Redefining Healthcare with AI
Xsolis is an AI-driven technology company reducing administrative waste in healthcare by enabling smarter collaboration between providers and payers. Since 2013, our vision has been to create a frictionless healthcare system.
We are proudly headquartered in Franklin, TN - one of the nation's fastest-growing hubs for healthcare innovation - we are at the heart of a thriving ecosystem of health systems, payers, and technology leaders.
Our flagship product, Dragonfly®, is the first and only AI-driven platform to continuously assign real-time predictive scores for medical necessity. Dragonfly has delivered proven results across 600+ hospital, health system, and health plan clients and earned repeated industry recognition. With recognition on the Inc. 5000 and Deloitte Technology Fast 500 lists, Xsolis is also one of the fastest-growing privately-held companies in the country and across North America, and we're looking for talented people to grow with us.
Position Summary Details
This position will have varied responsibilities among the legal function and compliance. The Corporate Counsel will review agreements, draft policies and procedures, and is responsible for counseling internal departments on the current regulatory status on various industries, including healthcare, technology, privacy, artificial intelligence, and other compliance matters as necessary. XSOLIS’ Legal and Compliance department is a lean team with lots of opportunities for early stage creation and development of legal operations and compliance infrastructure.
Essential Duties & Responsibilities
The essential functions include, but are not limited to the following:
Contract Review & Transactional Support
- Draft, review, redline, and negotiate customer (client) agreements, including SaaS/subscription agreements, data use agreements, and business associate agreements (BAAs)
- Review and negotiate vendor, supplier, and third-party service agreements, including software licenses, data processing agreements, and subcontractor BAAs
- Maintain contract templates, playbooks, and negotiation guardrails in coordination with the General Counsel
- Track contract obligations, renewal dates, and key terms; support contract lifecycle management (CLM) processes
Compliance Program Support
- Assist in building, leading, and maintaining core elements of the corporate compliance program, including HIPAA/HITECH privacy and security compliance, state privacy laws, and emerging AI-specific regulations
- Draft, revise, and implement internal policies and procedures (e.g., privacy, information security, data governance, AI governance, vendor management, incident response)
- Support rollout and training on new and revised policies across the organization
- Assist with compliance monitoring, internal audits, and risk assessments
- Support incident response and breach investigation/notification processes as needed
Legal Research & Regulatory Tracking
- Conduct legal research on healthcare regulatory matters, including HIPAA, state health data privacy laws, and AI/algorithmic accountability laws
- Monitor and track legislative and regulatory developments affecting clinical data, health technology, and AI, and translate findings into actionable guidance for the business
- Prepare memoranda summarizing legal and regulatory developments and their business impact
Reporting & Analysis
- Compile reports, trackers, and dashboards related to compliance metrics, contract status, and regulatory developments for the General Counsel and leadership
- Support preparation of materials for board, audit, or compliance committee reporting as requested
General Legal Support
- Provide day-to-day legal support across departments (sales, product, engineering, HR, marketing) on contract and compliance-related questions
- Assist with various corporate matters and legal projects as assigned by General Counsel
- Manage or support outside counsel engagements on discrete matters as needed
Minimum Qualifications (Knowledge, Skills, and Abilities)
Education:
- Juris Doctor (J.D.) degree from an ABA-accredited law school
- Active license to practice law in good standing in at least one U.S. jurisdiction Tennessee preferred (or eligibility for in-house/registered in-house counsel status in the state of employment)
Experience:
- 1–4 years of relevant legal experience, in a law firm, in-house legal department, or healthcare/technology regulatory environment
- Experience with, or strong working knowledge of, HIPAA/HITECH and healthcare data privacy regulations preferred
- Experience drafting and negotiating commercial/SaaS agreements preferred
- Exposure to compliance program development or policy drafting preferred
- Experience or familiarity with health technology, digital health, clinical data, or AI/machine learning legal and regulatory issues strongly preferred
Other:
Strong legal research, writing, and analytical skills, with the ability to translate complex regulatory requirements into clear, practical guidance
- Excellent organizational skills with the ability to manage multiple projects and deadlines independently
- High degree of professionalism, discretion, and sound judgment in handling sensitive and confidential information
- Strong interpersonal and communication skills, with the ability to work cross-functionally with business, technical, and clinical stakeholders
- Detail-oriented with a demonstrated ability to work both independently and collaboratively within a small legal team
- Genuine interest in healthcare technology, clinical data, and artificial intelligence, with a willingness to continuously learn in a fast-evolving regulatory landscape
- Certified Information Privacy Professional (CIPP/US) or similar privacy/compliance certification a plus, or willingness to obtain within a defined period
- Reports directly to the General Counsel
Supervisory Responsibilities
This role does not have any direct reports and is a single contributor role. The Legal and Compliance team is made up of the General Counsel, Corporate Paralegal, and a GRC analyst. The Corporate Counsel will need to work cooperatively with technology and operations teams as well as virtually all departments to gather information and properly advise.
Working Environment and Travel Requirements
- Work is typically in a normal office administrative environment involving minimal exposure to physical risks.
- Position requires little to moderate physical activity. Mostly sedentary work exerting up to 10 pounds of force occasionally or a negligible amount of force to lift, carry, push, pull, or otherwise move objects. Work involves sitting most of the time, but may involve walking or standing for brief periods of time. No significant stooping is usually required.
- This role requires travel to our home offices in TN for training.
Physical Demands & Work Environment
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position.
Reasonable accommodations may be made to enable individuals with disabilities to perform the functions.
In any role at Xsolis, it's a chance to make a complex healthcare system a little more efficient alongside a team that's passionate, fast-moving, and genuinely invested in your success. Your contributions will shape both our product and our culture.
Full-time Employees’ Total Rewards package include:
- Medical/Dental/Vision insurance
- Educational reimbursement program
- Employer-paid EAP & Mental Health services
-------
Xsolis is proud to be an equal opportunity employer. We celebrate diversity and are committed to building an inclusive environment for all. We encourage candidates of every background to apply.
All candidates must successfully pass a background check and fall under the same security role, which includes access to sensitive information, including proprietary data and PHI.
Work Authorization Notice: Please note that we do not provide visa sponsorship or immigration support for this position. Applicants must already be authorized to work in the United States on a full-time, permanent basis without the need for current or future sponsorship.
All official communications from our recruitment team will only come from @xsolis.com. Verify open roles at https://www.xsolis.com/about/careers. For information regarding how we collect, use, and protect applicant personal information, please review our CCPA Privacy Notice for Job Applicants.
