Decision inputs
Facts that change the policy answer
For this request, the business question, relevant facts and approved sources is the input boundary and a legal analysis draft is the output boundary. A useful check makes both explicit.
- 1Task and owner
- In-house legal team wants to prepare an answer to a legal question. The request needs an accountable owner for a legal analysis draft, even when the tool prepares most of the first draft.
- 2Information involved
- The business question, relevant facts and approved sources. Check uploads, history and connected systems before describing the request as low sensitivity.
- 3Tool and account
- An approved company account. Confirm the approved account, retention setting and any connected service before the request begins.
- 4Intended result
- The expected result is a legal analysis draft. Follow the result to its real endpoint so the request captures its practical effect.
- 5Consequence if it is wrong
- Facts may be incomplete and generated advice can be relied on without qualified review. A familiar task still needs escalation when this consequence becomes plausible.
- 6Human review
- qualified lawyer should inspect, change, reject or stop the result. The reviewer needs the source material and must be able to reject the output before it takes effect.
Possible policy routes
The task name alone cannot decide it.
A published workplace policy can return different answers for the same task. These are the practical branches worth encoding.
A routine policy route may be possible
A routine route is easier to justify when the exact account is approved, only the minimum confidential legal information is used, a legal analysis draft remains within the stated purpose, and qualified lawyer reviews it before use.
Approval may be required
Specialist approval becomes relevant if the account or data handling is uncertain, facts may be incomplete and generated advice can be relied on without qualified review, or a legal analysis draft reaches people or systems beyond the requester’s authority.
The request may need to stop or change
The company may need a safer design when restricted information would enter an unapproved service, the output would act before qualified lawyer can intervene, or treat the output as a draft and require the responsible lawyer to approve advice cannot be maintained. Consider less information, a controlled account or a non-AI process.
Request checklist
Questions to ask before using the tool
- 01
Will prepare an answer to a legal question run inside the approved company environment from start to finish?
- 02
Can any personal, sensitive, confidential or secret part of the business question, relevant facts and approved sources be removed?
- 03
At what point does a legal analysis draft move beyond the requester’s private draft?
- 04
Does qualified lawyer have enough authority and time to stop the result?
- 05
Does the intended use extend beyond the region and audience covered by the current policy?
Worked request
What the employee should submit
This example supplies decision facts without pasting the underlying material into the approval record.
- requester
- in-house legal team
- task
- Use AI to prepare an answer to a legal question.
- information
- the business question, relevant facts and approved sources
- tool
- An approved company account
- frequency
- Recurring work
- region
- Where the work and affected people are located
- purpose
- Analyse
- impact
- Legal guidance
- review
- Complete human review
- owner
- qualified lawyer
Useful safeguards
Controls that fit this request
- ✓
Treat the output as a draft and require the responsible lawyer to approve advice
- ✓
Document why each part of the business question, relevant facts and approved sources is necessary before making it available to the tool.
- ✓
Reassess the request whenever its tool, information classification, frequency or consequence changes.
- ✓
Make the final route reproducible from the recorded facts, safeguards and policy version.
Questions people ask
About this AI use
Is using AI to prepare an answer to a legal question automatically allowed?
The company policy supplies the answer after it receives the real tool, data, purpose, impact and review plan. This page only prepares those facts.
What does the policy need to know about this use?
Describe a legal analysis draft, identify the business question, relevant facts and approved sources, name the exact tool and account, explain who will receive or rely on the output, and state how qualified lawyer will review it.
How much of the request should the company retain?
Make the final route reproducible from the recorded facts, safeguards and policy version. A classification and controlled reference may be enough when copying the business question, relevant facts and approved sources would create unnecessary risk.