diff --git a/src/dashboard/app.py b/src/dashboard/app.py
index 25252942..68503cdf 100644
--- a/src/dashboard/app.py
+++ b/src/dashboard/app.py
@@ -49,6 +49,7 @@ from dashboard.routes.monitoring import router as monitoring_router
from dashboard.routes.nexus import router as nexus_router
from dashboard.routes.quests import router as quests_router
from dashboard.routes.scorecards import router as scorecards_router
+from dashboard.routes.legal import router as legal_router
from dashboard.routes.self_correction import router as self_correction_router
from dashboard.routes.sovereignty_metrics import router as sovereignty_metrics_router
from dashboard.routes.sovereignty_ws import router as sovereignty_ws_router
@@ -700,6 +701,7 @@ app.include_router(sovereignty_metrics_router)
app.include_router(sovereignty_ws_router)
app.include_router(three_strike_router)
app.include_router(self_correction_router)
+app.include_router(legal_router)
@app.websocket("/ws")
diff --git a/src/dashboard/routes/legal.py b/src/dashboard/routes/legal.py
new file mode 100644
index 00000000..33241bb5
--- /dev/null
+++ b/src/dashboard/routes/legal.py
@@ -0,0 +1,33 @@
+"""Legal documentation routes — ToS, Privacy Policy, Risk Disclaimers.
+
+Part of the Whitestone legal foundation for the Lightning payment-adjacent service.
+"""
+
+import logging
+
+from fastapi import APIRouter, Request
+from fastapi.responses import HTMLResponse
+
+from dashboard.templating import templates
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter(prefix="/legal", tags=["legal"])
+
+
+@router.get("/tos", response_class=HTMLResponse)
+async def terms_of_service(request: Request) -> HTMLResponse:
+ """Terms of Service page."""
+ return templates.TemplateResponse(request, "legal/tos.html", {})
+
+
+@router.get("/privacy", response_class=HTMLResponse)
+async def privacy_policy(request: Request) -> HTMLResponse:
+ """Privacy Policy page."""
+ return templates.TemplateResponse(request, "legal/privacy.html", {})
+
+
+@router.get("/risk", response_class=HTMLResponse)
+async def risk_disclaimers(request: Request) -> HTMLResponse:
+ """Risk Disclaimers page."""
+ return templates.TemplateResponse(request, "legal/risk.html", {})
diff --git a/src/dashboard/templates/base.html b/src/dashboard/templates/base.html
index d20b1fe0..9db388b8 100644
--- a/src/dashboard/templates/base.html
+++ b/src/dashboard/templates/base.html
@@ -94,6 +94,10 @@
VOICE SETTINGS
MOBILE
LOCAL AI
+
+ TERMS
+ PRIVACY
+ RISK