NEW · Free contract-review checklist with a worked example — read it
Step 5

Compliance & governance

Using AI across the firm without losing confidentiality, privilege or control — a policy, a register and a review loop.

Where AI fits

AI drafts the policy and keeps the register. It must never issue a verification claim; a named human signs off and the record is kept.

The steps

Step 1

Adopt a one-page policy

Where AI may be used, and where it may not.

Step 2

Set data tiers

Public, confidential, privileged — and which tools are allowed.

Step 3

Keep an AI-use register

Tool, task, tier, verifier, sign-off, per matter.

Step 4

Train the team

Everyone knows the tiers and the verification loop.

Step 5

Review on every model update

Re-run the test set and log the score.

Tools for this stage

Get the free handbook