Comprehensive Monthly Corporate Legal Retainer Scope Manual
The monthly retainer scope should mirror the work that actually repeats. A business obtains more value when recurring legal tasks are standardised, escalations are defined, and complex projects are separated. The retainer should make legal support predictable without creating an unlimited obligation that neither side can manage.
This section treats the topic as a legal-operations system. The aim is to identify the business trigger, legal rule, responsible owner, required evidence, escalation path and completion proof so the company can manage legal risk consistently rather than through isolated emails.
1. NDA review
Business and legal issue. Routine confidentiality agreements can use an approved template and defined fallback positions. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
2. Customer MSA
Business and legal issue. Standard customer contracts should have liability, indemnity, payment, IP, data and termination escalation rules. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
3. Statements of work
Business and legal issue. SOWs should align with the master agreement and clearly define deliverables, acceptance, price and change control. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
4. Vendor agreements
Business and legal issue. Critical vendors require attention to dependency, service levels, security, continuity and termination assistance. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
5. Purchase/work orders
Business and legal issue. Operational orders should not accidentally override negotiated master terms or create conflicting obligations. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
6. Consultancy agreements
Business and legal issue. Consultant scope, confidentiality, IP ownership, payment and classification risk should be standardised. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
7. Distribution/channel agreements
Business and legal issue. Territory, targets, exclusivity, pricing and termination should be escalated based on commercial impact. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
8. Licence agreements
Business and legal issue. Scope of licence, restrictions, fees, IP ownership and termination should be reviewed consistently. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
9. Contract amendments
Business and legal issue. Amendments should identify exactly what changes and preserve unaffected terms. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
10. Termination notices
Business and legal issue. Notice rights, cure periods and consequences should be reviewed before the business communicates termination. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
11. Demand notices
Business and legal issue. Payment/default notices should preserve contractual and limitation rights without unnecessary admissions. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
12. Reply to notices
Business and legal issue. Responses should be coordinated with business facts, evidence preservation and dispute strategy. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
13. Employment offers
Business and legal issue. Appointment documentation should reflect role, compensation, probation, confidentiality and applicable policy. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
14. Employee warnings
Business and legal issue. Disciplinary communication should be fact-specific and consistent with policy and fair process. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
15. Employee exits
Business and legal issue. Resignation, termination, full-and-final, access removal and IP/confidentiality should be coordinated. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
16. Consultant exits
Business and legal issue. Return of information, IP, devices and payment closure should be handled separately from employee processes. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
17. Policy review
Business and legal issue. HR, data, procurement and code-of-conduct policies should be reviewed on a planned cycle. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
18. Board notes
Business and legal issue. Routine legal inputs for management/board decisions may be included subject to defined complexity. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
19. Corporate approvals
Business and legal issue. Counsel should coordinate with CS teams on legal analysis while preserving role clarity. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
20. Compliance questions
Business and legal issue. Day-to-day interpretation can sit within retainer while filings may remain with other professionals. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
21. Regulatory notices
Business and legal issue. Initial triage can be included, but inspections and formal proceedings may require separate scope. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
22. Data/privacy clauses
Business and legal issue. Customer and vendor data terms should use standard positions and security-team input. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
23. Security questionnaires
Business and legal issue. Legal should coordinate contractual representations with actual technical controls. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
24. Incident response
Business and legal issue. Routine advice may be included while major breach response can trigger a crisis work order. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
25. IP ownership
Business and legal issue. Employee and contractor assignments should be reviewed to protect company ownership. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
26. Trademark coordination
Business and legal issue. Brand strategy can be advised under retainer while prosecution/opposition is separately handled. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
27. Pre-litigation disputes
Business and legal issue. Evidence preservation, contract analysis and settlement options should be addressed before filing. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
28. Litigation management
Business and legal issue. The retainer can coordinate external counsel, next dates and management reporting even if appearances are separate. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
29. Arbitration notices
Business and legal issue. Initial assessment should preserve rights while the substantive arbitration mandate is scoped. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
30. Due diligence support
Business and legal issue. Routine document readiness may be included but large investor/M&A diligence should be a project. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
31. Monthly dashboard
Business and legal issue. Open matters, risks, deadlines and decisions required should be reported in a concise management format. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
32. Template library
Business and legal issue. Approved versions should be controlled so teams do not circulate obsolete documents. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
33. Clause library
Business and legal issue. Fallback positions should be documented for recurring negotiation issues. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
34. Legal intake
Business and legal issue. A standard instruction form should capture objective, deadline, counterparty, documents and owner. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
35. Matter closure
Business and legal issue. Every completed task should have a final document or clear closure record. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
Legal-operations checklist
- Included contract types
- HR scope
- Notice scope
- Policy scope
- Compliance scope
- Litigation carve-out
- Transaction carve-out
- Template control
- SLA
- Monthly reporting
- Extra-work approval
Management questions
- Which contract types recur most?
- How many negotiation rounds are expected?
- Which HR matters are routine versus sensitive?
- Is litigation coordination included?
- Who controls templates?
- What constitutes emergency work?
- What should always be separately priced?
Final operating principle
Good legal operations turn obligations and advice into repeatable controls. The organisation should be able to identify what is due, who owns it, what evidence proves completion, what risk remains open and what decision management must make. That discipline is more valuable than a long list of laws with no operating responsibility.
