Why account setup matters more than generative AI tools for lawyers

In brief
- NYSBA task force emphasizes vetting AI tools for confidentiality
- Carolyn Elefant endorses business-tier AI for handling sensitive data
- Legal-specific AI platforms offer tailored workflows but can be costly
- General AI tools now offer enterprise tiers with enhanced security
Generative artificial intelligence (GAI) is advancing far more rapidly than the technologies that preceded it, and adoption rates are soaring.
Data from 8 a.m.’s Legal Industry Report shows that in just three years since ChatGPT’s release, the majority of lawyers are now using consumer-grade general AI tools, such as ChatGPT and Claude, for work-related tasks.
Many ethics opinions written during the early days of GAI warn against the use of consumer tools. However, the authors of those opinions also acknowledge that technology changes rapidly and is a moving target. For that reason, there are no outright bans on any type of technology, as explained in the 2024 Report and Recommendations of the New York State Bar Association Task Force on Artificial Intelligence “This report offers no ‘conclusions.’ As AI continues to evolve, so will the work of NYSBA and the groups tasked with ongoing monitoring.”
Instead, the Task Force explained that the core ethical obligation that lawyers have is to carefully vet software tools to ensure that confidential client information and other sensitive data are properly protected: “You should obtain assurance that the Tool provider will protect your client’s confidential information and will keep each of your client’s confidential information segregated. Further, you should periodically monitor the Tool provider to learn about any changes that might compromise confidential information.”
It’s been more than one and a half years since that report was published, and GAI tools continue to evolve quickly. Most legal technology platforms have incorporated some type of GAI functionality, and hundreds of GAI legal technology startups have launched.
These legal-specific tools are developed with the workflows and data privacy needs of legal professionals in mind but can sometimes be prohibitively expensive unless the features are rolled out into products that your firm already uses.
Similarly, most publicly available GAI tools, like ChatGPT, now offer more secure business and enterprise tiers. These products are designed to meet the needs of businesses like the legal profession, which require more stringent security features and robust data privacy protections. This means that for legal professionals who do not already have access to GAI functionality in the legal software they currently use at their firm and who are seeking cost-effective access to cutting-edge GAI, options like Claude, ChatGPT, and Google Gemini could now be viable alternatives.
At least, that’s what attorney Carolyn Elefant — author of the book “Solo by Choice,” and with whom I co-authored “Social Media Lawyers: The Next Frontier”— recently concluded. She analyzed the protections offered by business and enterprise-level GAI accounts and concluded that attorneys can use these publicly available GAI tools to handle confidential data, as long as they select the appropriate version and configure it properly.
As Carolyn explained, “Business versions provide contractual protections through a Services Agreement and Data Processing Addendum, prohibit training on user data, restrict human review to security incidents rather than content monitoring, and offer administrative controls over retention and workspace security.”
Of course, there are caveats, and depending on your firm’s requirements, you may need additional protections in place. So, make sure to read her analysis in its entirety and carefully vet all GAI products that you’re considering for your firm.
Ultimately, although legal-specific AI platforms remain the most obvious choice for compliance and tailored workflows, they are not necessarily the only ethical path. General tools like ChatGPT, Claude, and Gemini have matured to the point where their business and enterprise tiers can often provide the security features lawyers require.
Regardless of the path you choose, the key to ethical adoption remains the same: compliance is not a feature you buy, but is the result of the diligence you exercise in selecting the right version of GAI and configuring it properly.
Nicole Black is a Rochester, New York attorney, author, journalist, and Principal Legal Insight Strategist at http://www.8am.com, the team behind MyCase, LawPay, CasePeer, and DocketWise. She is the nationally recognized author of “Cloud Computing for Lawyers” (2012) and co-authors “Social Media for Lawyers: The Next Frontier” (2010), both published by the American Bar Association. She can be contacted at [email protected]
Share this story, choose a platform
Brought to you by BridgeTower Media
Free Weekly Newsletter
Recommended content
The Firm Playbook: Lifetime clients are like winning the law firm lottery
The Firm Playbook: Lifetime clients are like winning the law firm lottery By Nermin Jasani A lifetime client is a [...]
Confessions of a Legal Recruiter: Using the realization rate to gauge an attorney’s value to a firm
Confessions of a Legal Recruiter: Using the realization rate to gauge an attorney’s value to a firm By Shari Davidson [...]
A professional development blueprint for young lawyers
Attorneys should try adding something new to their repertoire of legal skills in each of their first 10 years on [...]
Make every word count in an email subject line
These suggestions – learned from mentors and years of trial and error – are worth considering when you send emails [...]
You may be comparing yourself to the wrong lawyers
Attorneys can often narrow their real competition to a few rivals. They don’t need to be the best lawyer against [...]




