Corporate Governance and Compliance is a key practice area shaped by Everbright's long-standing dedication to serving our corporate clients. Our team seamlessly integrates governance design, compliance management, and risk resolution. We provide comprehensive legal support to state-owned enterprises (SOEs), listed companies, privately-owned enterprises, foreign-invested enterprises, and other organizations, assisting them in translating complex legal and regulatory requirements into internal mechanisms characterized by clear rights and responsibilities, effective operation, and continuous improvement.

Starting from the fundamentals of equity and control relationships, organizational structures, business processes, and industry regulations, our team refines mechanisms for decision-making, authorization, review, reporting, supervision, and remediation. In the face of major strategic decisions, new business ventures, or shifting regulatory landscapes, we proactively identify risks and propose actionable solutions. Should a compliance incident or regulatory inspection occur, we can rapidly mobilize multidisciplinary expertise across administrative regulation, labor and employment, data and intellectual property, dispute resolution, and anti-fraud investigations. By coordinating fact-finding, regulatory responses, and remediation efforts, we help clients effectively mitigate legal, operational, and reputational risks.

Main service contents：

● Governance Architecture and Authority Matrix
Design of equity and control structures, governance models, and organizational responsibilities; formulation and refinement of articles of association, shareholder agreements, rules of procedure, and authorization and approval systems.

● Governance Operations and Fiduciary Duties
Operational support and meeting witnessing for shareholders' meetings, boards of directors, boards of supervisors, and board audit committees; advisory on the fulfillment of duties by directors, supervisors, and senior management (D&O); management of risks related to connected transactions, conflicts of interest, horizontal competition, and D&O liabilities.

● Development of Compliance Systems
Compliance risk identification and assessment; establishment of compliance organizations and responsibilities; and the development of policies, procedures, checklists, operational guidelines, reporting channels, and mechanisms for supervision and remediation.

● Compliance in Major Decisions and Operations
Compliance review and clearance for major business decisions, investments, guarantees, procurement, sales, new business initiatives, major projects, and commercial collaborations.

● Specialized Area Compliance
Targeted compliance programs in high-risk areas, including anti-commercial bribery (anti-corruption), labor and employment, data privacy and personal information protection, intellectual property and trade secrets, advertising and product quality, competition/antitrust, and import/export controls.

● Third-Party Compliance Management
Compliance due diligence, risk assessment, onboarding review, and ongoing monitoring of suppliers, distributors, and other business partners.

● Compliance Operations and Incident Response
Execution of compliance training and operational audits; responding to regulatory inspections, inquiries, and formal investigations; fact-finding, liability resolution, and structural remediation for corporate compliance incidents.