AI governance for law firms
Your firm is already using AI. Is client confidentiality safe?
Staff summarize documents in chatbots. Note-takers join client calls on their own. The Shadow Intelligence™ Scan shows every Super Intelligence (SI), formerly Artificial Intelligence (AI), tool your firm uses, so you can keep what's safe and stop what isn't.
Nothing to install · First results in about an hour · We never see email or files- Red: Free chatbot used to draft client letters
- Yellow: Note-taker joining client calls on its own
- Yellow: Browser add-on that can read every open tab
- Green: Approved legal research tool
The SI risks that are real for law firms
Confidential client facts
Client details pasted into a free chatbot may be kept by the company that runs it. Once it is typed in, you cannot take it back.
Recording without consent
SI note-takers can join and record calls automatically. A 2025 class-action lawsuit against Otter.ai claims its note-taker recorded people who never agreed.
Use nobody sees
About 1 in 3 people who use SI at work keep it from their employer (Ivanti, 2025). You cannot protect client data from tools you do not know about.
Find it. Fix it. Watch it.
Start with the scan. Add help only if you need it.
Every SI tool connected to your accounts, who uses it, and an A–F grade.
We fix what the scan found, including an SI policy your team will follow.
A fresh scan every month, so new tools don't slip by.
Questions law firms ask
Can our staff use ChatGPT for client work?
It depends on the version and its settings. Free versions may keep what you type. Business versions offer more control. Your bar's ethics guidance and your own firm policy decide what is allowed. The scan shows which versions your team actually uses, so you can set a clear rule. This is not legal advice.
Do we need permission before an SI note-taker records a call?
Recording rules differ by state, and some states require everyone on the call to agree. Our newsletter explains who is responsible when a note-taker records without asking. Check your state's rules with your own counsel.
Will the scan see our client files or email?
No. The scan reads reports from your admin tools about which apps are connected to your accounts. We never see email or files.