Veronica brings an uncommon combination of law firm, in-house, and entrepreneurial experience to her practice. As Senior Principal Legal Counsel and Global Privacy & ESG Manager at Cerence AI, a global AI company, she was a member of teams working on privacy and AI-related compliance initiatives for connected and AI-enabled technologies across EMEA, APAC, and North America, working directly with product, engineering, cybersecurity, procurement, and executive leadership. That operational vantage point informs how she structures AI governance frameworks, negotiates AI and technology agreements, and manages third-party and data risk: with an understanding of how legal requirements must work in real products, real vendor relationships, and real organizations.

Veronica also counsels clients through high-stakes cybersecurity incidents, including data breaches, ransomware events, and unauthorized-access matters, and through related regulatory inquiries. She brings that incident and regulatory experience to bear on emerging technology risk, helping clients anticipate how AI adoption reshapes their security, privacy, and liability exposure.

Artificial Intelligence Services

AI Governance and Strategy. Develops AI governance frameworks, responsible AI policies, internal AI-use policies, and risk-management processes, and integrates AI governance into existing privacy, security, and compliance programs and business operations.

AI Contracting. Drafts and negotiates AI-specific contract provisions and addenda addressing permitted AI uses, model training, customer data, intellectual property, confidentiality, security, liability allocation, and regulatory compliance.

AI Vendor Agreements. Reviews and negotiates vendor and technology agreements involving AI tools and services, including restrictions on data use, model training, data retention, and third-party disclosure.

AI Data Governance. Assesses the legal and contractual considerations surrounding AI training data, personal and confidential information, data ownership, permissible uses, and data protection obligations.

AI Risk and Regulatory Compliance. Helps clients identify and manage AI-related legal, privacy, cybersecurity, and regulatory risk, including under the EU AI Act and the NIST AI Risk Management Framework.

AI Adoption and Implementation. Builds practical legal and governance guardrails for adopting and deploying AI, covering employee use, third-party tools, and integration with enterprise risk-management processes.