FirmOps.io

AI for law firms: the 2026 guide

AI for law firms in 2026: what it does, what to use, and how to start.

AI for law firms means using large language models to read, draft, sort, and summarize the work a firm already produces: intake, documents, email, case status, and billing. It works best connected to the firm’s real systems, under a written policy, with a person releasing anything that leaves the firm.

FirmOps, a Vertana brand, builds and runs an MCP server that connects your case system (Clio, Filevine, SmartAdvocate, and others), Gmail or Microsoft 365, documents, billing, and phones to the AI your firm already uses, like ChatGPT or Claude. The brain drafts and stages. A human always releases.

Written from inside a working personal-injury firm: 1,000+ matters through the system, case launch cut from 2.5 hours to 10 minutes.

Updated November 1, 2026. Rebuilt as a full guide: functions, tool categories, risks, and how to start.

By function

What AI does in a law firm today.

Skip the demos and look at the work. Below is what current AI does reliably in each part of a firm, and what a person still owns. Adoption is uneven and the surveys measure different things, so if you want numbers, our law firm AI statistics page keeps every figure tied to the source that produced it.

Intake and lead follow-up

Summarizes the call or web form, flags missing facts and conflicts to check, drafts the follow-up email or text, and preps the new matter from what the client already told you.

A person still: Staff confirm the facts, run the conflict check, and decide whether to take the case.

Documents and drafting

Produces first drafts of letters, records requests, demand sections, engagement letters, and client updates from the actual file. Summarizes long records and pulls out dates, providers, and gaps.

A person still: A paralegal or attorney edits and approves every draft. Templates still matter for anything filed.

Case work and status

Answers "what is going on with this matter?" from the case system, the documents, and the email thread. Spots quiet matters, stale tasks, and missing items before a client calls to ask.

A person still: The case owner decides the next step. The AI suggests, it does not change the file on its own.

Email

Sorts the inbox by matter, flags deadlines and opposing-party or carrier replies, and drafts responses from source context into your drafts folder.

A person still: Nothing leaves the inbox until a person reads it and clicks send.

Billing and time

Reconstructs time from email, calendar, and document activity, drafts billing narratives, and flags unbilled work or trust-account items that need a look.

A person still: The billing attorney reviews entries. Trust accounting stays under the firm's normal controls.

Legal research

Finds starting points, explains doctrine in plain English, and outlines arguments. Dedicated legal research tools add citator checks and primary-source databases.

A person still: A lawyer reads and verifies every authority before it goes in a brief. No exceptions.

Notice the pattern. AI is strongest at reading and first drafts, and it gets much stronger when it can see the whole file instead of whatever someone pasted into a chat window. Staff roles shift toward review and judgment. If that is the question on your team, see legal AI for paralegals.

Our take

What AI should a law firm actually use?

A frontier model you control, in a harness that connects it to your real firm context. That means one of the current frontier models from Anthropic or OpenAI, under business terms, in a setup where you can see what it reads, watch what it does, and swap the model when the next one lands.

Be wary of wrapped “legal AI” that will not tell you which model it uses. If you cannot choose the model, you are not on the frontier. You are on last year’s.

Then build the layer, not another tool. One firm brain that reads across your case system, documents, email, SMS, billing, and phones is what makes a frontier model useful for your firm instead of just useful in a chat window. The connection standard that makes this practical is MCP, explained in what MCP means for a law firm. The concept itself is defined in what is a firm brain, and the comparison with buying more seats is in legal AI software vs a purpose-built firm brain.

Two rules hold it together. Every workflow is approval-gated: the brain drafts and stages, a person releases. And people keep live client calls. AI runs everything behind the phone.

AI belongs here

Behind the phone (yes)

Drafting, intake logging, records tracking, provider letters, demand prep, client updates, follow-up. Everything a firm produces on paper or in email. AI belongs here.

People, not AI

On the phone (no)

Live client calls belong to people. We recommend IVR, smart routing, and human backup, not an AI voice on your intake line.

AI belongs here

Cross-system reasoning (yes)

Reading a Clio matter, the dec page in Dropbox, and the carrier email in one supervised context to catch a mismatch. This is the job a firm brain is built for.

People, not AI

Unsupervised sends (no)

AI never sends a client message, files anything, or writes to the case system on its own. Drafts land in your team's email drafts or behind approve, reject, and retry controls. A person always releases.

Why most “top AI tools” lists steer you wrong

Vendors rank themselves

A guide written by a legal-tech vendor tends to put that vendor first. That is a brochure, not advice. Read lists that say who wrote them and why.

The tools age fast

The best AI tool for a law firm in 2024 is not the best in 2026. Frontier models jump every few months. Wrapped tools trail whatever model they were built on.

You do not control the model

Many legal AI wrappers pick the model for you and rarely say which one. If you cannot swap to the current frontier model, you are on last year's.

They solve one job

A drafting tool drafts. A research tool researches. Neither reads across your case system, documents, email, and billing at once, which is where most real answers live.

AI tools for law firm operations

Pick tools by the operations job, not by the vendor list.

Operations is the work behind the phone. Each row below is one job, what the AI does on it, and what a person still releases. One firm brain can cover every row. Seven separate apps cannot share the file between them.

Operations jobWhat the AI doesWhat a person releases
Intake and lead follow-upIntake automation map →Logs the call or form, checks conflicts and missing facts, drafts the follow-up, and preps the matter.Staff confirm the intake and send the follow-up.
Records, provider letters, and demand prepDocument automation map →Tracks what was requested and what is still missing, then drafts the letter or demand section from the file.A paralegal or attorney approves the draft in email drafts.
Inbox triageEmail automation map →Sorts incoming mail by matter, flags deadlines and carrier replies, and drafts the response from source context.Nothing leaves the inbox until a person sends it.
Case status and dormancyCase management automation map →Reads the case system for stale tasks and quiet matters, and drafts the client update.Staff clear the update. No write-back to the case system without approval.
Lead source and CRM handoffCRM automation map →Keeps source, owner, and qualification on every lead, and drafts the handoff into the case system.Intake staff own the decision to sign and open the matter.
New-client onboardingOnboarding map →Assembles the welcome packet, authorizations, and first-week checklist from the signed matter.Staff send the packet and own the first call.
Owner reportingFractional COO for law firms →Pulls numbers across the case system, CRM, and billing into one weekly view of the practice.The owner decides what to act on.

Before any of it touches client data, check the provider’s training terms. Anthropic, for example, says that by default it will not use inputs or outputs from its commercial products, including Claude for Work and the API, to train its models.[3] Some firms want this run as a single assistant per person. That job is covered in AI legal assistant.

Risks, ethics, and supervision

Hallucinated citations are a workflow problem, not a model problem.

The AI-in-court stories follow the same pattern: someone used a chatbot raw, without a source, without a gate, and let the output go out. The bar warnings and ethics opinions are about that shape of use.

NIST names both halves of the problem in its Generative AI Profile. “Confabulation” is “the production of confidently stated but erroneous or false content (known colloquially as ‘hallucinations’ or ‘fabrications’).” “Human-AI configuration” covers the person’s side, including “automation bias, over-reliance.”[1] A model that can be wrong, plus a person who stops checking, is the whole failure.

The answer is not to avoid AI. It is to design the workflow so the risky pattern cannot happen: read-first (the agent cites its sources), draft-only (nothing sends autonomously), and approval-gated (a human clears every client-facing or filed thing). A lawyer still verifies every authority.

The duties that already apply

ABA Formal Opinion 512 does not create new rules for AI. It applies the ones lawyers already have.[4] In plain terms:

Competence

Understand what the tool does well, where it fails, and check its output. You do not need to be an engineer. You do need to know it can be confidently wrong.

Confidentiality

Know where client information goes, whether it trains anything, and who can see it. Get informed client consent where the situation calls for it.

Communication

Tell clients how AI is used on their matter when it affects them, and answer honestly if they ask.

Supervision

Lawyers with managerial authority set the rules for staff and vendors. A written policy plus approval gates is how supervision shows up in practice.

Reasonable fees

Bill for the work actually done. Time the AI saved is not time you can charge, and learning a general tool is usually overhead.

Your state bar may have its own guidance, and this is general information, not legal advice. Turn the duties into rules your staff can follow with a law firm AI policy.

On-premise vs cloud AI for law firms

Do you need on-premise AI? Usually not. Here is how to decide.

Owners ask about on-prem because confidentiality is the real question. Where the model runs is only one part of the answer. What matters more: who can see the data, whether it trains anything, which model you are on, and who releases the work. Here are the three setups firms actually choose between.

On-premise model

An open-weight model running on a server or workstation the firm owns.

Protects
Prompts and files never leave your network.
Costs
Hardware up front, plus someone to patch, secure, back up, and upgrade it. Open-weight models trail the frontier, so drafts need more review.
Fits
A client contract, protective order, or regulator that forbids third-party processing. Scope it to those matters.

Private enterprise or API account

A frontier model (Claude, GPT) under business terms, reached through an account the firm controls.

Protects
Contractual no-training on your data, admin controls, and retention you can set and explain to a client. Anthropic's commercial terms, for example, say it "may not train models on Customer Content from Services." Get that sentence in writing from whichever provider you use.[2]
Costs
Per-seat or per-use fees. You still have to decide what context the model sees and who releases its work.
Fits
Most owner-led firms. It is the current model, and the boundary is written down.

Legal-AI wrapper

A vendor app built on someone else's model, often without naming which one.

Protects
Whatever the vendor's terms say, plus whatever its model provider's terms say. Read both.
Costs
Per-seat pricing, one narrow job per seat, and a model you cannot swap.
Fits
A single task the firm has already scoped, where the vendor will name its model and subprocessors.

Five questions to answer before you buy hardware

  1. Does any client engagement letter, protective order, or carrier contract forbid third-party processing? If not, on-prem is a preference, not a requirement.
  2. Which model runs, and can we change it? If the answer is a brand name, not a model, keep asking.
  3. Is our data used for training, how long is it retained, and who are the subprocessors?
  4. Who patches, monitors, and backs up the box if we host it? A closet server nobody owns is a bigger exposure than a signed cloud agreement.
  5. What can the AI send, file, or write without a person? The answer should be nothing.

If question one comes back yes, scope on-prem to the matters that require it instead of moving the whole firm onto a slower model. If it comes back no, the closed loop you can defend is a named model, approved context, work you can watch, and a person who releases it.

How to start

Five steps to start using AI in your law firm.

Firms that stall usually started with a tool. Firms that stick start with a job. This is the order we use, and it works whether you build it yourself or have someone build it for you. The longer version, with phases and checkpoints, is the legal AI implementation plan, and the staff side is in legal AI adoption. If you want an operator to own the rollout, that is law firm operations consulting.

  1. Step 1

    Pick one job

    Not "AI for the firm." One recurring job that drops balls: intake follow-up, records chase, quiet-matter updates, or inbox triage. Count how often it happens and who does it today. The bottleneck cost calculator puts a number on it.

    Cost one recurring job →
  2. Step 2

    Check the provider terms

    Use a business or API account, not a personal login. Get the no-training language, retention period, and subprocessor list in writing before any client data goes in.

    Compare deployment options →
  3. Step 3

    Write the policy

    One page is enough to start: which tools are approved, what data can go in, what can never be pasted, and who releases client-facing or filed work. Train staff on it.

    Law firm AI policy guide →
  4. Step 4

    Connect read-only first

    Give the AI read access to the case system, documents, and email for the one job. Let staff ask it questions and check the answers against the file for a few weeks. Trust is earned on reads.

    What read-first means →
  5. Step 5

    Add approval-gated drafts

    Recommended first deployment: once reads are reliable, let the AI draft the work for that job into email drafts or an approval queue. A person releases every one. Then add the next job.

    Four-phase implementation plan →

Desk job vs firm job

AI for lawyers vs AI for the firm.

One lawyer with a good assistant gets faster at research and drafting. That is real, and it is the desk job covered in AI for lawyers.

The firm job is different. Intake, records, email, case status, onboarding, and billing pass through several people on every matter. When each person has their own chat window, nobody shares the file and nobody can see what the AI did. When the same model is connected to the case system, documents, and inbox, with approvals, the whole team works from one picture. That is where small firms get most of the time back.

What FirmOps builds

Start with the Managed Firm Brain.

The firm brain is the deliverable. We build it on your systems, run it, and add jobs as it earns trust. The brain is yours. These are the places owners feel the difference first.

Managed Firm Brain

A firm brain that does the work

One layer across your case system, documents, email, billing, and phones that reads the file, prepares the next step, and drafts the work for approval.

Explore the Managed Firm Brain →

Managed AI agents

Supervised agents that run the busywork

Dormancy digests, intake-to-matter prep, client-update drafts, and records follow-up. Read-first and behind human approval gates.

Explore managed AI agents →

Legal AI

The category map, not a vendor list

Legal AI covers assistants, case management, documents, and intake. Start at the hub, then pick the job you actually have.

Explore legal AI →

Legal AI adoption

A safe rollout path

Start with supervised drafts and staff-visible proof before expanding to more jobs or more people.

Read the adoption path →

Clio + AI

Runs Clio? Here is the map.

How a firm brain sits on Clio alongside Clio Work and Clio Manage AI, and connects email, documents, and billing around it.

See the Clio AI map →

Filevine + AI

Runs Filevine? Same layer.

Filevine AI is Filevine's product. FirmOps builds the firm brain on the stack you run, including Filevine.

See the Filevine map →

SmartAdvocate + AI

Runs SmartAdvocate? The layer still works.

Tool-agnostic by design. The firm brain sits on SmartAdvocate and connects the rest of your stack.

See the SmartAdvocate map →

PI firms

Start where personal-injury work drops balls

Intake, records, treatment follow-up, and case-status visibility. Read-first, source-aware, and approval-gated.

See the PI firm AI guide →

More operating maps: CRM automation, email automation, case management automation, and document automation.

Why FirmOps

AI for law firms, from an operator who runs one.

FirmOps is led by Jonathan Mahler, Founder of Vertana and Firm Manager at Conduit Law (non-attorney). The system is built and run on real matters at a working personal-injury firm, so the patterns are tested against the business of running a practice, not a slide.

Read the Conduit Law case study
  • Built and run inside a working personal-injury firm: 1,000+ matters through the system
  • Case launch went from 2.5 hours to 10 minutes; 47 steps became 1 click
  • Read-first by default: the agent answers across the stack before it changes anything
  • Every write stays behind an explicit human approval gate

Common questions

Straight answers on AI for law firms.

What is the best AI for a law firm?

There is no single best tool. For most firms the strongest base is one of the current frontier models from Anthropic or OpenAI, used through a business account with no-training terms and connected to the firm's real systems. Specialized legal tools earn a seat when they do one scoped job better than that base, such as citator-checked research or high-volume document review. Control your model, control your context, and keep a person on every release.

What is the difference between AI for lawyers and AI for law firms?

AI for lawyers is the desk job: one attorney using an assistant to research, draft, or think through a problem. AI for law firms is the firm job: intake, records, email, case status, onboarding, and billing across everyone who touches a matter. The first needs a good assistant. The second needs that assistant connected to the case system, documents, and inbox, with approval gates, so the whole team works from the same file.

How are law firms actually using AI right now?

Two patterns. The visible one: staff use ChatGPT or Claude in a browser tab, often without a policy. The one that scales: a supervised firm brain that reads across the case system, documents, email, and billing, and drafts work for human approval. The first is an unmanaged risk. The second is how a small firm gets leverage.

Can lawyers ethically use generative AI?

Yes, under the duties lawyers already have. ABA Formal Opinion 512 (July 2024) walks through competence, confidentiality, communication with clients, supervision of staff and vendors, and reasonable fees as they apply to generative AI. Check your state bar's guidance too. This is general information, not legal advice.

Is AI in a law firm risky? What about hallucinated citations?

The risk is real, and it is a workflow problem. Hallucinations do damage when AI writes without a source and sends without a person. The workflow answer is read-first (the agent cites its sources), draft-only (nothing sends autonomously), and approval-gated (a human clears every client-facing or filed thing). Every legal authority still gets verified by a lawyer.

Should AI answer my law firm's phones?

We recommend against it for live client calls. Use IVR menus, smart routing, and human backup. An injured caller who feels handled by a bot calls another firm. Put AI everywhere behind the phone (drafting, intake logging, records, follow-up, billing), and keep people on the line.

Does AI replace paralegals or lawyers?

No. It replaces the prep that eats their time. A well-built firm brain does the reading, the drafting, and the tracking so paralegals and lawyers spend more time on judgment and client work. Nothing about this model removes attorney sign-off on legal work.

What is MCP, and why does it matter for a law firm?

MCP (Model Context Protocol) is an open standard for connecting AI assistants to outside systems. An MCP server lets ChatGPT or Claude read a Clio matter, search the inbox, or open a document through scoped permissions instead of copy and paste. MCP is plumbing, not a security guarantee: permissions, logging, and approvals are what make it safe for client data.

How does AI integrate with Clio, Filevine, or SmartAdvocate?

Through their APIs. All three expose enough for a firm brain to read and, with approval, write. FirmOps builds an MCP server on whatever case system you run and connects Gmail or Microsoft 365, documents, billing, and phones around it. The first thing we check is that your systems have the APIs we need.

How do small firms compete with large firms using AI?

Small firms should not try to buy large-firm legal AI. They should own the layer large firms rarely build: a firm brain across the systems the whole firm uses. Small teams move faster when the layer is theirs.

What AI tools does a law firm need for operations?

Fewer than the lists suggest. Operations work is intake, records, inbox triage, case status, onboarding, and owner reporting. One frontier model connected to your case system, documents, email, and billing can draft across all six. What you do need is a written no-training term from the model provider, a scoped view of firm data, and a person who releases every client-facing or filed output.

Do law firms need on-premise AI?

Most small and mid-size firms do not. On-premise AI means running an open-weight model on hardware you own, which keeps prompts off third-party servers but trails the frontier models and needs someone to patch, secure, and upgrade it. For most firms the better closed loop is an enterprise or API account that contractually does not train on your data, a named model, approved context only, logged work, and a human release on anything that leaves the firm. Go on-prem when a client contract, protective order, or regulator requires it, and scope it to that matter set.

Where do I start?

Pick one recurring job, check your provider terms, write a one-page AI policy, connect the AI read-only for that job, then add approval-gated drafts. If you want to see that running on a real firm brain first, request a 30-minute live demo and bring the job.

See it on one real job

Bring one job. Watch a firm brain do it.

In a 30-minute live demo we show a real firm brain working inside ChatGPT or Claude, map your stack, confirm your systems have the APIs to build yours, and pick the one workflow worth doing first.

Put a number on it

Step one is knowing what the firm already pays for software. Two minutes in the software cost calculator. It starts from a real firm's stack, tags each line Stays or Consolidates, and nets the $500 a month FirmOps maintenance; what that covers is on the pricing page.