service 04 / ethics

AI Ethics & Compliance Audits

A full audit of how AI is actually being used inside your firm today, mapped against the ABA Model Rules and your state bar's specific guidance — followed by a written policy your team can actually follow.

Why an audit, not just a policy template

Plenty of firms have downloaded a generic AI-use policy and had every attorney sign it. Very few have actually checked what's happening on the ground: which associates are using which tools, what client information has been pasted into consumer AI products, and whether anyone is verifying AI-suggested case citations before they're filed. A policy that doesn't match reality doesn't reduce risk — it just creates a paper trail showing the firm knew better.

We start by finding out what's actually happening, then build a policy and workflow around that reality, rather than handing you a template written for a firm that isn't yours.

What's included

The rules that actually apply

Most state bars have not passed AI-specific rules; instead, they've issued guidance interpreting existing Model Rules. Competence (Rule 1.1) increasingly includes understanding the basic risks and capabilities of AI tools used in practice. Confidentiality (Rule 1.6) governs what client information can be entered into a third-party AI system. Supervision (Rules 5.1 and 5.3) applies to AI output the same way it applies to a paralegal's work product. Candor to the tribunal (Rule 3.3) is what's actually violated when a fabricated citation gets filed. We map your firm's practices against each of these directly, citing your specific state bar's guidance where it exists.

how it works

What an engagement actually looks like

Step 01

Confidential intake

We interview attorneys and staff and review current tool usage to understand how AI is actually being used across the firm.

Step 02

Gap analysis

We map current practices against the ABA Model Rules and your state bar's specific AI guidance to identify real exposure.

Step 03

Policy drafting

We write an AI-use policy specific to your practice areas, not a generic template, covering permitted tools, verification steps, and confidentiality boundaries.

Step 04

Rollout support

We help train staff on the new policy and check back in after implementation to confirm it's actually being followed.

faq

Common questions

Does my state bar have specific rules about AI use?

Many state bars have issued formal ethics opinions or guidance on AI use rather than new standalone rules, generally interpreting existing duties of competence, confidentiality, and supervision. We identify and apply your specific state's guidance as part of the audit.

What happens if my firm doesn't have an AI policy?

Without a policy, your firm still bears the same ethical exposure — the Model Rules apply to AI-assisted work whether or not a written policy exists. The absence of a policy typically makes it harder to show reasonable supervision if something does go wrong.

How long does an ethics and compliance audit take?

Most audits take two to four weeks depending on firm size, from initial intake interviews through delivery of the written policy and implementation plan.

Can this audit help if we've already had an AI-related incident?

Yes. We also work with firms after a filing error or confidentiality concern to assess what happened, remediate the immediate issue, and build a policy that prevents a repeat.

related

Related services

Ready to talk specifics?

Bring your current workflow — even if it's just associates using ChatGPT informally — and we'll map the fastest safe path forward.

Book a free consult