Build, deploy and scale technology products with a legal partner who understands the IT industry — from software and SaaS agreements, through IP and data protection, to new technologies, licensing and investment in technology companies.
Technology companies operate at the intersection of civil law, intellectual property, data protection and, increasingly, AI regulation. We support software vendors and buyers, integrators, SaaS companies and technology businesses at every stage — from implementation and licensing agreements, through GDPR compliance and AI-Act readiness, to investment transactions.
The practice is led by Łukasz Kudela, who specializes in FinTech regulation, AML and intellectual-property law, together with Malwina Guliyev, who advises on IT projects and contracts day to day.
Drafting and negotiating implementation, licensing, SaaS and cloud agreements, SLAs and maintenance agreements, and IT staffing / outsourcing agreements, including for software vendors working with the banking and insurance sectors.
Protecting source code, transferring and licensing copyright in software, agreements with developers and subcontractors (including B2B), and protection of know-how and trade secrets.
GDPR in IT projects (privacy by design, Data Protection Impact Assessments), data-processing agreements, security-incident handling, and support acting as an outsourced Data Protection Officer.
Regulatory advisory on deploying AI systems under the EU AI Act (Regulation (EU) 2024/1689) — risk classification, provider and deployer obligations, compliance documentation; support on blockchain and crypto-asset projects.
Licensing agreements (end-user, reseller, OEM), software distribution models, and competition-law compliance in partner / reseller networks.
Transactional support on investments in technology companies, legal due diligence (including IP and data), investment documentation, and corporate support for IT companies and startups.
Representation in contractual disputes (implementation, licensing), software copyright disputes, and proceedings before regulators.
We work with
A team that knows the technology industry from the angle of law, regulation and IT contracts — from the implementation agreement to GDPR and AI-Act compliance.
Łukasz Kudela
Senior Associate · Legal Counsel · Cryptocurrency Project Manager
Łukasz specializes in civil and commercial law, with a particular focus on competition law, AML regulation and intellectual property. He co-develops compliance systems for FinTech-sector clients and advises technology companies on coordinating the implementation of EU regulations.
Malwina Guliyev
Senior Associate · Legal Counsel
Malwina has spent 5 years supporting IT projects, preparing and administering IT contracts. She has extensive experience advising corporations and public-administration bodies in civil and administrative matters, including telecommunications law and public procurement.
Michał Wołoszański
Managing Partner · INSEAD Global Executive MBA · Legal Counsel
Michał works with the IT industry day to day, advising software vendors serving banks and insurance companies among others, with a particular focus on intellectual property and new-technology law.
An implementation contract governs building and deploying a system — scope, schedule, acceptance and liability for defects. A licence sets the rules for using ready-made software, while SaaS is a subscription service providing access to cloud software.
Each model allocates risk and rights to the result differently — we match the contract structure to the business model and secure SLAs, rights to the code, data and termination.
Ordering and paying for software does not automatically transfer economic copyright — a transfer requires a written agreement expressly listing the fields of use.
Without it, the customer obtains at most a licence and the rights stay with the developer or its programmers. We draft IP clauses so the customer actually acquires the rights and we consolidate rights obtained from subcontractors.
An IT vendor processing a client's personal data usually acts as a processor and must have a data-processing agreement (Article 28 GDPR), appropriate security measures and rules on sub-processing and transfers outside the EEA.
The controller, in turn, is responsible for the legal basis and for handling data-subject rights. We prepare processing agreements, map data flows and support clients during incidents.
The AI Act — Regulation (EU) 2024/1689 — takes a risk-based approach: prohibited practices, requirements for high-risk systems and transparency obligations. It applies in stages: prohibitions from February 2025, obligations for general-purpose AI models from August 2025, and most high-risk requirements from August 2026.
We help classify a system, assess the obligations and prepare the documentation and contracts across the AI supply chain.
The key points are availability and support levels (SLA), data-processing and location rules, business continuity and the exit scenario — data export, a migration window and deletion of copies.
Liability for outages and security breaches is worth regulating too. We negotiate these terms for both vendors and customers so the risk is genuinely balanced.
An investor mainly checks whether the company has clean rights to its IP and code, orderly agreements with the team and subcontractors, and GDPR compliance.
Gaps in these areas lower the valuation or stall the deal at due diligence. We run due diligence, tidy up rights before a round and support negotiations of investment and M&A terms.
Legal position: July 2026. The above is general information about our practice areas, not legal advice in an individual matter.
Let’s talk about how we can protect and accelerate your business — from implementation agreements to GDPR and AI-Act compliance.
Book a call