Key takeaways
- Get training-data and confidentiality terms answered in writing before a trial starts, not after a preference has formed - a qualified answer on model training is a no for privileged material.
- Test whether a tool changes the shape of a workflow or just adds a chat window on top of the same manual process. Those are different purchases with different payoffs.
- Data portability is a buying criterion, not a legal afterthought - if your matter data, prompts, and configuration cannot leave cleanly, you have bought a dependency, not a capability.
- AI-native and AI-augmented are not marketing synonyms. The distinction is whether AI runs systematically, by default, on every matter, or incidentally, when someone remembers to open it.
- Ask who actually does the change-management work - naming your actions, retraining your team, redesigning intake - because that work does not happen by installing software.
- A transformation studio and a software vendor are structurally different purchases. Naming that difference honestly is more useful than pretending either one is simply better.
Why the standard evaluation misses the point
Most legal AI evaluations happen the same way. Someone sees a demo, the demo is impressive, a trial licence is issued, a handful of people use it for a few weeks, and a decision gets made on a mix of enthusiasm and price. That process tests exactly one thing well: how good the product looks in a fifteen-minute demonstration. It tests almost nothing about whether the product will still be earning its cost eighteen months from now.
The framework below is built around the questions a demo cannot answer. Where does the data go, and can a qualified answer there be trusted with privileged material? Does the tool change what your team actually does, or does it sit on top of an unchanged process as a faster way to do the same manual steps? If you stop using it in two years, what do you keep and what do you lose? Who does the work of making any of this stick, and is that work included in the price?
None of this is unique to any one kind of vendor. It applies whether you are looking at a point solution bolted onto your existing practice management software, a legal-specific AI platform, or a firm offering to rebuild how you work entirely. The questions are the same. The honest answers just turn out to differ a great deal depending on which kind of purchase you are actually making, and that difference is worth naming plainly rather than discovering at renewal.
How to use this
Run every vendor you are seriously considering through all six sections before you trial anything. It takes an afternoon of correspondence, and it will change your shortlist before you spend a single hour in a demo.
Training data and confidentiality: the questions that actually matter
This is the single area where legal buyers most often accept a vague answer because the demo was good and the follow-up email is tedious. It is also the area where the cost of accepting a vague answer is highest, because the material at stake is privileged client information, not internal marketing copy.
The core distinction to hold onto: a model can process your data to produce an output for you without that data ever being used to train or improve the underlying model for anyone else. Those are two entirely different arrangements, and vendors sometimes answer the second question when you asked the first. Press until the distinction is explicit and in writing.
- Is our data, or any output generated from it, used to train your models or any third-party model, in any form, including for a period after we stop being a customer? A qualified yes to any part of that is a no for privileged work.
- Where is data processed and stored, in which jurisdictions specifically, and can that be constrained contractually rather than left as a default configuration you cannot see?
- What is the retention period for our data and for prompts and outputs, and can we require deletion on a defined schedule and on exit, with confirmation in writing?
- Which sub-processors touch our data - the vendor's own infrastructure and any third-party model provider behind it - and how are we notified before that list changes?
- Has the vendor's legal team reviewed a contractual position on confidentiality and privilege specifically for legal-sector customers, or is the standard commercial data processing agreement being presented as sufficient?
- What happens in the event of a security incident - what is the notification commitment, and has there been an incident in the last twenty-four months?
Evasion is an answer
A vendor that cannot give a clear, specific, written response to a law firm on data handling has told you something important about their readiness for legal customers, regardless of how good the product demo was.
Does it solve a workflow problem, or add a chat window to the same workflow?
The fastest way to tell these apart is to ask a specific question about the product: what changes about how the work moves through your practice, from the moment a matter opens to the moment it closes? A tool that solves a workflow problem has a real answer - intake fields populate automatically, a draft appears attached to the right matter without anyone re-keying it, a deadline surfaces itself rather than waiting to be remembered.
A tool that has added a chat interface to an otherwise unchanged process has a different kind of answer, usually some version of 'you can ask it questions about your documents.' That is a genuine capability and occasionally a useful one, but it leaves the underlying process exactly as it was. Someone still has to remember to open the tool, paste in the document, phrase the question, and manually carry the answer back into the matter. The tool adds a step; it does not remove one.
This distinction is not about product quality. A well-built chat interface over a document set can be a perfectly good tool for a specific, occasional task. The problem is buying it as though it were a systematic replacement for a manual process, when what it actually requires is a human remembering to use it every time - which is precisely the failure mode that causes most AI pilots to quietly decay within a few months.
| Question | Workflow-fit tool | Chat wrapper on the same workflow |
|---|---|---|
| What triggers the AI to run | A defined event - a matter opening, a document arriving - by default, every time. | A person remembering to open the tool and ask it something. |
| Where the output lands | Attached to the matter automatically, in the format the next step needs. | In a chat window, to be copied out manually if anyone gets to it. |
| What happens if nobody thinks about it that day | The system still ran. The matter still got its first pass. | Nothing happened. The manual process is exactly what it was before. |
| How you would measure adoption | Proportion of matters where the automated step actually ran. | Licences issued or logins recorded, which measure access, not use. |
The test to run in the demo
Ask the vendor to show you the tool running on a matter with no human prompting it in the moment - triggered by the event itself. If that is not possible, you are looking at a chat wrapper, which is a different and smaller purchase than a workflow solution, whatever the pricing page calls it.
Data portability: what happens if you leave
The question to ask about any AI tool is not only how well it performs today but what it would cost to stop using it. A system holding your matter data, your configured prompts and playbooks, and your accumulated performance history, with no clean way to get that back out in a usable format, has quietly converted your own operating model into an asset that belongs to someone else.
This matters more for AI tools than for most software, because the valuable part is often not the raw documents - which you presumably kept elsewhere anyway - but the configuration built on top of them: the prompts tuned to your matter types, the playbooks the system learned to follow, the history that made its outputs progressively better. If none of that survives a switch, the firm has been quietly building an asset it does not own.
- Can we export our matter data, documents, and outputs in a standard, usable format at any time, not only at contract termination?
- Do our configured prompts, playbooks, and templates belong to us, and can we take them to a different system - or are they proprietary to the vendor's platform in a way that leaves us starting over?
- Is there a defined, contracted timeline and cost for a full data export on exit, or is 'we will help you transition' the entire commitment?
- Does the vendor's pricing or contract structure create switching costs beyond the ordinary cost of learning a new tool - a long lock-in term, a penalty for early exit, or data held in a proprietary format nothing else reads?
AI-native versus AI-augmented, and why the label on the pitch deck matters
Almost every legal AI vendor and every firm now claims some version of being AI-forward. The claim is nearly meaningless as stated, because it is not defined precisely enough to fail. The useful version of the distinction is narrower and checkable: does AI run systematically, by default, on every matter of a given type, with a human reviewing before anything ships - or does it run incidentally, when a specific person remembers to use it that day?
That line separates a genuinely different operating model from a genuinely useful add-on. A firm or a tool where AI is available and occasionally used produces occasional, individual time savings, invisible at the level of the practice as a whole. A practice where an automated first pass runs on every matter, every time, produces measurable institutional improvement, because the system generates consistent data about itself that a sporadically-used tool never can.
This is worth applying to any vendor pitch, not only to your own practice. If a vendor's product is genuinely workflow-native - triggered by events, running by default, producing a consistent first pass - it is a meaningfully different purchase from a capable assistant that requires someone to remember to open it. Ask the vendor directly which one they are selling, and ask for a demonstration on a matter nobody manually prompted.
The one-line test
Pick a matter opened last month, at random, not one chosen to look good. Ask whether the automated step ran on it. If the answer depends on who was handling that matter, the tool - or the practice - is augmented, not native, whatever the pitch deck says.
Implementation timeline and who actually does the work
Every vendor conversation eventually produces a timeline, and the honest range for real structural change at an ordinary practice runs a matter of weeks, not days and not years. Anyone offering a two-day rollout is selling a licence activation, not a change to how your practice works. Anyone quoting eighteen months is describing a change-management programme, which is a legitimate thing to buy but a very different one from what most independent practices need.
The more useful question than 'how long' is 'who does the work in that time.' Installing a tool takes an afternoon. Making it actually change how your practice operates requires naming your matter types and action sequences, deciding who reviews what, retraining the team on the new process, and running it long enough to fix what breaks. That work has to be done by someone, and it is worth establishing precisely who before signing anything.
- Is the naming and process-definition work - what a matter is, what actions repeat, who reviews what - done by your team, by the vendor, or not done at all?
- Does the vendor's engagement include change management, or does it end at onboarding and leave adoption entirely to internal champions with no other job change?
- What is the realistic timeline to the automated step running on every matter of a type, by default - not to the licence being active, which is a different and much earlier milestone?
- Who is accountable if adoption stalls after go-live - is there a defined check-in and a plan for what happens if usage decays, or does the relationship end at implementation?
- Ask for a specific example of a comparably-sized practice reaching systematic, default use of the tool, and what the first ninety days actually looked like for that practice's own team, not the vendor's success-story slide.
Why a transformation studio's engagement differs from buying a tool
It is worth being precise about this rather than simply asserting that one approach is superior, because the honest answer is that they are different purchases solving different problems, and the framework above should be run against a studio's offer as rigorously as against a software vendor's.
A software purchase buys access to a capability. The vendor's job ends, reasonably, at making the tool available and working as described. Whether it changes anything about how your practice actually runs is left to your team, on top of everything else your team already does. That is not a defect in the software - it is the nature of what was purchased. Most legal AI pilots stall for exactly this reason: the tool was installed, and the process it was meant to accelerate was never actually redefined, so there was nothing systematic for the tool to run on.
A transformation engagement, of the kind this site describes elsewhere as running name, then systematise, then automate, is a different purchase: it is the naming and systematising work itself, done with you, before or alongside any tool being deployed - so that whatever gets automated afterward has a defined process underneath it, and a human role chart around it, rather than running on top of ambiguity at higher speed. That work is the same regardless of whether the automation layer ends up being a market product, a custom build, or something built specifically for your practice, and honest engagements of this kind say which fits before any work begins.
The honest limitation is worth stating too. Not every organisation can complete a full rebuild on a realistic timeline. A firm carrying real partnership economics, an in-house department inside enterprise procurement, or a government legal function with statutory sign-off chains usually cannot fully redesign its own operating model in a matter of weeks, and a studio that promises otherwise is overselling. What is realistic there is the same primitives named and systematised, installed as a layer inside the structure that already exists, rather than a ground-up rebuild - a slower and more constrained outcome, honestly described in advance rather than discovered midway through the engagement.
The practical test for comparing the two is the same test this whole framework has been building toward: does the offer in front of you change the shape of how work moves through your practice, with someone accountable for that change actually happening - or does it give you a capability and leave the process exactly as it was? Both can be the right purchase, depending on what has already been done in your practice and what has not. Neither is well served by pretending the two are the same kind of thing.
Frequently asked
What should I ask a legal AI vendor about data privacy and training?
Ask explicitly whether your data or any output derived from it is used to train the vendor's models or any third-party model, in any form, including after you stop being a customer - and get the answer in writing, not in a call. A qualified yes anywhere in that chain is a no for privileged material. Also get the processing jurisdictions, the retention and deletion terms, the sub-processor list, and confirmation the vendor's legal team has reviewed a confidentiality position specifically for legal-sector customers.
How do I know if a legal AI tool actually changes my workflow or just adds a chatbot?
Ask what triggers the tool to run. A workflow-fit tool runs on a defined event, by default, on every matter, and the output lands where the next step needs it without manual copying. A chat wrapper requires someone to remember to open it and ask a question, which means adoption depends entirely on individual habit rather than being built into the process. Ask the vendor to demonstrate the tool running with nobody manually prompting it in the moment.
Why does data portability matter when choosing legal AI software?
Because the valuable part of many AI tools is not the raw documents you already had elsewhere, but the configuration built on top of them - tuned prompts, playbooks, and performance history. If that cannot be exported in a usable format on exit, the practice has built an asset it does not actually own, and discovers the real cost of the relationship only at renewal, when leaving is expensive.
What is the real difference between AI-native and AI-augmented, and does it matter when buying a tool?
It is the difference between systematic and incidental use - whether AI runs by default on every matter of a type, or only when someone remembers to use it. It matters when buying a tool because a genuinely workflow-native product and a capable assistant that needs manual prompting look similar in a demo but produce very different results in practice. Ask which one you are being sold, and ask to see it run untriggered by a human in the room.
How is buying a legal AI transformation engagement different from buying legal AI software?
Software buys access to a capability and leaves it to your team to redesign the surrounding process, on top of everything else they already do. A transformation engagement is the process-redefinition work itself - naming what a matter is, what actions repeat, who reviews what - done with you before or alongside deploying any tool, so automation lands on a defined process rather than on ambiguity. Neither is inherently better; they solve different problems, and an organisation with real structural constraints may only realistically manage the second version of that work, adopted inside its existing structure rather than as a full rebuild.
How long should implementation realistically take, and who does the work?
For an independent practice, real structural change - not just licence activation - realistically takes a matter of weeks. A two-day rollout is an activation, not a change to how the practice works; an eighteen-month programme is a change-management engagement, which is a different purchase. The more important question is who does the naming, process-redesign, and retraining work in that window - your team alone, the vendor as part of the engagement, or nobody, in which case the tool will likely sit unused regardless of how good it is.