08/07/2026
Information security/cyber security is always near top of mind for law firms and their clients when implementing new technologies.
Jeroen Plink, COO and Co-Founder of Legaltech Hub, discusses the risks inherent in AI utilization and how can firms think through addressing those.
Security and confidentiality are existential issues for law firms, so it’s healthy that they’re skeptical. There are certain key risk areas to focus on in conversations with firms:
🟠 Don’t Use Consumer AI
Rely instead on specialist tools like Harvey, Legora, CoCounsel, Lexis+AI, August, Newcode.ai, and others, or the enterprise version of LLMs that explicitly confirm that they don’t access confidential data or train their models on your prompts and outputs.
🟡 Client Policies
Ensure you comply with client requirements and restrictions on AI use. An AI governance tool like Truth Systems may help.
🟢 Model Behavior Risks
Be aware of and know to look for hallucinations, biased outputs, or “over-confident wrong answers” in high-stakes contexts.
🔴 Access & Identity
Who can use which models on which datasets, from where, and with what log-in? A tool like Lega may help gain insights.
🟣 Supply-Chain Risk – Many AI tools are built on top of underlying LLMs and cloud providers; firms need to understand that full stack.
🔵 Regulatory & Cross-Border Issues – Different jurisdictions have different views on data residency, privacy, and AI regulation. Global firms have to harmonize a policy across all of them.
