Is AI use at the firm safe?

AI use safety checklist

• A written AI use policy exists and staff have signed it.
• Staff use business AI accounts, not personal or consumer accounts, for work.
• It is clear which tools are approved and which data must never go in.
• Leavers lose access to approved AI tools the same day.
• For clinics: any AI tool that could touch patient data sits on a plan with a Business Associate Agreement.
• For law firms: confidentiality and supervision duties are written into the AI rules, in line with ABA Formal Opinion 512.
• For accounting firms: client tax and financial data stay out of unapproved tools, with FTC Safeguards duties in mind.
• For life sciences: generative AI is kept away from critical GxP decisions unless Quality agrees, and validated systems stay under change control.
• Someone owns vendor and settings changes when tools update their terms.
• Leadership can name the AI tools already in use this month.

Request a walkthrough

After the Safety Check

After a security baseline and an AI Safety Check are in place, an AI Operations Partner engagement can run and improve approved tools and automations.

FAQ