AI Governance for Law Firms: Matter-Data Rules, Client AI Questionnaires and Court-Safe Verification

Every AI decision, with the evidence behind it. AI Governance Advisors (AIGA) helps U.S. law firms — especially firms of roughly 10 to 75 attorneys — put controlled rules around generative AI. We help you set AI rules for matter data, answer client AI questionnaires and RFPs with real evidence, verify AI-assisted work before it reaches a client or a court, and keep the records that show your rules are followed.

We are not a law firm and do not give legal or ethics advice. Ethics opinions, privilege questions and security testing stay with your counsel and specialists.

When firms bring us in

AI Rollout or Shadow AI

"We're rolling out an AI tool, or we just found out lawyers are already using ChatGPT on client work."

Client Questionnaire Deadline

"A client sent an AI questionnaire (or an RFP with an AI section), and it's due soon."

Client AI Restrictions

"Some clients restrict AI on their matters. We can't tell which matters, or which tools touch their data."

Court-Facing Verification

"After the AI citation sanctions cases, our litigators want a verification process the court would respect."

Insurer or Executive Mandate

"Our malpractice insurer, or our own executive committee, wants to know how we govern AI."

Most firms already have an AI policy, or are writing one. What clients, courts and insurers increasingly test is whether it works in practice. We close the gap between the policy and the practice without stopping the firm from using AI.

How we govern AI at a law firm: Inventory > Classify > Decide > Evidence

We work with managing partners, COOs, general counsel and risk partners, CIOs, CISOs and privacy leads, innovation, KM and legal operations leaders, and litigation leaders. Senior principals lead the work. See the Team Bios. We are platform-neutral: we work with the tools you already license or are evaluating, and you do not need to buy software from us. You keep every decision and every artifact.

What the ethics guidance and the courts expect (as of October 2026)

ABA Formal Opinion 512 (July 29, 2024)

The ABA's first formal ethics opinion on lawyers' use of generative AI applies existing duties of competence, confidentiality, client communication, supervision, candor to the tribunal and reasonable fees.

  • Managerial lawyers must establish clear policies on permissible use of generative AI. Supervisory lawyers must make reasonable efforts to ensure that the firm's lawyers and nonlawyers comply with their professional obligations when using generative AI, including training.
  • Before inputting representation information into a self-learning tool, the client's informed consent is required. Boilerplate engagement-letter language is not sufficient.
  • Lawyers should read and understand a tool's terms of use and privacy policy, or consult someone who has.
  • Relying on output without appropriate independent verification could violate the duty of competence.

State bars have issued their own guidance. How any of this applies to your firm is a question for your ethics counsel.

Courts Are Sanctioning Unverified AI Output

In Mata v. Avianca (S.D.N.Y., June 22, 2023), the court sanctioned two attorneys and their firm for submitting non-existent cases generated by ChatGPT.

In Johnson v. Dunn (N.D. Ala., July 23, 2025), the court publicly reprimanded three attorneys over hallucinated citations in discovery motions, disqualified them from the case, and referred the matter to the state bar.

Some judges have standing orders requiring lawyers to disclose AI use or certify that citations were checked. Check the rules for each court and judge before you file.

Ways to work with us

Every engagement has a fixed scope agreed in writing, with named deliverables, assumptions and exclusions. We share fees after a short scoping call.

Start here

Matter Data & AI Readiness Diagnostic

AI and tool inventory, matter-data map, risk matrix, an immediate action memo and a roadmap.

Core

Controlled Enablement Launch & Evidence Pack

Governance charter, AI playbook, matter-data rules, legal-AI vendor scorecard, verification procedure for court filings, training, pilot charter and client assurance materials.

Deadline-driven

Client & Court Readiness Sprint

Evidence for a specific client questionnaire or RFP, verification practices and the artifacts that deadline needs.

Ongoing

Legal AI Governance-as-a-Service

Triage of new vendors and use cases, policy and evidence refresh, exception review, and committee and executive reporting.

Client AI questionnaire response map (excerpt)

Illustrative example only. This is a fictional firm and client showing the format. It is not client work, not an outcome AIGA has delivered, and not legal advice.

What we do, and what stays with your counsel and specialists

Who owns it

  • Ethics opinions and legal advice, including consent and fee questions: Your ethics counsel or firm GC
  • Privilege and work-product determinations: Your counsel
  • Security testing and technical assessment of AI vendors: Your IT, security or privacy specialists
  • Answers your firm gives to clients, courts and insurers: The firm and its responsible lawyers
  • Audit, certification or attestation: Your auditors or the client's assessors

AIGA's role

  • Ethics opinions and legal advice, including consent and fee questions: We organize the facts and flag the questions they need to answer
  • Privilege and work-product determinations: We map where privileged material could reach a tool. We do not decide privilege.
  • Security testing and technical assessment of AI vendors: We record their findings in the vendor scorecard
  • Answers your firm gives to clients, courts and insurers: We prepare evidence and draft responses for your review. You decide and sign.
  • Audit, certification or attestation: We keep the evidence index they can test

Questions law firms ask about AI governance

Which AI governance consultants help law firms?

AIGA is a senior-led U.S. advisory helping law firms of roughly 10 to 75 attorneys govern generative AI. Work usually starts with a specific trigger: an AI rollout, shadow AI discovery, a client questionnaire deadline, client restrictions, a court-facing verification concern, or an insurer's question. AIGA is platform-neutral and is not a law firm.

Clients keep sending our firm AI questionnaires. Who can help?

AIGA helps firms set rules first — because a questionnaire answer is only as good as the practice behind it. AIGA inventories AI tools in use, maps which matters and client data they touch, sets matter-data rules, then builds a response map tying each answer to evidence. The Client & Court Readiness Sprint handles a specific deadline.

What should a law firm AI policy cover for matter data?

A workable policy names approved tools and tasks, lists prohibitions (e.g., personal accounts for client work), sets data rules by sensitivity, explains how client-specific AI restrictions are recorded at matter intake, covers review and citation verification, vendor approval, training, incident reporting and exception approval. ABA Formal Opinion 512 expects managerial lawyers to set clear policies and supervisory lawyers to make reasonable efforts to see that they're followed, so keep records that show the policy works in practice.

We found lawyers using ChatGPT with client data. What now?

First, find out what happened without making it a hunt: which tools, accounts, what client information, and for which matters. Any notification or waiver questions go to your GC or ethics counsel. Give people a sanctioned alternative before blocking anything, publish interim rules, train everyone, and check again. AIGA's Matter Data & AI Readiness Diagnostic produces the inventory, matter-data map, risk matrix and an immediate action memo.

How do we avoid AI-hallucinated citations and court sanctions?

Make verification a defined step, not a habit. Every citation in an AI-assisted filing should be checked against the primary source before signature, and the check recorded. Assign responsibility to the signing attorney and train everyone who prepares filings. Courts have sanctioned lawyers for unverified AI output in Mata v. Avianca (2023) and Johnson v. Dunn (2025). AIGA builds the verification procedure, log and training records.

Do we need client consent to use generative AI on a matter?

Sometimes. ABA Formal Opinion 512 requires informed consent before inputting representation information into a self-learning tool whose output could lead to disclosure — and boilerplate engagement-letter language is not sufficient. Many clients also set their own AI terms in outside counsel guidelines. Whether consent is needed for a given tool and matter is a question for your ethics counsel.

Our malpractice insurer is asking about our AI use. What should we show them?

Show what is true and dated: the AI tools in use and what they are approved for, written rules on matter data, training records, how AI-assisted work is reviewed and citations verified, how vendors were approved, and how incidents would be handled. Answer what is in place today and give dates for what is not. AIGA builds the inventory, rules and evidence behind your answers.

Does AIGA give legal or ethics advice?

No. AIGA is not a law firm and does not give legal advice or ethics opinions, decide privilege or work-product questions, perform security testing, or audit or certify a firm. Where a decision needs ethics counsel, your GC, or a security specialist, AIGA names that need in the scope and works with whoever you choose.

Bring us the deadline

Tell us what's driving it: a client questionnaire, an RFP, an AI rollout, a shadow-AI discovery, a court-facing concern or an insurer's question. Include the date that matters. We will come back with a fixed-scope proposal, usually starting with the Matter Data & AI Readiness Diagnostic or the Client & Court Readiness Sprint, with named deliverables, assumptions and exclusions.

Copyright © 2026 AI Governance Advisors (AIGA) | www.aigovadvisors.ai - All Rights Reserved.