The Broad Axe, PLLC

What The Broad Axe, PLLC does

The Broad Axe, PLLC is a privately-held privacy and data management law firm headquartered at 159 W Broadway, Suite 200, Salt Lake City, Utah. The firm is structured as a Professional Limited Liability Company (PLLC) and operates with a small team of two attorneys: founder Tomu Johnson, an experienced privacy attorney with approximately a decade of practice and prior experience as Senior Vice President of Privacy and Global Corporate Counsel for Teleperformance Group, Inc.; and Eric Cordova, an associate attorney holding a Juris Doctorate and Master of Science in Information Systems from the University of Utah, along with four IAPP certifications (CIPM, CIPP/E, CIPP/US, CIPP/A). The firm targets businesses of all sizes that need assistance designing, implementing, and maintaining privacy programs in response to evolving international, national, and state privacy laws.

The Broad Axe delivers three integrated service lines under a single practice: (1) Policy and Procedure Development, encompassing drafting of privacy policies aligned with new regulations; (2) Implementation, including data subject requests, data protection impact assessments, program reviews, and governance org charts; and (3) Ongoing Management, providing continuous privacy program monitoring, risk assessments, and data processing agreement oversight. The firm operates as a professional services entity and does not develop proprietary technology; its core "product" is legal expertise delivered through structured engagements.

The firm's commercial model is differentiated from traditional legal practice. Rather than hourly billing, The Broad Axe offers three flat-fee monthly subscription tiers — up to 5 hours/month at $2,000, up to 8 hours/month at $2,850, and up to 12 hours/month at $3,500 — with no annual contract required. The model is explicitly positioned as a cost-effective alternative to hiring in-house privacy counsel ($150k+/year) or engaging outside counsel at $600+/hour. Distribution is direct-to-client via the firm's website (thebroadaxe.us), with no intermediaries, partnership channels, or marketing infrastructure beyond the website itself. Geographic reach is North America, served remotely with regular client team meetings.

Name

The Broad Axe, PLLC

Legal name

The Broad Axe, PLLC

Website

https://thebroadaxe.us

Company type

Private

Operating status

Operating

Headcount range

1–10 employees

Short description

The Broad Axe is a Salt Lake City-based privacy and data management law firm offering flat-fee monthly subscription legal services to businesses of all sizes needing privacy program design, implementation, and ongoing compliance management support.

Ownership category

akta.pro rank

Product category

Privacy and Data Management Legal Services

NAICS

Legal Services (5411)

SIC

Services-Legal Services (8111)

akta.pro primary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

Keywords

• Privacy law services
• Data management counseling
• Privacy program management
• Compliance advisory services
• Legal subscription services

Headquarters

HQ city

Salt Lake City

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Legal Services Subscription: The firm operates on a flat-fee monthly subscription model providing privacy law services. Clients pay a fixed monthly fee for access to legal counsel and privacy program management services, with different tiers based on hours of service included (5, 8, or 12 hours per month). The month-to-month structure with no annual contract provides flexibility.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels1 record

Core offering

The Broad Axe, PLLC is a privacy and data management law firm that delivers ongoing legal counsel for designing, implementing, and managing business privacy programs. Services are sold via flat-fee monthly subscriptions ($2,000-$3,500/month) that include 5, 8, or 12 hours of attorney access, structured around three practice areas: Policy and Procedure Development, Implementation, and Ongoing Management.

Product overview

The Broad Axe is a privacy and data management law firm offering a single integrated service portfolio of legal and compliance solutions for privacy programs. The firm provides three interconnected service lines: Policy and Procedure Development (drafting privacy policies and procedures), Implementation Services (executing data subject requests, DPIAs, and program reviews), and Ongoing Management (continuous monitoring and reporting). All services are delivered through a flexible flat-fee subscription model with tiered hourly allocations, allowing clients to scale engagement as needed without annual commitments.

Differentiator

Problem solved

Functional benefit

Products and services

• Policy and Procedure Development Drafting of privacy policies and procedures to help businesses keep pace with constantly evolving privacy regulations, guidance, and government advice. Designed for businesses that need to holistically manage privacy compliance and stay ahead of regulatory change.
• Implementation Hands-on implementation of a client's privacy program, covering data subject requests, data protection impact assessments (DPIAs), privacy program reviews, and the development of departmental org charts to govern privacy across the organization. Targeted at businesses that need execution support, not just policy drafting.
• Ongoing Management Continuous oversight of a client's privacy program, delivered through regular reports, routine assessments, and ongoing updates on key issues such as projects requiring privacy risk assessments, data events, privacy requests, and data processing agreements. Marketed as the answer to the fact that privacy requires ongoing management rather than one-time policy drafting.

Segments1 record

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Scale indicators1 record

Recent moves3 records

Expansion highlights4 records

Others

• IAPP (International Association of Privacy Professionals): Industry body setting the privacy profession's certifications (CIPP, CIPM) and education. Not a competitor, but a relevant adjacent ecosystem player — The Broad Axe's team certifications are IAPP-issued, positioning the firm within this professional community.

Emerging players

• TrustArc: Privacy compliance and risk management SaaS platform offering consent management, privacy assessments, and program automation — an alternative/complement to legal-counsel-driven privacy program management similar to what The Broad Axe delivers.
• OneTrust: Privacy management software platform automating consent, DSAR, RoPA, and DPIA workflows — directly addressing the operational tasks The Broad Axe delivers via human legal services. A technology substitute/adjacent that competes for the same client compliance budget.

Broad incumbents

• Mayer Brown (Privacy & Cybersecurity): Global law firm with a dedicated privacy and cybersecurity practice advising on US, EU, and APAC regimes. Comparable in cross-jurisdictional privacy advisory work, but with broader corporate practice and enterprise-grade clients.
• Deloitte (Privacy & Data Protection Consulting): Big Four advisory practice with a large privacy and data protection consulting arm offering privacy program design, GDPR/CCPA compliance, and managed services. Competes for the same enterprise privacy program work but at a far larger scale and broader service scope.
• Wilson Sonsini Goodrich & Rosati (Privacy): Premier tech-focused Am Law firm with a privacy and data protection group serving technology and growth companies. Comparable in serving businesses navigating privacy regulation, but with a much broader corporate and tech-transaction platform.
• BakerHostetler (Privacy and Data Security): Large Am Law firm with a nationally recognized privacy and data security practice. Comparable in privacy program and incident response services, but operates as part of a full-service firm rather than a niche boutique.
• Buchanan Ingersoll & Rooney (Privacy Practice): Full-service Am Law firm with a substantial privacy and data security practice serving mid-market and enterprise clients. Comparable to The Broad Axe in offering privacy program support, but with much broader portfolio, scale, and enterprise reach.

Direct peers

• Hintze Law PLLC: Boutique privacy and data security law firm offering outside counsel services to businesses of all sizes across data protection, breach response, and compliance — directly comparable to The Broad Axe's privacy-focused legal services and SMB/mid-market positioning.
• Pearl Cohen Zedek Latzer Baratz: Boutique law firm with strong privacy, data protection, and technology practices serving technology-driven and growth-stage companies. Comparable to The Broad Axe in privacy-counsel positioning and SMB/mid-market client focus.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/the-broad-axe-pllc

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about The Broad Axe, PLLC