Control over AI

For law firms and legal departments

Help lawyers use AI without exposing client information.

See which AI tools the firm uses and record, for each one, what may be done with case information. Lawyers get help as soon as client information appears in their text.

Prefer to try it yourself? 14 days free, no credit card.

AI is already part of legal work. The firm's oversight is not.

Lawyers use AI to summarise memos, compare clauses and write first drafts. A colleague recommends a new contract tool and it gets tried straight away. Those texts hold matter numbers, party names and amounts covered by professional confidentiality. Here's how the firm stays in control, in four steps.

1 See

See which AI tools the firm uses.

Firm management wants to know whether lawyers use the firm's research platform, or a contract tool a colleague recommended. The catalogue shows the tools seen at this firm, from Copilot and CoCounsel to ChatGPT and new contract tools such as Legora and Robin AI, each with a risk score and the firm's decision. Usage and Compliance show what share of AI use goes through approved tools.

More about See

All tools

Every known AI tool, filterable by risk and properties.

Add your own tool
AllAllowedLimited useNo decision yet7Not allowed
Search by tool, vendor, domain or former name…
FiltersOnly in use10 tools
ToolSectorCountryVisitsRiskDecision
DeepSeek
DeepSeek
GeneralChina96Critical · 90/100Not allowed
ChatGPT
OpenAI
GeneralUnited States1,842High · 66/100Limited use
Robin AINew
Robin AI
LegalUnited Kingdom31Medium · 53/100No decision yet
Claude
Anthropic
GeneralUnited States926Medium · 45/100Limited use
CoCounsel
Thomson Reuters
LegalCanada926Medium · 45/100Allowed
Lexis+ AI
LexisNexis
LegalUnited Kingdom604Medium · 45/100Allowed
Spellbook
Spellbook
LegalCanada84Medium · 41/100No decision yet
Ironclad AI
Ironclad
LegalUnited States312Low · 38/100Limited use
LegoraNew
Legora AB
LegalSweden46Low · 32/100No decision yet
Microsoft 365 Copilot
Microsoft
GeneralUnited States8,124Low · 28/100Allowed

An impression of the AI tools catalogue. The tools and risk scores come from the product. The decision in the last column is the firm's own.

2 Decide

Assess a new tool before case files go into it.

An associate tries Robin AI to check a lease for risks. Nobody at the firm has assessed the tool yet. The screen shows the assessment of Robin AI: a UK vendor that went into receivership in 2025, data held in the United Kingdom, unknown whether it trains on input, and a data processing agreement (DPA) on offer. The firm decides, for example, that no case information may go in for now, and records that in the AI register.

More about Decide
AI register
Robin AI

Robin AI

Decision

Decision

Decision
No decision yet.
Designated alternative
CoCounsel Change

Not in the register yet. Make a decision to add it.

About the tool

From the BeeSensible catalog, not editable here.

RiskMedium · 53/100BeeSensible's estimate, not a legal judgement · reviewed on 2 Oct 2026

ISO 27001 and SOC 2 publicly confirmed. Vendor went into receivership in 2025 and was sold off in parts. Connects to document systems and reads case files there. 2025: In receivership after a winding-up petition from HMRC Dimensions: Data governance (3), Jurisdiction (2), Compliance (1), Incidents (2), Integration scope (5), Vendor trust (4).

Vendor

Vendor
Robin AI
Country
United Kingdom
Kind of tool
Legal AI

Data

Trains on input
Unknown
Hosting and region
United Kingdom
Processing agreement from the vendor
Available

Regulation

EU AI Act
Depends on use
Certifications
ISO 27001, SOC 2

The classification is about the tool itself; which obligations apply depends on your use.

Product example with fictional data.

3 Help

Help lawyers protect client information while they work.

A lawyer asks an AI tool to summarise a confidential memo on an acquisition. The matter number, the client, the counterparty's lawyer and the purchase price are all in it. BeeSensible highlights those details in the text, along with the client's company number. One click turns them into a placeholder such as [NAME1], or removes them, and the legal question stays intact. The firm can also set masking to happen automatically when text is pasted or sent. A matter summary can be anonymised the same way before the file is shared.

If a lawyer mentions a matter name such as Project Kestrel in a prompt, it is highlighted once the firm has added it as a custom term.

Custom terms that fit here

  • Project Kestrel Project
  • Project Linden Project
  • KS-0418 Code or reference
  • Hartwell Holdings Client
More about Help
Gemini
Can you turn this memo into a short summary of the matter?
I can. Do check the party details before you share this outside the file.
BeeSensible puts its highlights right in the text.

Product example with fictional data.

4 Substantiate

Show the partnership and your insurer what the firm does.

The partnership wants to know what the firm does to keep client information out of AI tools, and the professional indemnity insurer asks the same. Each month or quarter you create a report: how many tools have a decision, how many critical details were adjusted before sending, and how often lawyers chose the approved alternative after a notice. Always for the whole firm, never per lawyer, and downloadable as a PDF.

More about Substantiate
Accountability

AI use, decisions and sensitive data, for accountability and audits.

Q3 2026Create report

1 July to 30 September 2026

Visibility of AI use

GDPR art. 5(1)(c) · NIS2 art. 21(2)(a) · AI Act art. 4(1)

11
AI tools observed
7
Tools with a decision
7 of 11 observed tools

Which AI tools staff visited, and for how many of them a decision is recorded.

Explanation

Protection of sensitive data

GDPR art. 5(1)(c) and 32(1) · NIS2 art. 21(2)(d)

3,202
Critical detections
86%
Adjusted
2,754 of 3,202 masked or removed

How often BeeSensible flagged critical data, and how often it was then masked or removed.

Only in the apps where BeeSensible helps; what happens elsewhere is not included.

Explanation

Supporting staff

NIS2 art. 21(2)(g) · AI Act art. 4(1)

148
AI notices shown
37%
Alternative opened
after 55 of 148 notices

How often an AI notice appeared, and how often the suggested alternative was opened after it.

These figures do not show whether staff are sufficiently trained.

Explanation

Decisions as they stood on 30 September 2026, at the end of the period.

Measurement coverage

How large the part is that BeeSensible measures.

  • BeeSensible is activated on 93% of the seats

    112 of 120 seats in the subscription. Activated means the extension or the desktop app reported in at least once; it does not mean every account is protected at all times.

  • 78% of AI use was in apps where BeeSensible helps (estimate)

    › How is this calculated?

Relevant laws and regulations

GDPR art. 5(1)(c) · NIS2 art. 21(2)(a) · AI Act art. 4(1) · GDPR art. 5(1)(c) and 32(1) · NIS2 art. 21(2)(d) · NIS2 art. 21(2)(g) · AI Act art. 4(1)

Show provisions ⌄

Product example with fictional data.

A customer's view

"Everyone here knows you have to be careful with customer data. But that awareness fades when you're busy. Knowledge is no guarantee of behaviour. That's exactly why we use BeeSensible."
Portrait of Debby Elfrink, operations director at Speck Pompen Debby Elfrink Operations director, Speck Pompen

This customer works in a different sector.

Trust and getting started

Your data stays safe, and getting started is quick.

What happens to your data

  • Text is checked on our own servers, hosted by the European companies Scaleway and Hetzner, and deleted straight away.
  • The dashboard shows totals for the whole organisation, never a breakdown by employee. Figures only appear once five or more users are active.
  • You get a data processing agreement (DPA). The product DPIA and security information are available on request.
Go to the Trust Center

How to get started

  • Install the extension on a few workstations, or have IT roll it out centrally through Intune or Group Policy, on any plan.
  • Employees get an explanation and short videos about what they'll see and what they can do.
Quick start for admins

Good to know

Questions we often get.

Who sees the list of our matter names and deal codes?

The firm's administrators manage the list. It is stored encrypted and never goes to the detection model. The figures only record that a custom term was found, never which one.

How does this fit professional confidentiality and the GDPR?

A lawyer's duty of confidentiality does not pass to an AI vendor, not even with a DPA. Putting a case file into an AI tool is also processing of personal data. Whether case information may go into a tool is the firm's call, tool by tool. The AI register feeds into your record of processing activities and your DPIA.

Does BeeSensible block AI tools?

Not on its own. People see what was found and what you decided about a tool. You decide whether someone can still go ahead with a tool that is not allowed, and whether masking happens by default. What happens after a highlight or a notice is counted, without content and without a name.

Does this work in Outlook?

Yes. The extension runs in Chrome and Edge, including Outlook on the web. The desktop app also works in Outlook on macOS and Windows; highlights then appear in the app's own window. The notice when someone opens a tool appears in the browser.

Does this replace our AI policy and training?

No, it builds on them. Your AI policy and training lay the groundwork. BeeSensible helps lawyers apply those rules while they work, with highlights in the text and your decision shown when they open a tool.

Read more about ChatGPT and legal professional privilege

Start by seeing which AI tools the firm uses

Start with a few colleagues, or see it in a demo first.

Start free trial

14 days free, no credit card. Rolled out across your organisation within an hour.

Portrait of Rens Timmermans from BeeSensible

Prefer someone to walk you through it?

Rens, BeeSensible

I'm happy to give you a twenty-minute tour. Leave your details and I'll find a time that suits you. You're also welcome to call or email.

Prefer to talk to someone first?

Want a live demo, or a quote for 100+ users? Leave your details and we'll be in touch within one working day.