# Where should a paralegal start with AI if the firm has no AI policy yet? > Ask a supervising attorney first, keep client confidences out, and practice on non-confidential tasks until the firm sets rules. Free lesson inside. Source: https://learn.ynteractive.com/content/questions/how-paralegals-start-with-ai · Updated 2026-10-21 · Free from Stepthrough (https://learn.ynteractive.com) By [Robert Breen](https://learn.ynteractive.com/content/about) · Published October 21, 2026 · Updated October 21, 2026 · 4 min read Start by asking your supervising attorney, in writing, what you may use AI for, and until you have an answer, use it only on work that contains no client information: practice [prompts](https://learn.ynteractive.com/content/glossary/prompt), generic templates and public material. Learn where the line sits with a simple four-level data sheet, like the one in [Know What Never Goes into AI](https://learn.ynteractive.com/content/what-not-to-put-into-ai-data-classification), so you are ready the day the firm says yes. A missing policy is not permission. Under the ethics rules, the lawyers you work for are responsible for supervising how you do your work, AI included, and client confidences belong to the client. If something goes wrong, "nobody told me not to" will not help you or the firm. ## Why does the missing policy matter so much for paralegals? - **Confidentiality.** Client information is protected by the lawyer's duty of confidentiality, and pasting it into a personal [chatbot](https://learn.ynteractive.com/content/glossary/chatbot) account is a disclosure to a vendor. - **Supervision.** ABA Model Rule 5.3 makes lawyers responsible for reasonable measures so nonlawyer assistants act in line with the lawyer's obligations. Your attorney needs to know what tools you use. - **No legal advice.** AI drafts can slip into predictions or advice. A paralegal sending that to a client raises unauthorized practice concerns. - **Accuracy.** General chatbots can invent citations and facts. Anything filed or sent must be checked. ## What can I safely do before there is a policy? With no client information at all, you can: - **Learn prompting** on made-up examples. - **Draft generic templates**: a blank intake checklist, a document request list, a client-update structure with [PLACEHOLDERS]. - **Summarize public material**: a court's published local rules, a public statute, a bar association article, while checking the source yourself. - **Practice the workflow** in a free training environment instead of on real files. Do not paste client names, case facts, medical records, financial records or anything from a matter file until the firm approves a tool and tells you how to use it. ## How do I help the firm get a policy? Paralegals are often the ones who see where AI would save time. Bring your attorney a short proposal: 1. **Two or three tasks** you want help with, such as intake call recaps or client update drafts. 2. **A suggested tool and plan**, ideally a business plan that does not train on firm data by default. 3. **A data rule**: what may go in, what never goes in. 4. **A review rule**: an attorney approves anything that goes to a client or court. Our [guide for paralegals starting with AI](https://learn.ynteractive.com/content/start/paralegal) and the page on [using ChatGPT at work when there is no policy](https://learn.ynteractive.com/content/questions/use-chatgpt-at-work-no-policy) help you frame the conversation. Your attorney may find [whether lawyers can use ChatGPT ethically](https://learn.ynteractive.com/content/questions/can-lawyers-use-chatgpt-ethically) useful too. ## What does this look like in a real lesson? In [Know What Never Goes into AI](https://learn.ynteractive.com/content/what-not-to-put-into-ai-data-classification) you sort four items for Harbor & Pine Bookkeeping into four levels: a services brochure is Public, a staff memo about holiday hours is Internal, a client's payroll summary is Confidential, and a client's Social Security number on a [W-9](https://learn.ynteractive.com/content/glossary/form-w-9) is Restricted. You remove the Social Security number from a client email by hand, then have ChatGPT redact the rest in a Temporary chat. The catch: it gives two different people the same placeholder, so you ask it to fix that before you use the copy. The same four levels work in a law firm. Firm marketing is Public, internal procedures are Internal, case facts are Confidential, and Social Security numbers, medical records and privileged strategy are Restricted. Once your firm approves a tool, [Summarize a Client Intake Call](https://learn.ynteractive.com/content/chatgpt-client-intake-call-summary-law-firm) shows a typical paralegal task done the right way: ChatGPT turns an intake call transcript into a summary, engagement next steps with owners and dates, and a list of every person and business named for the conflict check. The request tells it to draw no legal conclusions, and running the conflict check stays with the firm. [ChatGPT for paralegals](https://learn.ynteractive.com/content/blog/chatgpt-for-paralegals) covers more of these tasks. ## What mistakes should paralegals avoid? - **Using a personal account "just this once"** on a client file. - **Assuming redaction is perfect.** Check every placeholder; AI can mix people up. - **Sending AI drafts to clients without attorney review.** - **Trusting citations** without pulling the case. - **Keeping it secret.** Tell your attorney what you use. It protects you both. ## Key takeaways - No policy means ask first, not go ahead. - Practice only with non-client information until a tool is approved. - Use a four-level data rule to know what never goes in. - Bring your attorney a short proposal with tasks, a tool and a review rule. ## Frequently asked questions **Can I use ChatGPT to draft client letters?** Only once the firm approves a tool and you follow its rules, and an attorney should review anything that goes to a client. Keep confidential details out unless the firm's setup allows them. **Is Temporary Chat safe for client information?** It keeps the chat out of your history, but it is still a vendor's service. It does not replace firm approval and a business plan that protects client data. **What AI skill should a paralegal learn first?** Learn to write a clear prompt and to check the output against the file. Then learn your firm's data rules, so you know what you can put in. ## Learn it hands-on Free, interactive lessons: you do every step yourself in a practice copy of the real tool, it checks your work as you go, and nothing touches your real accounts. - [Know What Never Goes into AI: a Four-Level Data Cheat Sheet using ChatGPT](https://learn.ynteractive.com/content/what-not-to-put-into-ai-data-classification): Sort office data into Public, Internal, Confidential and Restricted, take the Restricted part out by hand, then have ChatGPT redact a client email… (about 7 minutes) - [Use AI at Work Without Leaking Client Data using ChatGPT](https://learn.ynteractive.com/content/safe-ai-at-work-what-not-to-paste): Turn off model training, strip a tenant's bank details and address out of a prompt, then catch the two promises ChatGPT made up before the reply… (about 7 minutes) - [Turn a Client Intake Call into Next Steps and a Conflict-Check List (Law Firms)](https://learn.ynteractive.com/content/chatgpt-client-intake-call-summary-law-firm): Turn a new-client intake call into a summary, the engagement next steps with owners and dates, the names for your conflict check, and a follow-up… (about 9 minutes) [Start the free lesson](https://learn.ynteractive.com/modules/ai-data-classification) ## AI tools in this answer Each one in the Stepthrough AI tools directory: what it does, who it is for and the free lesson where there is one. [ChatGPT](https://learn.ynteractive.com/content/ai-tools/tool/chatgpt) · [Claude](https://learn.ynteractive.com/content/ai-tools/tool/claude) [The full AI tools directory](https://learn.ynteractive.com/content/ai-tools) ## Related terms Plain-English definitions, each with an example from a free lesson. [Prompt](https://learn.ynteractive.com/content/glossary/prompt) · [Chatbot](https://learn.ynteractive.com/content/glossary/chatbot) · [Form W-9](https://learn.ynteractive.com/content/glossary/form-w-9) · [Action items](https://learn.ynteractive.com/content/glossary/action-items) · [AI note-taker](https://learn.ynteractive.com/content/glossary/ai-note-taker) · [AI policy](https://learn.ynteractive.com/content/glossary/ai-policy) [The full AI glossary](https://learn.ynteractive.com/content/glossary) ## Related prompts - [Action items table prompt](https://learn.ynteractive.com/content/prompts/action-items-table-prompt): Paste a meeting transcript or rough notes and get a table of every task, owner and due date, with "Not stated" wherever nobody… - [AI data level sorting prompt](https://learn.ynteractive.com/content/prompts/ai-data-level-sorting-prompt): A copy-ready prompt that sorts your office's common documents into Public, Internal, Confidential and Restricted, with one AI… - [ChatGPT settings checklist prompt](https://learn.ynteractive.com/content/prompts/chatgpt-account-settings-checklist-prompt): A copy-ready prompt that turns your plan and data rules into a one-page checklist of ChatGPT settings for staff, with a column… [All free prompt templates](https://learn.ynteractive.com/content/prompts) ## Related questions - [Can AI run payroll, or only help around it?](https://learn.ynteractive.com/content/questions/can-ai-run-payroll): No, the pay math, tax filing and deposits stay in your payroll system. AI helps with pre-run checks, employee questions and… - [Can lawyers use ChatGPT without breaking their ethics rules?](https://learn.ynteractive.com/content/questions/can-lawyers-use-chatgpt-ethically): Yes, if you understand the tool, protect client confidences, supervise staff, verify every citation and bill fairly. Not legal… - [How do consultants use AI on client work without exposing client data?](https://learn.ynteractive.com/content/questions/how-consultants-use-ai-client-work): Consultants use AI for kickoff recaps, market scans and decks, on business plans that do not train on data, with client names… - [How should an independent insurance agency start using AI?](https://learn.ynteractive.com/content/questions/how-insurance-agencies-start-with-ai): Pick one approved tool, set data rules, and start with policy review recaps and claim-status replies that never promise what the… - [How should a finance team start using AI without breaking controls?](https://learn.ynteractive.com/content/questions/how-to-start-using-ai-in-finance): Treat AI as a preparer, never an approver: written rules, an approved tool, a person who reviews and evidence you keep. A plan… - [Where should an HR team start with AI if nobody on the team has used it yet?](https://learn.ynteractive.com/content/questions/how-to-start-using-ai-in-hr): Start with three team rules on employee data, then one low-risk drafting task, then a policy answer bot. A plain order for HR… [More questions: AI by department](https://learn.ynteractive.com/content/questions/by-department) · [All AI questions](https://learn.ynteractive.com/content/questions) · [All free tutorials](https://learn.ynteractive.com/content)