AI and your client data: an independent view

Every supplier is adding AI to its own product, each with its own choice of AI company, its own rules and its own record of what was seen. Someone has to look across all of them on the firm’s behalf, and that cannot be a supplier whose answer is its own product. We help you decide which AI may see your clients’ data, under what rules, and how you will prove it.

What it covers

• An independent review of the AI in each of your systems: which AI company, where, what is kept
• Your own route for AI, set up in your firm’s own cloud and owned by you, using suppliers’ connectors where they are good
• Rules by client or matter, to meet outside counsel guidelines that restrict AI
• Contract terms on access to your data, AI connectors, pricing and exit

When firms ask us

• Suppliers are switching on AI features and you want to know what they do with client data
• A client’s outside counsel guidelines restrict how you may use AI
• You want to prepare for the SRA’s expectations in its August 2026 warning notice on AI
• You want AI to draw on all of the firm’s knowledge, not one supplier’s slice of it

Why it needs independent judgement

The decision needs three kinds of judgement at the same table. Regulatory: the SRA’s warning notice on AI, clients’ outside counsel guidelines and data protection. Technical: sign-in, permissions and ethical walls, and the security risks the National Cyber Security Centre warns about. Commercial: contract terms on data access, AI connectors, pricing and exit. We bring all three. We design and project manage; your firm owns and runs it; we never host, sell or license it.