A law firm should not put client information into an AI tool until it knows what the tool will receive, how that information will be handled, and which professional rules, client instructions, and contractual commitments apply. The American Bar Association’s Formal Opinion 512 offers a U.S. ethics framework, not a vendor approval or a substitute for checking the rules and requirements that govern a particular lawyer, court, or matter.
What ABA Formal Opinion 512 requires lawyers to consider
The American Bar Association Standing Committee on Ethics and Professional Responsibility issued Formal Opinion 512, Generative Artificial Intelligence Tools, on July 29, 2024. It explains that using generative AI does not set aside a lawyer’s existing professional obligations. The opinion states:
As an Amazon Associate I earn from qualifying purchases.
“To ensure clients are protected, lawyers using generative artificial intelligence tools must fully consider their applicable ethical obligations, including their duties to provide competent legal representation, to protect client information, to communicate with clients, to supervise their employees and agents, to advance only meritorious claims and contentions, to ensure candor toward the tribunal, and to charge reasonable fees.”
Recommended Free Tools
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
These duties are a practical framework for assessing a proposed use, not a blanket prohibition or permission. The ABA opinion is general guidance; lawyers must also check the rules adopted in their jurisdiction, applicable court requirements, client instructions, and any matter-specific restrictions.
#1 Best Overall
- Certified to FIPS 197 - High-level information security standard approved by the U.S. Government
- Brute-Force Password Attack Protection - Data is automatically erased after 6 failed access attempts. The data and encryption key are securely destroyed and the crypto drive is reset
- Rugged Double-Layer Waterproof* Design - Protects the crypto drive against knocks, drops, break-in and submerging in water. The electronics are shielded by a hardended inner case. The rubberised silicone outer casing provides a final layer of protection
- Auto-lock - The crypto drive will automatically encrypt all data and lock when removed from a PC/Mac or when the screen saver or "computer lock" function is activated on the host PC/Mac
- Secure Entry - Data cannot be accessed without the correct high-strength alphanumeric 8-16 character password. A password hint option is available. The password hint cannot match the password
Assess what the AI tool will receive and do with information
“Secure AI” is not a sufficient basis for entering confidential material. A product’s marketing description does not establish that a particular plan, setting, or deployment is appropriate for a firm’s client data. Review the actual service and configuration before use.
Map the information flow
Identify what the workflow sends—not just the text typed into a prompt. Consider uploaded documents, prompts, generated outputs, logs, connected repositories, plugins, and other integrations. Determine whether the material includes client identities, privileged communications, personal data, trade secrets, litigation strategy, or information subject to a client or court restriction. Use only the information necessary for the task, and consider whether the work can be done with redacted or de-identified material.
Rank #2
- Certified to FIPS 197 - High-level information security standard approved by the U.S. Government
- Brute-Force Password Attack Protection - Data is automatically erased after 6 failed access attempts. The data and encryption key are securely destroyed and the crypto drive is reset
- Auto-lock - The crypto drive will automatically encrypt all data and lock when removed from a PC/Mac or when the screen saver or "computer lock" function is activated on the host PC/Mac
- Secure Entry - Data cannot be accessed without the correct high-strength alphanumeric 8-16 character password. A password hint option is available. The password hint cannot match the password
- SuperSpeed USB 3.0 - Transfer all your confidential files and folders faster than ever before. Works on both PC & Mac
Read the applicable terms and settings
For the exact service and plan the firm would use, determine how submitted information is processed, retained, deleted, and used for model training or service improvement. Check who can access it, including provider personnel, firm users, plugins, and connected systems. Review the applicable contract, confidentiality commitments, and data-processing terms; a data-processing agreement or a promise about training use may matter, but neither by itself establishes that the whole workflow is suitable.
Vendor policies and product configurations can change. The ABA materials cited here do not independently verify current vendor terms, certify a product, or endorse a particular AI service. The firm must review the documentation and settings that actually apply to its deployment.
Rank #3
- Certified to FIPS 197 - U.S. Government Approved High Level Information Security Standard.
- Protection against brute force password attacks - Data is automatically erased after 6 unsuccessful access attempts. The data of the USB flash drive type c encryption with dual connectors is destroyed and the cryptographic drive is reset.
- Durable dual-layer waterproof design* — Protects the crypto reader from bumps, drops, run-in and immersion in water. The electronics are protected by a hardened internal case. Rubberized silicone outer case provides a final layer of protection.
- Auto-Lock —The cryptographic key automatically encrypts all data and locks when removed from a PC/Mac or when screen protection or "computer lock" is enabled.
- Secure Entry —Data on these flash drives cannot be accessed without the correct alphanumeric password of 8 to 16 characters. A password indication option is available for this flash drive. The hint cannot match the password.
Keep professional judgment and review with the lawyer
Verify facts, law, and legal work product
AI output is assistance, not a substitute for professional review. Before relying on an answer, verify factual assertions against reliable matter materials and confirm legal authorities in authoritative sources. Check that citations exist and support the propositions attributed to them, and assess whether the reasoning fits the facts and law. A fluent response is not proof of accuracy.
Apply particular care to work product that may affect a client’s rights or be submitted to a court. The lawyer remains responsible for the accuracy and appropriateness of filings, representations, and arguments, including the duties of competence, candor toward the tribunal, and advancing only meritorious claims and contentions.
Rank #4
- FIPS 197 with XTS-AES 256-bit Encryption: Provides business-grade security with hardware-based encryption to protect your sensitive data
- Brute Force and BadUSB Attack Protection: Safeguards against unauthorized access attempts and malicious USB attacks with digitally-signed firmware
- Multi-Password Option with Complex/Passphrase modes: Offers flexible password configuration options to meet various security requirements and user preferences
- New Passphrase Mode: Enhanced security feature allowing users to create longer, more memorable password phrases for easier access without compromising protection
- Dual Read-Only (Write-Protect) Settings: Enables write protection functionality to prevent accidental data modification or deletion when needed
Supervise people and tools used in the workflow
Set instructions and review steps for staff and other agents who use AI on firm matters. Decide who may use which tools, for what tasks, and with what information; establish how outputs are checked and approved; and make sure connected services and access controls do not undermine matter confidentiality. Delegating a task or using an automated system does not remove the lawyer’s responsibility to supervise the work.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsHandle client communication, court requirements, and fees in context
Formal Opinion 512 includes duties to communicate with clients and charge reasonable fees. Whether a particular AI use calls for client communication depends on the circumstances and applicable rules, client expectations and instructions, and the significance of the use to the representation. Check engagement terms and matter-specific commitments rather than assuming that every use requires the same disclosure—or that no disclosure is needed.
Best Value
- FIPS 140-3 Level 3 (Pending) Certified Military-Grade Security
- OS/Device Independent
- XTS-AES Hardware Encryption
- Enforced Alphanumeric PIN
- Multi-PIN (Admin and User) Option
Billing should reflect the work actually performed and comply with the lawyer’s applicable fee obligations. Do not treat AI use as a reason to charge for work that was not done or to pass along a tool cost without considering the governing fee agreement and professional requirements. For court-facing work, check the relevant court’s rules, orders, and filing requirements in addition to the lawyer’s candor obligations.
A pre-use decision for each workflow
Before adopting an AI task for client work, the responsible lawyer and firm decision-makers should be able to answer these questions:
- What is the task? Define the intended use and decide whether AI assistance is appropriate for its legal and factual stakes.
- What information leaves the firm? Identify prompts, files, logs, and connected data, then minimize or remove sensitive information where feasible.
- What protections apply? Check the exact plan’s current processing, retention, deletion, access, and training-use terms, as well as the firm’s contract and client or matter restrictions.
- Who can see or act on the information? Review user permissions, provider access, integrations, plugins, and safeguards for separating matters and limiting disclosure.
- How will a lawyer verify and approve the result? Specify checks for factual accuracy, legal authority, judgment, and any court submission, along with appropriate staff supervision.
- What other obligations govern this matter? Check jurisdictional professional rules, court requirements, client communication needs, fee terms, and any client instructions or confidentiality commitments.
If the firm cannot answer these questions for the actual configuration, it should not submit client material to that workflow until it has resolved the uncertainty or selected a different approach. No ABA source cited here establishes that any vendor or plan is secure for law firms.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
