Self-assessment
AI Governance Scorecard: Firms
Twelve yes-or-no questions, two minutes. It answers one question: does your firm have the AI governance a carrier or client would expect?
1Does your firm have a written AI policy that is actively enforced?
2Is AI training mandatory for all lawyers who use the tools?
3Does your firm maintain an approved tools list and require use only from that list?
4Do you know what AI tools your associates are actually using, not just what the policy says they use?
5Does your firm require verification of citations and factual claims before any filing?
6Do you have a documented process for disclosing AI use to clients and opposing counsel?
7Do you conduct security reviews of AI vendors before approving them?
8Have you reviewed the data retention and privacy terms of your AI tools in writing?
9Do you have an incident response plan for when an AI tool makes an error on a matter?
10Has anyone at the firm completed CLE or advanced training on AI governance?
11Have you notified your malpractice carrier and liability underwriter of your AI use?
12Do you track AI-related expenses and tool costs separately for billing and budget purposes?
0 of 12 answered. Your score and fix list appear when all twelve are done. Nothing you answer is stored or sent anywhere.
The other scorecards
Let your associates self-check:
the lawyer scorecardYour incoming hires:
the student scorecardThis scorecard is an informational self-assessment, not legal advice, and taking it creates no attorney-client relationship. Rules on lawyer use of AI vary by jurisdiction and change frequently; confirm any obligation with your state bar or ethics counsel.
Ready to close the gaps?
Irys is built around the practices this scorecard measures: source-linked output, citation review, and matter context that persists.