Compliance Counsel

Smartsuite
Smartsuite

Legal

Posted on Nov 10, 2026
Governance, risk and compliance

SmartSuite for the Compliance Counsel

Compliance Counsel is the lawyer embedded in the compliance program. They interpret regulations, advise on obligations and policy wording, support investigations and regulatory responses, and make sure compliance decisions are legally defensible and documented.

Start free trial
Schedule a demo
Share
LinkedIn
X
Email
Copy link

Reports to:

Previous article
Next article

What you own

Compliance Counsel is the lawyer embedded in the compliance program: interpreting regulations, advising on obligations and policy wording, supporting investigations and regulatory responses, and keeping compliance decisions legally defensible and documented.

  • Interpret regulations and advise on their application to the business
  • Review policies, procedures and training for legal accuracy
  • Support compliance investigations and privilege decisions
  • Draft and review responses to regulatory inquiries
  • Advise on remediation and self-disclosure decisions
  • Track legal developments affecting the compliance program

At a glance

The GRC processes this role owns, touches and depends on.

Owns

accountable for the process

Compliance management

Touches

contributes or approves

Policy managementPrivacyThird-party risk

Depends on

consumes its output

Risk management

How the GRC processes connect

Three lines of defence set the frame; the chain shows where each process hands off to the next. Colours follow the Compliance Counsel: navy is owned, blue is touched, grey is depended on.

  1. First lineThe business and its control ownersRun the processes, own the controls, fix the issues
  2. Second lineRisk, compliance and the domain programmesSet the frameworks, assess, monitor and advise
  3. Third lineInternal auditIndependent assurance to the board and audit committee

Reporting lines

Who this role reports to, who reports to them, and the peers they work with most.

Reports to

General Counsel

See the role

Direct reports

Works closely with

Compliance Director

See the role

Regulatory Affairs Manager

See the role

Ethics and Compliance Lead

See the role

Privacy Counsel

See the role

Chief Compliance Officer

See the role

How SmartSuite supports the Compliance Counsel

The compliance program stands on your interpretations, and the General Counsel, the Chief Compliance Officer and any regulator expect them to be documented and defensible. SmartSuite gives Compliance Counsel a place to record advice against the obligation it affects, review policies with version history and run investigations as restricted cases with their own document log.

Interpret regulations and keep advice defensible

Why a requirement is read that way

Legal Matter Management records each interpretation as a matter linked to the obligation, policy or control it affects, so when the Regulatory Affairs Manager asks why a requirement is read a certain way the reasoning is there.

Legal Operations suite
Obligations drafted from new rules

The AI Assistant in a SmartDoc field drafts a summary of regulatory text and a first list of obligations for your review, so analyzing a new rule starts from a draft list of duties rather than a blank page.

Legal Operations suite
Legal developments tracked with their deadlines

A legal calendar holds filings, effective dates and review obligations with automated reminders, so a change in law affecting the program is tracked to a date rather than a note.

Legal Operations suite

Work with compliance, regulatory affairs and privacy

Which wording you approved and when

Policy Management routes drafts through legal review and approval with version history, so the Ethics and Compliance Lead can show which wording you approved and when it changed.

Compliance Management suite
Privilege protected by restricted access

Investigations run as cases with access limited to counsel and named reviewers, so the structure that protects privilege is enforced by permissions rather than by reminding people what not to forward.

Compliance Management suite
One file for you and the Compliance Director

Regulatory Inquiries holds the request, the documents supplied, draft responses and deadlines together, so you and the Compliance Director answer from one file rather than from parallel email threads.

Compliance Management suite

Keep the General Counsel and the CCO informed

The weekly check starts from current workload

Dashboards show open compliance matters, regulatory inquiries, their owners and their deadlines, so your weekly check with the General Counsel starts from current workload rather than a verbal update.

Legal Operations suite
Remediation advice tied to the finding

Advice on remediation or self-disclosure is recorded against the specific compliance finding it concerns, so the decision and its legal basis stay together for anyone who later reviews it.

Compliance Management suite
A document log that stands up in review

Every document, decision and approval in a matter or investigation is retained with its history, so if a regulator or a court later asks what was known and when, the record answers.

Legal Operations suite

Compliance management. Links legal requirements to obligations, policies and controls so counsel's interpretations are recorded against the obligation they affect.

Policy management. Routes policies through legal review and approval with version history.

Issues and actions. Supports investigations and regulatory responses as cases with restricted access and document logs.

Reporting. Gives counsel a view of open compliance matters, inquiries and deadlines.

Products this role uses most

Policy Management
Centralize creation, approval, and publication of policies with full lifecycle tracking and attestations, ensuring they remain current, accessible, and auditable.
Explore this product
Regulatory Inquiries
Manage regulatory requests and exams with response workflows, evidence on each inquiry record, and visibility into status and deadlines.
Explore this product
Legal Matter Management
Track and manage legal matters, cases, and workflows with real-time visibility across legal operations.
Explore this product
Compliance Assessments & Testing
Manage assessment campaigns and testing schedules with a reusable question library, automated workflows, and one place for evidence collection.
Explore this product

Industry reference

The ACC's in-house counsel competencies and the SCCE's compliance and ethics practice describe the role; the DOJ's compliance program evaluation and the FCPA set much of the subject matter. Privilege over investigations, defined in US law by Upjohn, shapes how counsel structures inquiries and documents advice.

Sector rulebooks determine the daily questions: securities and banking law for financial firms, the Anti-Kickback Statute, Stark Law and HIPAA for healthcare, procurement and ethics statutes for public bodies, and privacy, export control and consumer protection law for technology companies.

Related roles

General Counsel

See the role

Frequently asked questions

Compliance Counsel is the lawyer embedded in the compliance program: interpreting regulations and advising on their application, reviewing policies, procedures and training for legal accuracy, supporting investigations and privilege decisions, drafting and reviewing responses to regulatory inquiries, advising on remediation and self-disclosure and tracking legal developments that affect the program. Their job is to make compliance decisions legally defensible and documented, and SmartSuite is where that documentation lives alongside the obligations it concerns.

SmartSuite links legal requirements to the obligations, policies and controls they give rise to, so counsel's interpretation is recorded against the obligation it affects rather than in an email or memo that later cannot be found. When the Compliance Director asks why a control is designed as it is, or a regulator asks how a requirement was read, the interpretation and its date are on the obligation. Compliance Assessments & Testing then tests against that reading.

Policy Management routes policies through legal review and approval with version history, so counsel reviews the exact draft the policy owner proposes, records the approval and can later show which wording was approved and when it changed. Procedures and training materials can follow the same route. The Regulatory Affairs Manager and Ethics and Compliance Lead, who own many of the policies, see counsel's review status without asking.

Investigations and regulatory responses are handled as cases with restricted access and document logs, so privilege can be protected by limiting who sees the case and the record shows what was collected and when. Regulatory Inquiries holds the inquiries with their deadlines and the responses counsel drafts, and Legal Matter Management holds matters that escalate beyond compliance, so an investigation that becomes a legal matter carries its record with it.

SmartSuite gives counsel a view of open compliance matters, inquiries and deadlines, so nothing that needs a response or a privilege decision is lost between the General Counsel's priorities and the Chief Compliance Officer's. Counsel reports into both, and the shared view means each sees the same open list and the same deadlines, with the Privacy Counsel's matters visible where they overlap with compliance ones.

Counsel starts with the obligations the program already tracks and the policies due for review, recording interpretations as they are given rather than back-filling history. Open inquiries and investigations are entered as cases with their access restrictions set. New customers can start with SmartSuite Onboarding, a guided four-week program around one or two priority workflows, and from then the record of legal advice accumulates where the compliance team works, which is what makes a decision defensible when it is questioned years later.

See SmartSuite for your role

Start a free trial, or book a demo and we will walk through your role's workflows in SmartSuite.

Start free trial
Schedule a demo