Controlled status
Release blocked pending external legal/professional review, final licence and trademark wording, named approvals and final accessibility/publication QA.
Purpose and scope
This non-normative guide applies the 59-control GAISSF v1.0 baseline to legal services and organisational legal functions. It does not provide legal advice or determine privilege, admissibility, professional duties or disclosure obligations.
Five leadership decisions
- Authorised, restricted and prohibited uses.
- Permitted information classes.
- Required competent human review.
- Client, matter and forum restrictions enforced technically.
- Evidence retained for accountable operation.
Principal legal-sector risks
- Confidentiality and professional secrecy
- Privilege and work-product protection
- Authority and citation integrity
- Evidence integrity, provenance and procedural reliability
- Professional responsibility, competence and supervision
- Client and matter separation
- Privacy and data protection
- Bias, fairness and rights impact
- Intellectual property and licence risk
- Cybersecurity and adversarial manipulation
- Operational quality and reproducibility
- Financial, reputational and liability exposure
- Unauthorised legal-service delivery and relationship formation
- Judicial, tribunal and regulatory disclosure compliance
- Billing and fee integrity
Notably absent
- No claim that AI use is inherently incompatible with legal professional duties.
- No claim that use of an AI provider automatically preserves or waives privilege.
- No claim that GAISSF conformance establishes legal, ethical, regulatory or evidentiary compliance.
- No claim that AI-generated legal work is inherently admissible or inadmissible.
- No claim that human review eliminates all AI-related risk.
- No claim that private deployment automatically ensures confidentiality.
- No claim that provider certification establishes operating effectiveness for a specific legal use.
- No claim that citation functionality proves authority validity.
- No claim that SEC-048 determines whether a court, tribunal or regulator requires disclosure of AI use.
- No claim that technical safeguards alone preserve privilege, work product or professional secrecy.
- No jurisdiction-specific conclusion on unauthorised practice, attorney-client relationship formation, fee ethics or disclosure duties.
Package downloads
Replace repository links after final publication approval. Available artifacts include DOCX, PDF, XLSX, JSON, CSV, schema, CFF, validation and gate records.