→
IP transfer roadmap: assignment agreements and intra-group licensing
→
Royalty model with sublicensing restrictions and change-of-control triggers
→
Investor memo on structure and IP risk allocation
⏱ 4–6 weeks
AI Due Diligence
VC Fund · Luxembourg · Series B
Accelerated legal DD on an AI infrastructure company
European VC fund leading a Series B in an AI infrastructure startup. Key concerns: IP ownership chain, training data provenance, and EU AI Act readiness.
→
IP audit: founder, employee, and contractor assignments verified
→
Training data review: licensing status of three dataset sources assessed
→
EU AI Act readiness: gap analysis and conditions precedent set
→
Red-flag report and DD memo delivered within 3 weeks
⏱ 3–4 weeks
Cross-Border AI
Fintech Startup · UK/UAE
Cross-border compliance and jurisdiction structure for EU/UK/UAE launch
Fintech startup with London entity and Dubai tech hub, planning simultaneous launch of an ML scoring product in EU, UK, and UAE banking markets.
→
EU AI Act extraterritorial scope confirmed despite UK/UAE operations
→
Comparative obligations matrix: EU vs UK vs UAE fintech AI rules
→
Optimal legal entity configuration for AI operations
→
Phased market entry plan with compliance milestones per jurisdiction
⏱ 4–6 weeks
AI Governance Frameworks
Healthtech · Sweden
ISO 42001 implementation for high-risk clinical AI systems
Medical technology company using AI for diagnostics and clinical decision support. High-risk EU AI Act classification, ISO certification path required.
→
ISO/IEC 42001 selected and implemented as primary framework
→
EU AI Act requirements integrated: risk management, human oversight
→
Full model lifecycle processes: data → training → validation → monitoring
→
Annex IV documentation and audit trail for regulators
⏱ 6–7 weeks
Digital Persona IP
Content Creator · UK
IP strategy and deepfake enforcement for a top content creator
UK creator with millions of followers. Unauthorised deepfakes, unofficial AI voice clones, and unlicensed merchandise appearing commercially.
→
Digital persona documented as formal IP asset
→
Trademark filings for name, logo, and catchphrases in EU and North America
→
Official AI clone licensing with royalty model and permitted use cases
→
Enforcement toolkit: takedown templates and escalation criteria
⏱ 4–6 weeks
AI Avatar Licensing
AI Avatar Platform · USA
Three-party rights framework for a B2B avatar platform
Platform enabling users to create photorealistic video avatars for marketing and training. B2B clients wanted broad rights including modification and sublicensing.
→
GDPR-compliant consent flow: separate consents for appearance, voice, use context
→
B2B license structure: platform sub-licenses defined rights without transferring personality rights
→
Prohibited use list: political advertising, adult content, sensitive topics
→
Consent withdrawal procedure with B2B license sunset clause
⏱ 4–6 weeks
Synthetic Media
News Publisher · UK
Cross-jurisdiction synthetic media policy for a global news publisher
UK news holding using generative AI for illustrations and video reconstructions. EU AI Act, UK Online Safety Act, and US political deepfake laws all applicable simultaneously.
→
Editorial synthetic media policy: when AI content is permitted and how it must be labelled
→
EU AI Act Article 50 workflow: text disclosure and machine-readable markers
→
Prohibited scenarios: no AI-generated fake quotes, no realistic deepfakes of public figures
→
Platform synchronisation: auto-labels for YouTube and Meta disclosure requirements
⏱ 5–8 weeks
Post-Mortem Digital Identity
Digital Legacy Platform · Germany
Post-mortem AI avatar framework for a digital legacy service
Platform enabling users to train personal AI avatars for post-mortem family interaction. Operating in EU and UK. No formal consent structure, risk of family conflict and regulatory challenge.
→
Multi-layer lifetime consent: separate consents for avatar creation, post-mortem use, access permissions
→
In-platform digital will: duration, format, access list, monetisation prohibition
→
Death verification and avatar activation/deactivation procedure
→
Ethics framework enabling hospice and clinic partnerships
⏱ 4–6 weeks
Working on a similar project?
Initial consultation is free. We respond within 24 hours.
Or email us directly: info@wcr.legal