Can you write one for a law firm specifically?

Yes, including confidentiality, privilege, court disclosure obligations and client outside-counsel guidelines. It is a common instruction and the constraints are specific enough to matter.

Should the policy just prohibit AI?

That is a choice you and the client make, and we will draft it. In practice prohibition-only policies tend to move usage out of sight rather than stop it, which is worth weighing.

Do you provide the training too?

We provide the employee-facing summary and can draft training materials. Delivering training to your client is your relationship, not ours.

AI governance legal support

Internal AI policy drafting

Most AI policies are unfollowable because they are written against a generic idea of AI rather than the tools people are actually using. We draft against the real tool inventory, with rules specific enough to follow and to enforce.

Send us this work →See the full rate card

Published price: $1,000–4,000 / policy
Turnaround: 5 business days
Without us: $8,000–30,000

What you receive

An internal AI use policy drafted to the organisation's actual tools and risk appetite.

A complete policy covering permitted, restricted and prohibited uses by tool and data class
Data handling rules stated by classification, so the rule is legible at the moment of use
Review and verification requirements for AI-assisted output, proportionate to the use
Disclosure obligations: to clients, counterparties, courts or regulators, as applicable
Approval routes for new tools, with who decides and on what criteria
Enforcement, training and review provisions, plus an employee-facing summary

What it costs, and what it replaces

Both figures are published ranges for the same unit of work. Ours is fixed before we start; if our process gets faster, that is our gain and your price does not move.

How engagements are structured →

Price per policy · same work, both sides

Adnah Legal: $1,000–4,000 / policy
Typical cost without us: $8,000–30,000 / policy

Roughly 87% lower at the midpoint of each published range.

How the work runs

Tool reality check

We start from what is actually being used, including the tools people adopted without asking. A policy that ignores them is a policy that is already being breached on the day it is issued.

Rules by data class

Rules are written by data classification rather than by abstraction, so an employee can tell at the moment of use whether a given input is permitted.

Proportionate verification

Review requirements are set proportionate to the use: a first draft of internal notes and a client-facing analysis do not need the same verification, and pretending otherwise makes the policy ignorable.

Approval, disclosure and delivery

Approval routes and disclosure obligations are drafted with named decision-makers, and the policy is delivered with a short employee-facing summary people will actually read.

What we need from you

The tools actually in use, approved or otherwise
The organisation's data classification scheme, if one exists
Sector obligations and any client or contractual restrictions
The risk appetite you and the client have settled on

What we check before delivery

Every rule is checked for whether an employee could apply it without asking a lawyer
Sector and client contractual restrictions are checked as reflected in the rules
Disclosure obligations are checked against the jurisdictions and forums involved
The policy is checked against the actual tool inventory for gaps and contradictions

When firms send us this

Firms and companies whose staff are already using AI without a policy

Client contractual requirements to have an AI policy in place

Policies that exist but are too abstract to follow or enforce

Regulated sectors needing documented AI controls

Questions about internal ai policy drafting

Can you write one for a law firm specifically?
Yes, including confidentiality, privilege, court disclosure obligations and client outside-counsel guidelines. It is a common instruction and the constraints are specific enough to matter.
Should the policy just prohibit AI?
That is a choice you and the client make, and we will draft it. In practice prohibition-only policies tend to move usage out of sight rather than stop it, which is worth weighing.
Do you provide the training too?
We provide the employee-facing summary and can draft training materials. Delivering training to your client is your relationship, not ours.

Firms who send us this usually also send

AI governance

EU AI Act system inventory

A full inventory of AI systems in use, each classified by risk tier under the Act.

$2,000–8,000 / build

AI governance

AI impact assessments

A completed impact assessment for the specific AI system, risks and mitigations documented.

$1,500–5,000 / assessment

Employment

Handbook and policy drafting

A complete employee handbook drafted to current multi-state requirements, section by section.

$1,500–5,000 / handbook

Send one and judge the output.

Internal AI policy drafting at $1,000–4,000 per policy, 5 business days. No minimum, no scoping call, no onboarding cycle.

Start a matter See prices and turnaround