Can a law firm license its business records to AI companies?

Updated October 25, 2026 · How we research

Why is a law firm different from other businesses?

Lawyers are bound by professional conduct rules adopted by each state. Rules based on the ABA (American Bar Association) Model Rule 1.6 generally bar a lawyer from revealing information relating to the representation of a client unless the client gives informed consent, the disclosure is impliedly authorized to carry out the representation, or a listed exception applies. The same rule requires reasonable efforts to prevent unauthorized disclosure or access.

This duty is broad. It covers information relating to the representation regardless of where it came from, and the ABA's 2024 ethics guidance on generative AI (Formal Opinion 512) notes that other model rules extend similar protections to former and prospective clients. Attorney-client privilege is a separate protection. The privilege belongs to the client, so the firm cannot give it away on its own.

This page is not legal or ethics advice. Rules differ by state. Any firm considering this should read its own jurisdiction's rules and ethics opinions and consult ethics counsel or the state bar's ethics hotline before doing anything.

What systems does a law firm usually run on?

Most firms use practice management software to organize matters and tasks, run calendars and deadlines, track time and expenses, bill clients, manage trust accounting, and store documents. Around it sit email, a document management system, accounting software and often a separate HR and payroll system.

Nearly everything in a practice management or document system relates to a client matter. That is why the usable share for licensing is so small.

What, if anything, might be in scope?

Only records that do not relate to any client representation, and only after ethics review. Even then, firm records often mention clients in passing, so each category needs checking. Possible candidates, subject to that review:

• Firm administrative policies and procedures with no client references, such as office, IT or HR policy templates
• Internal training material that does not draw on client matters
• Vendor, facilities and general operations correspondence that does not mention clients
• Firm-written marketing content already published

What has to stay out?

Treat the following as out of scope. Client consent would be needed for each client and matter, and getting informed consent for a third-party AI license raises its own ethics questions. Most firms will not find that practical.

• Client files, pleadings, briefs, contracts and work product
• Client email and correspondence, including internal email about matters
• Time entries and billing narratives, which describe client work
• Trust account records
• Conflict-check databases and client lists
• Information about former and prospective clients
• Employee personal and payroll records

Does removing names make client material safe?

Not necessarily. The confidentiality duty covers information relating to the representation, not just names. Facts in a document can identify a client or matter even with names removed, especially in a small market or a notable case. Whether any de-identified client material could ever be used is a question for your state's ethics rules and ethics counsel, not for a buyer or a matching service.

How should a law firm get started, if at all?

Start with ethics review, not data. Read your state's version of Rule 1.6 and any ethics opinions on AI and data, and consult ethics counsel. If that review leaves room for purely administrative records, inventory those records and check each one for client references.

Many firms will conclude that there is too little to justify the effort. That is a reasonable outcome. If a buyer approaches the firm asking for client material, treat that as a reason for caution.

• Check rights: see Does your company actually own the data it wants to license?
• Plan exclusions: see What can be excluded?
• Vet the approach: see Is this offer legitimate?

General information, not legal, tax or financial advice.