LegalApp

A private AI workspace for law firms.

LegalApp follows the life of a legal matter, from opening a client file through document ingestion, research, drafting, professional review, and eventual retention or deletion. It is hosted on infrastructure dedicated to each firm.

Talk about a firm workspace

Five core functions

Proposed capability, and the value it is meant to give.

Client and matter workspacesOrganises clients, matters, parties, teams and documents in a private workspace. Gives authorised staff a structured location for matter information.

Document intakeAccepts uploaded or emailed documents, converts scans into searchable text, and classifies and tags documents to the relevant matter. Reduces manual document handling and improves information retrieval.

Research and questionsAllows users to ask plain-language questions across matter documents, with answers citing source pages. Helps professionals locate supporting information and verify the basis of an answer.

Drafting and reviewProduces initial drafts from firm templates, compares clauses and suggests redlines. Accelerates document preparation while leaving acceptance and judgement with the lawyer.

Summaries and chronologiesCreates case summaries, event timelines and key-date lists from the matter file. Supports case preparation and review of extensive document collections.

Confidentiality

One isolated container per client.

Each client container has its own document store, search index, encryption key, access list and audit log. Matters for that client are organised inside it. The design aims to stop searches and AI answers from crossing client boundaries. The AI draws on the client container the lawyer has open. There is no shared search index across clients.

The access gateway checks user roles and matter-team membership before permitting access. Application services and the AI model are shared within the firm’s environment, and the design states that they retain no client documents between requests. Views, queries and exports are logged. At the end of the agreed retention period, the proposed process deletes the container and its encryption key together.

These controls are a basis for a confidentiality and governance discussion. Their effectiveness would need to be validated during implementation, including backups, legal holds, retention exceptions, and access between different matter teams inside the same client container.

Who reaches it

Office staff, remote lawyers, and support on request.

The application is intended to be reached through HTTPS over VPN, without direct exposure to the public internet.

Office

Site-to-site IPsec VPN

An encrypted tunnel between the firm’s edge firewall and the data centre firewall.

Remote

Client VPN and multifactor authentication

For lawyers working away from the office. Outbound internet is blocked by default, with exceptions for approved legal research sources.

Support

On request, and with approval

Restricted to the management zone. Sessions are logged.

Integration

The systems the firm already runs

Identity directory and single sign-on, email and document systems, the conflicts register, and a SIEM receiving audit logs over encrypted transport.

The hosting environment

A good place to begin

Bring a defined set of workflows. We can talk about intake, questions, first drafts and summaries.

Contact our team