A written AI usage policy
A clear, firm-specific policy attorneys and staff can actually follow, covering approved tools, acceptable use, and client-data handling.
A written usage policy, approved-use and data rules, and review steps, in plain language your people will follow. Then I review the policy when the major tools change, so it doesn't quietly go stale with the next release.
What you get
Banning AI doesn't work, and neither does telling attorneys to experiment on their own. I give the firm a standard everyone can point to.
A clear, firm-specific policy attorneys and staff can actually follow, covering approved tools, acceptable use, and client-data handling.
A framework for which workflows are appropriate for AI, which stay off-limits, and what may be entered into which systems.
Defined review, verification, and escalation steps so AI output is treated as assisted work product, never attorney judgment.
Implementation guidance, training alignment, and the documentation your risk committee and GC need to sign off.
How I build your guardrails
The fourth step is the one most policies skip. A policy written in spring can be out of date by fall.
I map where attorneys are already using AI, sanctioned or not, so your policy reflects reality instead of wishful thinking.
I write the usage policy, approved-use matrix, and data-handling rules in plain language your firm will actually follow.
I align training to the policy and hand leadership the documentation that risk committees and GCs expect to see.
When a major model or product changes how your tools work, I review the policy against the change and tell you what, if anything, needs to be updated.
Related reading
On September 16 Anthropic merged Claude chat and Cowork and launched Claude Docs and Slides in beta.
Why the "safest" AI policy may be creating the risks you were trying to avoid.
The bench moved. The regulators moved. Your competitors moved. Here's what your Monday morning needs to look like.
Let's talk
Tell me your practice areas, tools in use, and risk posture. I'll outline the policy and rollout your firm needs to adopt AI with confidence.
Please don't include confidential client information in an email.