Governance andCompliance.

AI governance

• Attorney supervision. AI output is a draft or a flag for review. Drafts, messages and filings queue for attorney approval and nothing is sent or filed on its own.
• Traceability. AI actions are logged with their inputs, model version and sources, so outputs can be reviewed and audited.
• Defined data boundaries. For each build, the data the AI may access, and any external model used for a task and on what terms, are documented in the statement of work before development.
• No training on client data for others. Client documents are not used to train models for any other client or party.
• Citation discipline. Citation checks support attorney review and do not replace verification in an authoritative research service. Counsel verifies every citation before filing.

Client data governance

• Client data is processed only on the client’s instructions under a written agreement.
• Single tenant deployments with no shared databases or data flow between clients.
• Role and matter level permissions, and ethical walls for conflicted matters.
• Export of matters, documents and logs in open formats at any time, and return or deletion at the end of an engagement as the agreement provides.

People and services

• Paralegals and engineers work under confidentiality agreements and are vetted before assignment.
• Managed service staff work inside client systems under the client’s licenses, permissions and audit trails.
• All legal work performed by our paralegals is authorized, supervised and signed off by the client’s attorneys.
• Access is granted on a least privilege basis and removed when an assignment ends.

Professional responsibility

ProofGuard is not a law firm and does not provide legal advice. Our products and services are designed to support attorneys in meeting their duties of competence, confidentiality and supervision, including duties that apply when lawyers use technology and nonlawyer assistance. Attorneys remain responsible for legal judgment and for the work product they sign.

Vendor management

Third party providers used in our services are reviewed for security and confidentiality commitments appropriate to the data they handle, and are listed for clients on request.

Questions

Clients and prospective clients can request governance documentation through our contact page.