AI for lawyers is sold today as "an assistant that answers any legal question". Yet the projects that actually come together in a law firm concern material the firm already has and currently reads in full: case files, recordings, correspondence and the daily check of the court portal. AI reads, cross-checks and keeps watch — and a lawyer checks and signs the result.
Law firms are offered AI from the spectacular side: a chatbot answering clients, "AI that writes pleadings", a tool that "predicts the judgment". The common problem with those projects is that their output is hard to check — and in a lawyer's work an output that cannot be verified in a few minutes does not save time, it moves the time to later corrections. We have implemented AI in law firms and seen where the time actually goes.
It goes into reading. In a case with several volumes of files, someone has to establish who said what and when, and where the documents contradict each other; a three-hour meeting recording has to be listened to in order to pull three sentences out of it; in the court portal every case has to be clicked into every day to see whether a new document or a date has appeared. These are text- and audio-based processes on material the firm already lawfully holds, with rules that can be written down and a result the lawyer verifies by clicking through to the source.
That is why a good first AI project in a law firm looks unspectacular: it gives no advice, writes nothing to the court and talks to no client. It prepares the material the lawyer starts from — and does so in a way that can be checked.
The common denominator: the lawyer approves the result, the system prepares it. Which processes qualify for this kind of automation at all — the five conditions a good candidate must meet — is described on the AI automation page; in a law firm those conditions are checked exactly the same way, only with a stricter requirement of verifiability.
Case files, recordings and video are the personal data of parties, witnesses and third parties — often of special categories. The firm processes them on its own legal basis: it determines the Article 6 GDPR basis and, where the material contains special categories of data, the Article 9(2) condition — in litigation usually the establishment, exercise or defence of legal claims (point f). We do not assess that basis; we build to the determination of the firm and its data protection officer. The data stays in the firm's infrastructure or with a provider with an EU processing region that the firm itself chooses, with training switched off and a data-processing agreement in place; the model receives the minimum a given step needs, anonymised wherever possible.
Which AI Act obligations apply to a given tool depends on the firm's role, the system's intended purpose and its risk category: telling people they are dealing with a system (Article 50, where the system interacts with people), human oversight (Article 14 for high-risk systems), no prohibited practices (Article 5). We treat them as the firm's decisions that we build to: a register of systems, logs, an approval mode. A lawyer approving every result is our delivery rule regardless of whether a provision requires it. Classifying the system and assessing its impact are determinations for the lawyer or the data protection officer, not for us — we describe the boundary on the AI Act technical compliance sprint page.
The same way as in every implementation: one process, a number measured before the start — for example hours from receiving a file to a ready summary with references — the narrowest possible pilot, and parallel running before the switch. At first the system prepares and a lawyer approves every result. The full course — four phases and what you get at the end of each — is described by the delivery methodology, and the full scope of the service, from the process audit to maintenance, by the AI implementation page.
A separate topic that comes back in every law-firm conversation is data: professional secrecy, evidence, recordings. Where data goes in a model integration, and what to ask any provider, is set out on the security and GDPR page; the full list of projects we do not take on, on the what we don't do page.
Three things drive the cost: the number of systems to connect, the state and volume of the material, and the level of certainty required. The number of lawyers matters less — what counts is whether the files are digital and orderly or go through the scanner afresh for every case. We set the scope and the price after a first conversation; all the components, maintenance included, are broken down in our article on what an AI implementation costs.
With one kind of material you already have and currently read in full: the files of one category of cases, recordings of client meetings, or the daily check of the court portal. A good first project has a number measured before the start — hours to prepare a summary of a case file, the number of cases checked by hand in the portal — and a result a lawyer can verify in minutes, because every sentence points to its source page. We do not start with an assistant that "answers everything"; we start with a process in which a mistake is visible at once.
It stays where the firm decides: in its own infrastructure, or with a provider whose processing region is in the European Union, with training on your data switched off and a data-processing agreement in place. Personal data in case files, recordings and video is processed by the firm on its own legal basis — in litigation that is usually the establishment, exercise or defence of legal claims, and for special categories of data the condition in Article 9(2)(f) GDPR — and it is the firm, not us, that determines that basis. Before the integration, not after it, we settle together which data leaves the firm at all, to what extent and after what anonymisation. The rules, and the questions to put to any provider, are set out on our security and GDPR page.
No. We deliver the MCP server for the Portal Informacyjny Sądów Powszechnych (the Polish courts’ information portal) only as part of an AI implementation in the firm — we do not sell it separately, nor as software to install on your own. The reason is practical: the integration alone gives the firm a list of changes in its cases, and the value appears only when that list reaches the assistant, the calendar and the document workflow that we configure and test together. The integration runs on the firm’s own account and sees exactly what a user logged into that account sees.
A lawful recording. Whether the recording could be made at all — the consent of the meeting’s participants, the court’s permission to record, the electronic record from the portal — is the responsibility of the firm and its lawyers; we work on material the firm already lawfully holds. Technically it takes audio of reasonable quality and, for video, a few minutes in which a lawyer labels who is who. From that point the system separates the voices, groups statements and segments by the labels the lawyer has assigned, and prepares time-coded excerpts for the lawyer to check. It establishes nobody’s identity, matches nobody against external sources and creates no reusable biometric templates.
The way a trainee’s work is, only faster: every finding, date, quotation and summary points to the page of the file or the minute of the recording it comes from, so verification means clicking through to the source rather than re-reading everything. In the pilot we run the work in parallel — the team does what it did before, the system prepares its own version — and we count how many findings were correct, what errors occurred and what they cost. Only those numbers decide which tasks may go on without every result being approved. In litigation the answer to that question is most often: none.
Three things drive the cost: the number of systems to connect — the practice-management software, email, the calendar, the document repository, the court portal — the state and volume of the material, and the level of certainty required. The number of lawyers matters less than whether the files are digital and orderly or go through the scanner afresh for every case. Maintenance is a separate line: usage-dependent fees and periodic tests after model version changes. We set the scope and the price after a first conversation and a short look at the material; the cost components are broken down in our article on what an AI implementation costs.
Describe it in a few sentences — case files, recordings, the portal, correspondence. We will tell you whether we see a candidate for a first project — including when the answer is "not worth it yet".
Last updated: