Free guide · For EU law firms
The lawyer’s AI data-safety checklist
Careful lawyers keep getting weak answers from AI — because the safe way to use the free tools, stripping out the facts, is also what makes the answers useless. There’s a better line to walk. These 11 checks show you where it sits — written for EU practice, GDPR and the AI Act included.
One page. Eleven checks. No jargon.
The difference between AI use that breaches professional secrecy and use you can defend to the Bar — laid out so you can score your own firm in five minutes.
- 01–03 Before you type. The three questions to ask before any client detail goes near an AI tool — and the one that rules the free versions out for real work.
- 04–07 Choosing the tool & the plan. The four plan settings — no-training, a data processing agreement, retention, EU residency — that decide whether AI use is defensible.
- 08–09 Where the knowledge lives. Keeping your firm’s knowledge in a format you own and could still read if the vendor disappeared tomorrow.
- 10–11 Who stays in charge. The human-in-the-loop rule that keeps you in the AI Act’s lower-risk tier — and lets you show your work if privilege is challenged.
Small and mid-size firms, using AI already.
If your team has started using AI — officially or not — and you want the confidence that client confidence and your practice licence are safe, this is the one page to start from. No tools to buy, nothing to install.
Written for EU practice
GDPR, the AI Act, and professional secrecy — not a US checklist bolted on.
Vendor-neutral
It works whatever AI you use. We name settings, not brands.
Practical in an afternoon
Most gaps it finds are fixable the same day, with the tools you already have.
Where should we send it?
Check your inbox — it’s on the way.
We’ve sent the checklist to your email. If it doesn’t arrive in a couple of minutes, you can download it directly below.
Download the checklist (PDF)