Control over AI
Blog
AI governance 6 min read

Which AI tools may lawyers use?

The professional rules name no tools. Which AI tools a lawyer may use is for the firm to decide: a list with statuses, conditions and alternatives.

Abstract sphere between translucent panels
Quick answer

Which AI tools a lawyer may use is set out neither in the professional rules nor on the tool itself: it is for the firm to decide. The Netherlands Bar's recommendations follow the profession's core values: the lawyer knows the data flows and puts no confidential data into free tools. The firm turns that into a list giving each tool a status (allowed, limited use, no decision yet, not allowed), the condition on client information for limited use and the alternative for a rejected tool. A tool that is not on the list has the status "No decision yet", and until a decision is made, only public information goes in.

01

The professional rules name core values, not tools; the list is for the firm to decide

02

Every tool has one of four statuses, and a free account and a business account are separate rows

03

For a lawyer, limited use means a condition on which client information may go in

04

A tool that is not on the list has the status "No decision yet", which is neither a ban nor a free pass

05

A client can be stricter in their terms than the firm's list

A trainee asks her supervising partner whether she may use Claude to organise the structure of a pleading. He thinks for a moment. "The research database is fine, we have a licence for that. The rest? Honestly, I don't know." She uses Claude that evening anyway, at home, on her own account.

Which AI tools a lawyer may use is set out neither in the professional rules nor on the tool itself. It is for the firm to decide. A firm that does not take that decision is not being strict; it is leaving every supervising partner to work it out alone, and the work drifts to personal accounts.

Why is the answer not in the professional rules?

Because the professional rules are about core values, not products. A lawyer must be independent, partisan, competent and honest, and must keep client matters confidential; the dean of the local bar (the deken) oversees compliance with these core values. The Netherlands Bar has published recommendations on AI in the legal profession structured around the same core values. They say how to assess a tool: know and control the data flows, put no confidential data into free tools, check what the tool produces, stay responsible for the advice yourself. They do not name a single tool as allowed or not allowed.

That is not a gap in the recommendations; it is the only way they can be right. The same chatbot on a free account is something different from the same chatbot on a business licence with a processing agreement, and a contract analysis tool connected to the case management system is something different from the same tool without that connection. The bar can set out the core values; the firm has to apply them tool by tool. Our article on which AI tools employees may use explains how that works for organisations outside the legal profession; a firm adds the duty of confidentiality as the weightiest condition.

What does a firm's list look like?

Each tool gets a status, and four are enough: allowed, limited use, no decision yet, not allowed. Our article on the four statuses for AI tools explains what they mean. "Limited use" comes with a condition and "Not allowed" with an alternative; a free account and a business account for the same tool are two separate rows. This is how it might look at a mid-sized firm; the decisions are only examples, because your firm will decide differently.

ToolStatusCondition or alternative
Legal research database on the firm's licenceAllowedNone; client information permitted, within the agreement with the vendor
Microsoft 365 Copilot on a work accountAllowedOnly in matters you have permissions for yourself; nothing from matters behind an ethical wall
ChatGPT or Claude through the firm's business accountLimited useNo party names, case numbers, amounts or documents; abstract legal questions and your own text without client data are fine
ChatGPT or Claude through a free or personal accountNot allowedAlternative: the firm's business account
Transcription tool for meetingsLimited useInternal meetings only, with participants informed; no client meetings
Contract analysis tool first seen this monthNo decision yetPublic information only for now; assessment under way

The list does not belong in a PDF. A lawyer opening a tool at a quarter past ten is not going to read a policy document; the decision should appear as soon as the tool opens, with the condition attached and the alternative as the first button. This is what it looks like when the list is at the point of use rather than in a document:

AI register
AllowedUnder reviewNot allowedAll tools
Search by tool, vendor, domain or former name…
1,012 tools
DeepSeek
Critical · 90/100
Not allowed
Otter.aiNew
High · 68/100
No decision yet
Grok
High · 67/100
Not allowed
ChatGPT
High · 62/100
Allowed
Perplexity
Medium · 55/100
No decision yet
HeyGen
Medium · 53/100
No decision yet

Every tool, scored for risk

Over 1,000 AI tools, each scored from Low to Critical. Nothing is approved or blocked until someone decides.

More about AI Governance

What does limited use mean for a lawyer?

More than for most professions, because the condition is almost always about client information. "No party names, case numbers, amounts or documents" is specific enough to follow. "Be careful with client data" is not.

There is a trap specific to legal work. A legal question can identify the client on its own. Anyone asking about terminating the lease of a cinema in a town with only one cinema has named the client without typing a name. A matter that has been in the press, a small niche, an unusual combination of facts: the condition "no names" does not cover it, and the lawyer has to spot it themselves. Our article on what you can and cannot share with AI covers which details together make someone identifiable, and our comparison of free and business AI accounts explains why the account makes half the difference.

What do you do with a tool that is not on the list?

It has the status "No decision yet". That is neither a ban nor a free pass: for now only public information goes in, and the tool is reported to whoever maintains the list. Trying it is not a breach. Putting a case file in before the decision is made is.

A twenty-five-lawyer firm has a list of six rows. A first look at which AI services are being opened from the firm's browsers shows that three corporate associates are using a contract analysis tool recommended at a conference, and that a transcription tool someone uses for client meetings does not appear anywhere. Nobody did anything that was not allowed, because nothing had been decided. The contract analysis tool gets a row with the status "No decision yet", the head of the practice group puts the questions to the vendor, and two weeks later it is set to "Limited use": for contracts of clients who have agreed to it, with no connection to the case management system. The transcription tool is marked "Not allowed", with the firm's dictation software as the alternative.

Such a procedure has three parts: who assesses, within what time frame and on the basis of which questions. Our article on approving an AI tool and what to ask the vendor lists those questions. The decision itself goes into the firm's AI register.

What if the client has agreed otherwise?

Then the client comes first. Engagement letters and procurement terms increasingly say something about AI, from a duty to notify to a ban on external AI services on the matter. A tool the firm allows may still be off limits on that particular matter. The firm's list is the minimum; what is agreed with the client can be stricter, never looser. Check this for each matter and record it where the whole team on the file will see it.

BeeSensible matches a catalogue of over 1,000 AI tools against the tools being opened at the firm, with no user ID and no content. An administrator sees in the Inbox which tools still have no decision and records the firm's decision, with the condition or the alternative; that decision appears to the lawyer the moment they open the tool. Whether someone can still go on to a tool that is not allowed is a setting the firm chooses. The page for legal organisations and the product page for See explain how that works for a firm. The bigger picture, from seeing what is used to showing that the rules are followed, is covered in AI governance for law firms and under the topic AI governance.

The next time the trainee asks, the answer is not "Honestly, I don't know" but "Check the list, and if it is not on there, that is its status." It is a more modest answer, and it keeps the pleading on the firm's account.

FAQ

Common questions

Is there a list of AI tools lawyers are allowed to use?

Not from the Netherlands Bar. The bar has published recommendations on AI structured around the profession's core values, and they say how to assess a tool, not which tools to use. The firm draws up the list itself, tool by tool, with a status and a condition. Two firms can rightly decide differently about the same tool, because their practice, their clients and their accounts differ.

As a lawyer, may I use ChatGPT?

That depends on the account and on what your firm has decided. A free or personal account runs under consumer terms, without a processing agreement, and input can be used for training unless you switch it off; no client information belongs there. A business subscription held by the firm may be set to limited use, for example without party names and case numbers. Check your firm's list, and if the tool is not on it, that is its status.

What does limited use mean for case work?

It means the tool may be used subject to a single condition the firm has written down, usually about client information: anonymised text only, no party names, case numbers or amounts, or public sources only. Bear in mind that a legal question can itself identify the client if the matter has been in the press or the niche is small. When in doubt, ask the person responsible for that row.

What do I do with an AI tool that is not on the list?

Treat it as "No decision yet": public information only and no client information, and report it to whoever maintains the list. A well-run firm has a quick procedure for new tools: who assesses, within what time frame, on the basis of which questions. Trying a tool is not a breach, as long as no case file goes in before the decision is made.

May a client ban AI use on their matter?

Yes. Engagement letters and procurement terms increasingly say something about AI, from a duty to notify to a ban on external AI services. Such a term overrides the firm's list: a tool the firm allows may not be allowed on that particular matter. Check this for each matter, and record it where the rest of the team on the file will see it.

Portrait of Rens Timmermans from BeeSensible

Prefer someone to walk you through it?

Rens, BeeSensible

I'm happy to give you a twenty-minute tour. Leave your details and I'll find a time that suits you. You're also welcome to call or email.

Prefer to talk to someone first?

Want a live demo, or a quote for 100+ users? Leave your details and we'll be in touch within one working day.