---
title: "Free AI checklist for lawyers: adopt AI tools without losing control"
url: https://notionforlawyers.com/freebies/ai-for-lawyers
updated: 2026-10-17
author: Raghav Handa
---

# Free AI checklist for lawyers: adopt AI tools without losing control

This free guide gives lawyers a checklist and a starter AI-use policy outline: classify your data, list approved and prohibited uses, ask vendors the right questions, require human review and keep simple records. It is written in-page, not a download, and should be adapted to your jurisdiction and firm.

## Key takeaways

- Classify data first: public, internal, confidential. Only the first goes into unapproved tools.
- Write down approved and prohibited uses so staff are not guessing.
- Require named human review of every AI output used in work.
- Revisit the policy every few months because tools and terms change.

## Before you start

General information, not legal advice. Check your own bar or regulator's guidance and your client engagement terms before putting any client information into an AI tool.

ABA Formal Opinion 512 (July 2024) discusses lawyers' use of generative AI, including competence, confidentiality, supervision and fees. Other regulators have issued their own guidance. Read what applies to you, then use the outline below as a starting draft.


## Starter policy outline

| Section | Questions to answer |
| --- | --- |
| Scope | Who and which tools does it cover? |
| Data classes | What may never be entered? What may be entered after anonymising? |
| Approved tools | Which tools and plans are approved? Who decides? |
| Approved uses | Drafting outlines, summaries of public text, internal admin |
| Prohibited uses | Unverified research, filing unchecked output, entering privileged material in unapproved tools |
| Review | Who checks output and against what? |
| Client communication | When do you tell clients, and how is it covered in engagement terms? |
| Records | What do you note on the matter file? |
| Training and review | How often do you update the policy? |


## Vendor questions

- Is our content used to train models? Can we opt out?
- How long is data retained and can we delete it?
- What contractual confidentiality and security commitments exist for our plan?
- Where is data processed and stored?
- Who at the vendor can access our content?
- What admin controls and logging exist?

Answer these from the vendor's current documents, not from memory or marketing pages.


## Put it in Notion

Create a page called AI policy, a database called Approved tools (Tool, Plan, Data allowed, Approver, Date reviewed) and the prompt library from our AI section. This is a structure you build yourself; LawyerOS Pro gives you the databases and Custom AI Agents page to extend.

- Prompt library: https://notionforlawyers.com/ai/prompts
- AI workflows: https://notionforlawyers.com/ai/workflows
- Security and confidentiality: https://notionforlawyers.com/notion/security-and-confidentiality


## FAQ

### Is this a ready-made policy?

No. It is an outline to adapt to your jurisdiction, firm size and tools.

### Is there a download?

No. Everything is on this page.

### Do small firms need an AI policy?

A short written policy is useful even for a solo practitioner, because it forces you to decide what never goes into a tool.

### Who should approve tools?

A named partner or the person responsible for risk, ideally with IT advice.