AI Governance Framework Module
Firm-level authority and structure, for firms with something to govern
This module establishes who actually has the authority to approve or shut down an AI tool, and the methodology behind that decision. It's built for firms with enough attorneys and practice groups to need a real committee structure — a solo or small firm is usually better served starting with the Ethics module instead. If you're managing multiple practice groups or a growing AI footprint, this is where oversight gets formalized.
Documents in this module
AI Governance Charter
Real authority, not an aspiration statement
A formal charter establishing your firm's AI Governance Committee — authority, composition, decision rights, and reporting lines — fulfilling Rule 5.1 management-supervision obligations. Defines tool-approval authority, policy maintenance duties, risk oversight, and quarterly reporting to firm management.
- Committee authority and composition (Chair, Ethics Counsel, Technology Lead, practice group reps)
- Tool approval authority and registry maintenance
- Quarterly meeting and reporting cadence
- Best suited to firms of 10+ attorneys with multiple practice groups
AI Risk Assessment Procedures
The methodology behind every tool-approval decision
A structured, repeatable process for evaluating AI tool risk before adoption and annually thereafter — the risk-management foundation for defensible AI governance. Assesses confidentiality, professional responsibility, and operational risk via a four-tier rating system tied to approval authority.
- Three risk domains: confidentiality, professional responsibility, operational
- Four-tier rating system (Low / Medium / High / Unacceptable)
- Assessment triggers: new tool, annual review, vendor change, incident
- Minimum 5-year documentation retention standard
Other Modules
ETHICS & PROFESSIONAL RESPONSIBILITY MODULE
Ethics & Professional Responsibility Module
The documents every firm using AI needs, regardless of size
TECHNOLOGY & VENDOR SECURITY MODULE
Technology & Vendor Security Module
The operational layer that keeps the other two modules honest
TRAINING & COMPETENCY MODULE
Training & Competency Module
Proof your attorneys were trained, not just told
Not sure which documents you need?
The Phase 0™ Assessment scores your firm's AI governance readiness and tells you exactly where to start.