Short answer
It is safe when four controls are in place: access is permissioned and limited to what each role needs, every workflow is documented and logged, attorneys retain oversight of anything substantive, and confidential client data is never used to train public models. Without those, no tool is safe regardless of vendor claims.
- Control 1
- Least-privilege, role-based access
- Control 2
- Documented, auditable workflows
- Control 3
- Attorney oversight of substantive work
- Control 4
- No client data used to train public models
Questions to ask any vendor
- Which systems will you have access to, and at what permission level?
- Who specifically can see matter data, and how is that list reviewed?
- Is activity logged in a way we can audit later?
- Is our data used to train any model, by you or your subprocessors?
- What happens to our data and access when we end the engagement?
- How are conflicts and confidentiality handled across your other clients?
How Legentive handles it
Access is granted per system and per role, limited to what the work requires, and revocable by the firm at any time. Workflows are written down before they run, so the firm knows exactly what happens at each step and can audit it afterward. Anything substantive routes to attorney review, and the firm retains ownership of its data and systems throughout.
The real risk is informal process
In most firms the confidentiality risk is not a specific tool. It is client information sitting in personal inboxes, spreadsheets on desktops, text threads, and undocumented handoffs between staff. Moving that work into one permissioned, logged system usually improves the firm's security posture rather than weakening it.
Frequently asked questions
Is client data used to train AI models?
No. Confidential client information is not used to train public models.
Who controls access?
The firm. Access is granted per system and per role, and can be reduced or revoked at any time.
Does the firm keep ownership of its systems and data?
Yes. Legentive operates on top of the firm's existing systems; the firm keeps ownership and administrative control.
Last reviewed 2026-08-28 · Legentive