← Get a policy for your firm

Sample AI Acceptable-Use Policy

Sample for illustration only. This is not legal advice.

1. Purpose

This policy sets rules for how [Firm] staff may use artificial intelligence tools so the firm protects client confidentiality, meets its professional obligations and uses AI responsibly.

2. Scope

It applies to all partners, employees, contractors and interns, and to any AI tool used for firm work on any device.

3. Approved tools

Only tools on the firm's Approved AI Tools list may be used for firm work. New tools must be approved by [Approver] before use.

4. Client and confidential data

Staff must never enter client names, identifiers, financial, health or case information into an AI tool unless the tool is approved for that data class and covered by a written data-protection agreement.

5. Human review

All AI output must be reviewed for accuracy by a qualified person before it is relied on or sent to a client. Staff remain responsible for their work product.

6. Disclosure

Where professional rules or client agreements require it, AI use is disclosed to the client.

7. Security

Use firm accounts with multi-factor authentication. Turn off model training on firm data where the tool allows it.

8. Incidents

Report any accidental disclosure of confidential data to an AI tool to [Approver] immediately.

9. Training and acknowledgment

All staff complete AI training and sign an acknowledgment of this policy every year.

Generate the full policy tailored to your firm, industry and state, from $49 →

Also free: check whether ChatGPT and Google's AI can find your firm →