Professional Responsibility July 30, 2026 5 min read

A policy nobody signed is not a policy

A managing partner circulates the firm's new AI policy by email on a Tuesday. Fourteen months later, a carrier asks at renewal whether the firm has an AI policy in place and whether personnel have acknowledged it. The first answer is yes, easily. The second answer is a search through a year of sent mail.

P

Peter J. Keane

AI Business Systems Architect

Share LinkedIn X

A managing partner circulates the firm's new AI policy by email on a Tuesday. Fourteen months later, a carrier asks at renewal whether the firm has an AI policy in place and whether personnel have acknowledged it.

The first answer is yes, easily. The second answer is a search through a year of sent mail.

The gap between having and adopting

Most firms handle this with a signature line at the bottom of the policy. That is genuinely better than nothing, and nearly every free AI policy template includes one. But a signature line proves a single thing: that one person signed once, at one moment, assuming the page came back and someone filed it.

It does not tell you who joined the firm in March and never received the policy. It does not tell you what happens when the policy is revised in June. It does not tell you whether the associate who never returned the form still has access to the firm's AI tools. And it does not produce anything you could hand a carrier that demonstrates a controlled, recurring process.

A program rather than a form

The AI Policy Certification & Acknowledgment Program treats certification as an ongoing obligation with defined triggers rather than a one-time signature.

Three certification triggers. Within thirty days of any new or revised policy taking effect. Within five business days of joining the firm. Annually, on completion of refresher training. Every person — attorneys, staff, and contractors alike.

A retention standard. Signed certifications are held for the duration of engagement plus seven years, so the record survives the departure of the person who signed it.

An escalation path. The AI Governance Officer reports non-compliance to practice group leadership within five business days of a missed deadline. Someone specific finds out, on a defined timeline.

Access gating. Personnel who have not certified may not use AI tools on client matters. This is the provision that gives the rest of it force — certification stops being paperwork and becomes a prerequisite.

The honest pitch

The acknowledgment language itself is not exotic. You can find comparable wording in several free templates, and we would rather say that plainly than pretend otherwise.

What you cannot find free is the workflow around it — the triggers, the retention standard, the escalation, and the access consequence. That workflow is the difference between a signature in a folder and a compliance record.

It is also priced accordingly. At $197 this is the least expensive document in the catalog, and deliberately so.

AI Policy Certification & Acknowledgment Program — $197

Download the full comparison guide (PDF)

Share LinkedIn X
P

Peter J. Keane

Founder, KeaneAdvisors.AI

Peter J. Keane is the founder of KeaneAdvisors.AI. He advises law firms and professional services organizations on AI governance, risk management, enterprise communications, and responsible AI deployment strategy.

Know Your Exposure

Find out where your firm stands.

The AI Governance Phase 0 Assessment delivers your Defensibility Score immediately — most firms complete it in under two hours.

Start Defensible AI™ Assessment