Five questions before each new AI use
- Competence: do I understand what this tool does, what it gets wrong and how to check it?
- Confidentiality: what goes in, where is it processed, and may the provider keep or learn from it?
- Verification: who will check every fact and citation, and against what source?
- Communication: would the client expect to be told, or is consent needed?
- Fees: does my billing reflect the work actually done?
Where the rules live
| Jurisdiction | Start with |
|---|---|
| United States | State bar opinions; ABA Model Rules and Formal Opinion 512 |
| England and Wales | SRA and Law Society guidance |
| Scotland / Ireland | Law Society of Scotland and Law Society of Ireland guidance |
| Canada | Your provincial law society |
| India | Bar Council of India and state bar councils, and court directions |
Guidance is changing fast. Use the regulator's own site and confirm the date.
Worked example: approving a tool for first-draft summaries
A three-lawyer firm wants an AI tool to summarise long email chains. Working through the five questions: the lawyers test it on non-client material and learn it sometimes drops a date (competence). They read the provider's terms and find out whether inputs are retained or used for training, and decide to use only a business plan that says they are not, if that is what the terms state (confidentiality). They agree every summary is checked against the emails before it is relied on (verification). They check their engagement letter wording and regulator guidance on telling clients (communication). They agree time spent is billed as the time actually taken (fees).
Then they record the decision. A simple register row does the job:
| Field | Example entry |
|---|---|
| Tool and plan | Name, plan, date reviewed |
| Approved uses | Summaries of non-privileged email chains |
| Not allowed | Court filings, anything uncheckable |
| Data terms reviewed | Yes, with link and date |
| Owner and next review | Named lawyer, a set date |
Common mistakes
- Approving a tool once and never revisiting it after its terms change.
- Letting staff use personal accounts on consumer tools for client work.
- Checking that a citation looks right instead of opening the source.
- Billing AI-assisted work as if it took the time it would have taken by hand.
- Assuming a rule you read for one jurisdiction applies in yours.
Make it routine
Put the five questions in your AI policy and the approved-tools register. If you work in Notion, add a short checklist to the template for new AI uses so approval is recorded, not remembered. LawyerOS does not include compliance tooling; this is a page you can add.
General information only, not legal advice. Check the rules of your own bar or regulator and your clients' terms.
Frequently asked questions
- Do I have to disclose AI use?
- It depends on your regulator, the court and the client. Check each.
- Can AI replace legal judgment?
- No. Duties of competence and supervision stay with the lawyer.
- Is a free AI chatbot acceptable?
- Consumer tools often have terms that are unsuitable for confidential information. Review before use.
- Where should I record approval?
- In a register kept with your policy; a Notion database works.
- How often should I revisit an approval?
- Set a review date when you approve it, and review sooner if the provider changes its terms or your use changes.
About the author
Raghav Handa trained as a lawyer, then spent years building legal technology, from enterprise legal products to custom systems for law firms.
Keep reading
- AIThe ethics of AI tools in legal practice: a 2026 viewHow professional-conduct duties apply to AI tools in 2026: competence, confidentiality, candour, supervision, fees and client communication, with practical habits.3 min read · 17 October 2026
- Security and ethicsAI and client confidentiality: what lawyers must protectHow to protect client confidentiality when using AI: what counts as confidential input, safe prompting habits, vendor terms to check and a quick decision table.3 min read · 17 October 2026
- Security and ethicsFirm AI policy template for lawyers (fill-in outline)A fill-in outline for a law firm AI use policy: scope, approved tools, confidentiality, verification, client disclosure, training and review. General guidance only.3 min read · 17 October 2026
- Rules and regulationClient consent for AI use: template wording and outlineA fill-in outline for telling clients about AI use and recording informed consent: what to explain, options to offer, and how to log it. General guidance.3 min read · 17 October 2026