UK SaaS Legal Documents Bundle

UK SaaS Legal Documents Bundle — Terms, Privacy Policy, Partner Agreement + International Compliance
We're looking for a UK-qualified solicitor or legal professional with SaaS and data protection experience to draft a complete legal document bundle for our digital estate vault platform (mytreasurechest.net).
About the product:
My Treasure Chest is a UK-headquartered SaaS platform that allows individuals to securely store details of their financial assets, insurance policies, property, legal documents and passwords in an encrypted online vault. The platform includes a B2B white-label offering for professional firms (solicitors, will writers, IFAs) and a mobile app with an AI-powered voice assistant.
Documents required (6 core + international provisions):

Terms of Service (B2C) — subscription SaaS, vault usage, AI features, delegation/estate activation
Privacy Policy — multi-jurisdiction (UK GDPR, CCPA, LGPD, PIPEDA, Australian Privacy Act) with "Your Rights by Region" section
Cookie Policy — PECR compliant, aligned with existing consent banner
B2B Partner Agreement — white-label SaaS, wholesale pricing model, reusable template with customisable schedules
Data Processing Agreement (DPA) — GDPR Article 28, sub-processor list, cross-border transfers
Acceptable Use Policy

Key complexities that set this apart from a standard SaaS brief:

AI voice assistant powered by Anthropic's Claude API — documents must address AI data processing, transient voice transcript handling, and UK→US cross-border transfers
EU AI Act transparency provisions (enforcement August 2026)
Estate activation process — legally sensitive workflows involving death certificates, delegate confirmations, and vault access
Encrypted vault data — we cannot read user data (Always Encrypted), which affects our obligations
Mobile app on Apple App Store and Google Play — Privacy Policy must satisfy both store review processes
International from launch — app available globally, need compliance provisions for UK, EU, US (CCPA), Canada, Australia, Brazil

We will provide:

Detailed technical brief (already written — 12 sections covering architecture, data flows, AI processing, cross-border transfers, App Store requirements)
Anthropic API terms and data processing documentation
Mobile app architecture document
Quick turnaround on all questions

Requirements:

UK-qualified solicitor or legal professional
Proven experience with SaaS/tech agreements and UK GDPR
Experience with international data protection frameworks (CCPA, LGPD, PIPEDA)
Experience with cross-border data transfer mechanisms (SCCs, UK-US Data Bridge)
AI/ML data processing experience strongly preferred
Professional indemnity insurance

Budget: £1500 for the full bundle (open to quotes outside this range if justified). Please quote fixed price with phased delivery option.
Timeline: 6 – 8 weeks, phased — Privacy Policy + Terms + Cookie Policy first (weeks 1-3), then Partner Agreement + DPA + AUP (weeks 3-8).
We have a comprehensive brief document ready to send to shortlisted candidates. Please include relevant experience and a sample (redacted) when responding.