If your site is bound by the EU AI Act, your state bar's advertising and UPL rules, or FTC disclosure standards, those are engineering requirements — not a legal review you bolt on the week before launch. We build the product with them compiled in, and hand you the evidence that they are.
Thirty-five years in securities law, regulatory compliance, and forensic examination — writing the code, not reviewing it after someone else did.
Most sites are designed first and reconciled with the law later, which is why the fixes are expensive and the disclosures read like an afterthought. These are the regimes we build to from the first commit.
One EU-resident user is enough to pull a US site into scope. Chatbots, triage widgets, and AI-drafted client communications are the usual entry point.
Law-firm sites, intake portals, and anything that answers a legal question in a user's own words.
Every claim, price, review, subscription, and email your site sends. The rules that turn a marketing decision into an enforcement exposure.
The statute that governs your industry specifically, and the plaintiff's bar that reads your source code before you do.
This is the regime clients underestimate most, so it gets its own section. The disclosure, transparency, and human-oversight obligations landing on EU deployers today are the same ones US regulators, state AGs, and bar associations are adopting for tomorrow — which means building to them once solves both.
Article 5
Prohibited practices
Social scoring, manipulative dark patterns, and certain biometric inference are banned outright. A law-firm chatbot that pressures a lead or infers sensitive attributes can fall inside this line without anyone noticing.
Article 50
Users must know they're talking to AI
Any AI system that interacts with a natural person requires a clear, machine-readable disclosure. Synthetic content — including AI-drafted client communications — must be labeled. Most law-firm sites are not built this way.
Annex III
High-risk classification
AI used in access to justice, immigration, credit, or employment screening is high-risk. That triggers risk management, data governance, logging, human oversight, and conformity assessment — engineered in, not bolted on.
Penalties
Up to €35M or 7% of global turnover
Enforcement is not theoretical. Even a US-only firm that markets remotely and accepts an EU-resident client can be pulled into scope through the Act's extraterritorial reach.
Two questions I ask on every single intake
If either answer is "I'm not sure," those answers belong in the build spec — before the next line of code is written.
What I explicitly build in
Not a policy page and a cookie banner. These are engineering decisions made at schema and routing time, when they are still cheap.
Rule text becomes acceptance criteria, acceptance criteria become tests, and the handoff includes the evidence that each one passes.
Ship Log · 98 Days
Two production legal-tech platforms shipped in 98 days — independently estimated at $250K–$400K to procure through traditional vendors.
85+
Production Routes
87
Server Modules
58
Database Tables
RLS
Row-Level Security
HMAC
Verified Integrations
App Store
Approved Mobile App
DetencionDefensa.com
Immigration-defense intake, limited-scope engagement gating, and IOLTA-aware payment flows for detained-family emergencies.
SaveMyHomeTrust.io
Foreclosure-defense and trust-services platform with RESPA-compliant lead models and consumer-protection disclosures.
Compliance Engineered In
The SEC Work Behind It
What we build
Law-firm sites and client intake
Websites and intake portals designed around your state's advertising and ethics rules — disclaimers, testimonials, specialization claims, intake boundaries, engagement-letter workflows, and trust-account-aware payment flows.
Legal-AI products with guardrails
If you're building or deploying AI for legal services, we classify what it is under the Act, map what it can and cannot do, and build the UPL boundaries, disclosures, oversight checkpoints, and logging into the product itself.
Regulated fintech, real estate, and health platforms
Platform builds for lending, trust services, real estate, and health-adjacent workflows that have to satisfy RESPA, GLBA, HIPAA, SEC, and consumer-protection requirements to ship at all.
Regulated commerce and subscription flows
Storefronts, funnels, and recurring-billing products built to FTC advertising, endorsement, and negative-option standards — with the substantiation trail behind every claim on the page.
Review and remediation of an existing site
Already built and unsure where you stand? A fixed-fee review against the four rulebooks, with a prioritized fix list your developer can execute — or that we execute for you.
Solo and small-firm attorneys, immigration and consumer-facing practices, legal-tech and legal-AI startups, and real estate, fintech, and health companies operating in regulated space.
We build with modern AI-assisted development. The last two platforms — independently estimated at $250,000–$400,000 through traditional vendors — were built for a fraction of that. You get the compliance expertise and the build in one engagement, fast.
New builds and rebuilds
Most engagements start with a short scoping call: what the product does, who it touches, and which of the four rulebooks apply. You'll leave that call knowing your exposure whether or not we build it.
LOC
Miami, FL
Miami, FL · Serving clients nationwide (remote)
EML
rbjd@dr.com
Direct line for engagement inquiries
LKD
Ricky Bitelman-Behar, JD
linkedin.com/in/ricky-bitelman-behar-jd
See the live platforms: DetencionDefensa.com · SaveMyHomeTrust.io · SaveMyHomeTrust.com