The Role We're looking for a compliance intern to support our privacy and AI governance program under the supervision of the Chief of Staff. This is a hands-on opportunity to build practical skills in data privacy, AI governance, and SaaS commercial compliance at a growth-stage technology company.
Responsibilities
Translate complex legal and regulatory requirements into clear, actionable guidance for business stakeholders
Monitor developments in state privacy laws, AI regulation, and enforcement trends
Proactively identify risks and map them to targeted mitigation strategies
Maintain the company's internal policy framework, including the acceptable use policy, model whitelist/blacklist, and incident response plan, et al.
Partner cross-functionally with marketing, engineering, product, and sales
Conduct vendor risk assessments and data privacy audits
Prepare research memos and compliance summaries for internal stakeholders
Track and apply regulatory requirements. Monitor privacy and AI regulations across jurisdictions, assess how and when they apply to Acres, and recommend updates to our policies, terms, and practices as the business grows.
Privacy operations. Build and run the processes that handle privacy obligations day to day, including data subject requests, and train teams across the company to execute them consistently, timely, and compliantly.
Manage contract and vendor compliance. Review vendor terms, data processing agreements, and security posture; maintain visibility into key terms and obligations across our agreements, using AI tooling to make contracts searchable and reportable.
Built compliance solutions. Stand up trackers, dashboards, and workflows that make compliance measurable instead of ad hoc.
Operationalize privacy for the whole company. Create internal processes, checklists, and plain-English guidance that let non-legal teams handle data responsibly, and keep our policy library current as the business evolves.
Need to have
Current graduate student (JD, LL.M., MIS, business analytics, MBA, or similar), upper-level undergraduate (MIS, data science, business, computer science, or similar), or 1–2 years of professional experience in compliance, privacy, risk, audit, or operations.
Experience in privacy, regulatory compliance, or risk management; coursework or IAPP study a plus
Strong research and writing skills: you can turn dense source material into clear, actionable guidance and effective training.
Comfort with data and systems: spreadsheets at minimum; AI tools, data mapping, or analytics coursework is a plus.
An operator's mindset: you build processes, close loops, and work independently when the path isn't fully defined.
Nice to have
Coursework or experience in privacy (e.g., GDPR, CCPA/state privacy laws), cybersecurity, or AI governance.
Familiarity with vendor risk assessment, DPAs, SOC 2 Type II.
Experience using AI tools (Claude, ChatGPT, etc.) for document review or workflow automation
Interest in real estate, agriculture, or geospatial data