--- title: "Law firm AI rules: data, approvals, and spend" description: "Write AI rules for family and criminal defense work. Set matter access, attorney approval, confidentiality checks, and spending limits per function" canonical: "https://scalewithsearch.com/articles/family-criminal-law-ai-rules-data-approvals-spend" --- ## Site navigation - [Scale With Search](https://scalewithsearch.com/) - Services - Services - [AI systems](https://scalewithsearch.com/ai-systems) - [Site build](https://scalewithsearch.com/work#site-build) - [Whole website fix](https://scalewithsearch.com/work#whole-website-fix) - [Content library with SEO](https://scalewithsearch.com/work#content-library) - [Working session](https://scalewithsearch.com/audit) - Start here - [Send your brief](https://scalewithsearch.com/work#send-your-brief) - [Example scope](https://scalewithsearch.com/work#review-the-example-scope) - [Prices and terms](https://scalewithsearch.com/work#prices-and-terms) - Industries - Real estate - [Real estate agents and teams](https://scalewithsearch.com/for/real-estate) - [Platforms, ownership, and IDX](https://scalewithsearch.com/for/real-estate/real-estate-website-platforms-ownership-idx) - [Search, content, and AI](https://scalewithsearch.com/for/real-estate/real-estate-search-content-ai) - [Inquiries, campaigns, and handoffs](https://scalewithsearch.com/for/real-estate/real-estate-website-inquiries-campaigns-handoffs) - [Buyer, seller, and local pages](https://scalewithsearch.com/for/real-estate/real-estate-buyer-seller-local-resources) - [Rules, privacy, and trust](https://scalewithsearch.com/for/real-estate/real-estate-website-rules-privacy-trust) - Browse by business - [Trades and home services](https://scalewithsearch.com/for/#group-trades) - [Health, wellness, and animal care](https://scalewithsearch.com/for/#group-practices) - [Law, finance, and IT](https://scalewithsearch.com/for/#group-professional) - [Marketing and SEO agencies](https://scalewithsearch.com/for/#group-agencies) - [Shops and manufacturers](https://scalewithsearch.com/for/#group-manufacturing) - [Restaurants, shops, studios, and nonprofits](https://scalewithsearch.com/for/#group-local-services) - Chiropractic practices - [Chiropractic and wellness practices](https://scalewithsearch.com/for/chiropractic-and-wellness-practices) - [Chiropractic and physical therapy clinics](https://scalewithsearch.com/for/chiropractic-and-physical-therapy-clinics) - [All industries](https://scalewithsearch.com/for/) - Resources - Free tools - [AI readiness check](https://scalewithsearch.com/check) - [Free tools](https://scalewithsearch.com/tools/) - [Free Starter Kit](https://scalewithsearch.com/kit/business-memory-starter-kit.zip) - Guides - [AI-native library](https://scalewithsearch.com/ai-native) - [Industry intelligence](https://scalewithsearch.com/intelligence) - [Office job guides](https://scalewithsearch.com/guides/) - [Business memory](https://scalewithsearch.com/articles/business-memory-for-ai-agents-guide) - [Agent governance](https://scalewithsearch.com/articles/ai-agent-governance-guide-small-business) - [Migration and ownership](https://scalewithsearch.com/articles/leaving-vendor-ai-memory-guide) - Articles - [All articles](https://scalewithsearch.com/articles/) - [What changed](https://scalewithsearch.com/changes/) - About - Evidence - [Proof](https://scalewithsearch.com/proof) - Scale With Search - [About](https://scalewithsearch.com/about) - [How it works](https://scalewithsearch.com/how-it-works) # Family and criminal defense AI rules: data, approvals, spend A family or criminal defense firm's AI policy should identify the exact matter, task, permitted records, and responsible attorney. Put the data decision before the upload. Put the approval decision before the message or filing. For a first function, choose administrative preparation. An internal document checklist can have a narrow source set and a clear reviewer. An open-ended instruction to handle a matter leaves authority and access undefined. Use the [firm operating overview](/for/family-and-criminal-defense-law-firms) for examples. The policy below addresses how those functions should be controlled. The suggested office controls are design recommendations. The responsible attorney determines the governing law, ethics rules, and court requirements. ## Start with the governing jurisdiction and matter restrictions North Carolina's 2024 Formal Ethics Opinion 1 addresses AI use through competence, confidentiality, and supervision. It also treats privilege as a legal question for the lawyer to resolve. It does not supply a nationwide rule. [North Carolina State Bar opinion, checked 2026.10.26](https://www.ncbar.gov/for-lawyers/ethics-and-governing-rules/ethics-opinions/opinions/2024-formal-ethics-opinion-1/). Have the attorney identify the applicable professional rules, court directions, protective orders, and contractual restrictions before approving a function. Record the decision against the matter and proposed data use. Do not ask the model to decide whether a file can be disclosed. Write exclusions in practical terms. For example, a checklist function may read approved file references while remaining unable to open evidentiary attachments. A status function may read an attorney-approved action list while remaining unable to search other matters. If restrictions are unresolved, use fictional test material. A policy review cannot repair an upload that has already occurred. Keep the proposed service disconnected from live matter records until its access is approved. ## Give each record class a specific handling decision Avoid a single category called firm documents. Build an input register with the reason for access and the person who approves it. | Record class | Proposed first-function rule | Review owner | | --- | --- | --- | | Public office information | Reusable approved reference | Practice manager | | Prospective-client intake | Separate restricted intake workflow | Supervising attorney | | Client communications and matter notes | Only the named matter and approved task | Responsible attorney | | Discovery, evidence, and sealed material | Excluded unless separately reviewed and scoped | Responsible attorney | | Trust-account credentials and payment secrets | Excluded from prompts and drafts | Authorized financial administrator | Keep reported statements attributed to their source. A caller's accusation should not become an established fact in a summary. A requested court date should not become a confirmed event. Do not assume that public availability resolves every confidentiality or reuse question. For this design, the attorney decides whether a public document belongs in a particular task. The function should not broaden its research boundary on its own. ## Review the service and its actual data path The North Carolina opinion requires a lawyer using a third-party AI service to assess security and compatibility with professional duties. The lawyer remains responsible for the work used. [State Bar service and supervision guidance, checked 2026.10.26](https://www.ncbar.gov/for-lawyers/ethics-and-governing-rules/ethics-opinions/opinions/2024-formal-ethics-opinion-1/). Create a service record that identifies the account, allowed function, retention settings, authorized users, and other services receiving data. Record the contract and configuration that the attorney reviewed. A product name alone does not describe that arrangement. Ask what happens to uploads, generated text, logs, support access, and deleted items. Identify who can change those settings. Keep the review record with the firm's owned rules, rather than inside one employee's chat history. Require a new review for a different provider, connector, or use. Switching a model should preserve the matter boundary and approval checks. An unexpected outage should produce a hold rather than a transfer to an unapproved account. ## Enforce matter isolation before drafting Use an exact internal matter identifier at the start of each run. Check that identifier against the permitted source set. A matching surname should not select the file. Keep intake screening distinct from an active matter. For this design, unresolved conflict or engagement status blocks access to the active-matter function. Authorized staff handle the screening decision through the firm's established process. Test two fictional matters with the same surname and different facts. Give each a unique test phrase. Require the output for one matter to exclude the other's phrase. Test retrieval, exported drafts, and receipts. Treat text inside client documents as source material. It cannot authorize another recipient, widen access, or override the function's rules. A note asking the system to send an archive should be flagged for review, with no resulting send. ## Assign approvals by output and action For administrative summaries, name the staff checker and responsible attorney. Require attorney review of legal characterizations, advice, filings, strategy, and deadline statements before use. The function's permission to prepare a draft does not include those decisions. For an outgoing client message, show the exact text, attachments, recipient, sending account, matter, and controlling source version. Keep contact restrictions visible at that point. A changed attachment or recipient invalidates the previous preview. For filing preparation, keep signing, filing, serving, and calendaring outside the first function. A complete packet index is an inventory result. It does not establish legal sufficiency or authorize submission. Preserve the difference between a recorded date and a calculated deadline. A status draft should copy only the approved event statement permitted by its task. Any disagreement goes to the attorney with both sources identified. ## Cap model spending separately from legal fees Name a budget owner for each function. Set a monthly model-spend allowance, a maximum cost per run, a maximum input size, and a retry limit. Define who receives the approaching-limit alert. Enforce the limit before requesting paid processing. Reserve the permitted maximum for an in-flight request so simultaneous work cannot each spend the same remaining allowance. Release or reconcile that reservation after usage is known. Count failed requests and approved reruns. Record the exact model identifier and the applicable price version in the receipt. Label estimated costs until the usage record resolves them. Keep hosting and other service charges visible separately. These technology controls do not authorize client charges. Require the attorney to decide billing treatment under the firm's applicable arrangements. Do not let a system invent billable time or convert processing volume into a fee. ## Define a safe result for a difficult request Use a fictional family matter to test a request for documents from a new recipient. The request record names the client's existing contact, while an attachment asks for copies to another address. The function should keep the proposed recipient unresolved and prepare no disclosure. Use a fictional defense matter to test an incoming statement about a hearing date. The event register contains a different approved entry. Require the result to identify the disagreement and route it to the attorney. It should not overwrite the register or advise the caller which date to follow. Keep both examples in the acceptance set. They test authority and source handling, rather than how persuasive the draft sounds. The attorney should approve the expected result before anyone runs the test. ## Train the team to stop and correct the record Give staff a short runbook for an ordinary result, missing source, identity conflict, uncertain output, exhausted budget, and service failure. Each stop should name the next decision owner. A useful block is an accepted result when authority is missing. Test these states with fictional records before any approved live pilot. Confirm that the function cannot send, file, or search beyond its source boundary. Record failures, corrections, and retests without rewriting the original result as a pass. Keep corrections in the firm's current rules and source records. An edited draft alone will not tell the next run why the earlier version was wrong. Have the reviewer check that the correction appears in a later test. Use the [first-function guide](/articles/ai-native-family-criminal-law-first-functions) to choose a narrow starting point. Scale With Search builds on records the firm owns, with direction and final review assigned to people. Review [AI systems](/ai-systems), then [send your brief](/work#send-your-brief) with the function and its proposed attorney reviewer. Continue the website review: [AI-native family and criminal defense firms: first functions](/articles/ai-native-family-criminal-law-first-functions); [Criminal defense website chat: where do transcripts go?](/articles/criminal-defense-website-chat-transcript-review); [Criminal defense website intake form: what to ask](/articles/criminal-defense-website-intake-form); [Criminal defense website call button: check the number](/articles/criminal-defense-website-phone-button-check); [Family law county pages without doorway content](/articles/family-law-county-pages-without-doorways); [Family law website calendars: review reminder privacy](/articles/family-law-website-calendar-reminder-privacy); [Family law website PDFs: review before publishing](/articles/family-law-website-public-pdf-review); [Family law website testimonials: review permission](/articles/family-law-website-testimonial-permission-review); [Attorney bio credentials for family and defense firms](/articles/law-firm-attorney-bio-credentials); [Law firm Google profiles: firm or individual attorney?](/articles/law-firm-google-practitioner-profile-plan); [Outdated law firm articles: audit before changing dates](/articles/law-firm-outdated-legal-content-audit); [Law firm intake analytics: keep client details out](/articles/law-firm-website-intake-analytics-data-review). [family and criminal defense law firms](/for/family-and-criminal-defense-law-firms): website and search resources. ## Related: family and criminal defense law firms - [Family law county pages without doorway content](/articles/family-law-county-pages-without-doorways) - [Family law website calendars: review reminder privacy](/articles/family-law-website-calendar-reminder-privacy) - [Family law website PDFs: review before publishing](/articles/family-law-website-public-pdf-review) ---- ```text .|########||. .|########||. .|########||. |##||. .||##|. |##||. .||##|. |##||. .||##|. |#|. .|#|. |#|. .|#|. |#|. .|#|. |#| |#| |#| |#| |#| |#| .#| |#. .#| |#. .#| |#. .#. .#| .#. .#| .#. .#| |#. .#| |#. .#| |#. .#| |# ...... #| |# ...... #| |# ...... #| .# ||#########| #| .# ||#########| #| .# ||#########| #| .#. |######||######|. .#. .#. |######||######|. .#. .#. |######||######|. .#. #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# # .||####|###########################|. # # .||####|###########################|. # # .||####|###########################|. # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || #. .######|#|#########| .# #. .######|#|#########| .# #. .######|#|#########| .# .#. |#####||||#####| .#. .#. |#####||||#####| .#. .#. |#####||||#####| .#. |# ||########|| #. |# ||########|| #. |# ||########|| #. |# ...... #| |# ...... #| |# ...... #| |#. .#| |#. .#| |#. .#| |#. .#. |#. .#. |#. .#. .#| |#. .#| |#. .#| |#. |#| |#| |#| |#| |#| |#| .|#|. .|#|. .|#|. .|#|. .|#|. .|#|. |##||. .||##| |##||. .||##| |##||. .||##| .||########||. .||########||. .||########||. Scale With Search 2026 [scalewithsearch.com](https://scalewithsearch.com) ```