AI for Legal, Compliance & Risk
AI reads and drafts faster than any associate: research memos, contract redlines, document review. It also invents authorities with total confidence, and courts have sanctioned lawyers for filing them. The duty to check has not moved.
How AI is changing this work
- Research tools plan multi-step work and return memos with linked citations.
- Contracts are reviewed against a playbook and redlined in minutes; intake and renewals are handled by agents.
- Compliance teams must now govern the company's own AI use as well as use AI themselves.
Your layers: the 4 that matter most
1. Layer 9 · Applications & Interfaces
Why it matters
Legal AI arrives as assistants built for the profession, tied to case law, statutes and your documents. The choice of tool decides what sources stand behind an answer.
What to do here
- Research with linked authority. Ask a legal question and get a memo whose every citation opens the source and its treatment. Chat assistants
- Playbook redlining. Review a contract against your standard positions and propose edits for a lawyer to accept. Copilots
- Assistant in the drafting tool. Draft, compare and summarise inside the word processor, with firm precedents as the base. AI features inside products
Examples as of 2026-11-11
2. Layer 7 · Orchestration & Tooling
Why it matters
The difference between a usable answer and a sanction is grounding: answers built from retrieved, real sources, with the citation checked. That is built at this layer.
What to do here
- Retrieve, then answer. The tool searches authoritative sources first and answers only from what it found. Retrieval-augmented generation (RAG)
- Review at document scale. Classify thousands of documents for relevance or privilege, each decision citing the passage. Retrieval-augmented generation (RAG)
- Verify every citation. Open each authority and confirm it exists and says what is claimed. Tools reduce errors; they do not remove them. Guardrails & evals
Examples as of 2026-11-11
3. Layer 6 · Inference & Optimization
Why it matters
Confidentiality turns on where the model runs and what the provider keeps. Those are questions about how the model is served.
What to do here
- Know the data path. For each tool: where prompts are processed, how long they are kept, and whether they train anything. Model APIs & routers
- Contract for it. Use business terms that bar training on your inputs; consumer chat tools usually lack them. Model APIs & routers
- Run it yourself for the most sensitive work. An open model on your own hardware keeps privileged material in house. Local inference runtimes
Examples as of 2026-11-11
4. Layer 4 · Data
Why it matters
Training data is the centre of AI's biggest legal questions: copyright, licensing, personal data and what model makers must disclose. Your clients will ask.
What to do here
- Training-data diligence. In supplier reviews, ask what the model was trained on and what licences or opt-outs were respected. Data rights and provenance
- Opt-outs and licences. Know the text-and-data-mining rules where you operate and how rights holders reserve their rights. Data rights and provenance
- Your documents as training data. Decide whether client or company material may ever be used to improve a supplier's model. Pretraining data
Examples as of 2026-11-11
High-leverage use cases
- First-pass research memos. A cited memo on a defined question, with every authority opened and checked by a lawyer.
- Contract review against a playbook. Flag departures from standard positions and propose redlines for approval.
- Document review. First-pass relevance and privilege calls across large sets, with the reasoning shown.
- Clause and obligation extraction. Pull parties, dates, renewal and termination terms from a contract portfolio into one table.
- Policy and regulation tracking. Summaries of new rules mapped to your policies, with links to the official text.
Start here: the next 30 to 60 days
- Week 1 to 2. Write an AI use policy for the team: approved tools, what client data may go in, and the duty to verify.
- Week 3 to 4. Pilot playbook review on one contract type, such as confidentiality agreements, and compare with lawyer review.
- Day 30 to 60. Test a research tool on ten questions you already know the answer to. Count wrong and unsupported citations.
- Day 30 to 60. Add AI questions to supplier due diligence: data path, retention, training use, model sources.
Risks and pitfalls
- Invented authorities. A US court fined lawyers $5,000 for filing a brief that cited cases a chat tool had made up. (Mata v. Avianca, Inc., No. 1:2022cv01461, Document 54 (S.D.N.Y. 2023): sanctions order)
- Specialist tools still err. A Stanford and Yale study found leading legal research tools gave wrong or unsupported answers in roughly 17% to 33% of queries. (Hallucination-Free? Assessing the Reliability of Leading AI Legal Research Tools (Magesh et al.))
- Professional duties apply in full. The American Bar Association's first opinion on generative AI applies competence, confidentiality, communication, supervision and fee rules to its use. (ABA issues first ethics guidance on a lawyer's use of AI tools (Formal Opinion 512))
- Privilege and confidentiality. Client material in a tool that keeps or trains on inputs may be a disclosure. Check terms before use.
- Regulated uses inside the company. Compliance must know where the business uses AI for hiring, credit or similar decisions, which the EU treats as high-risk. (Regulation (EU) 2024/1689 (the AI Act))
Sources
A product named on this page is an example, not a recommendation.
- Harvey (harvey.ai) (2026-11-11)
- CoCounsel Legal (Thomson Reuters) (legal.thomsonreuters.com) (2026-11-11)
- Lexis+ with Protégé (lexisnexis.com) (2026-11-11)
- Ironclad (ironcladapp.com) (2026-11-11)
- Relativity aiR for Review (relativity.com) (2026-11-11)
- Deep Research in CoCounsel Legal (thomsonreuters.com) (2026-11-11)
- Amazon Bedrock (aws.amazon.com) (2026-11-11)
- Ollama (docs.ollama.com) (2026-11-11)
- EU Copyright Directive 2019/790 (text and data mining) (eur-lex.europa.eu) (2026-11-11)
- EU AI Act duties for general-purpose models (eur-lex.europa.eu) (2026-11-11)
- Mata v. Avianca, Inc., No. 1:2022cv01461, Document 54 (S.D.N.Y. 2023): sanctions order (2023-06-22)
- Hallucination-Free? Assessing the Reliability of Leading AI Legal Research Tools (Magesh et al.) (2024-05-30)
- ABA issues first ethics guidance on a lawyer's use of AI tools (Formal Opinion 512) (2024-07-29)
Other roles
HR & People · Finance · Sales · Marketing · Product & Design · Engineering · Cybersecurity · Operations · Customer Support