Decision inputs
Facts that change the policy answer
The request sits in legal and compliance and connects an executed or draft contract with a summary of duties, dates and risks. That context distinguishes it from a generic permission to use AI.
- 1Task and owner
- Commercial lawyer wants to summarise a contract. Record the person who will stand behind a summary of duties, dates and risks after the tool has finished.
- 2Information involved
- An executed or draft contract. Include attachments and connected sources when deciding the highest information classification.
- 3Tool and account
- An approved company account. Approval must cover the account and its settings, not merely the product name.
- 4Intended result
- The expected result is a summary of duties, dates and risks. Follow the result to its real endpoint so the request captures its practical effect.
- 5Consequence if it is wrong
- The model can omit a qualification or work from the wrong contract version. Use this consequence to distinguish a routine request from one needing specialist approval.
- 6Human review
- lawyer responsible for the matter should inspect, change, reject or stop the result. A final glance after an automatic action would not give that owner meaningful control.
Possible policy routes
The task name alone cannot decide it.
A published workplace policy can return different answers for the same task. These are the practical branches worth encoding.
A routine policy route may be possible
The request may fit ordinary policy handling once the exact account is approved, only the minimum confidential legal information is used, a summary of duties, dates and risks remains within the stated purpose, and lawyer responsible for the matter reviews it before use.
Approval may be required
The request moves beyond routine handling when the account or data handling is uncertain, the model can omit a qualification or work from the wrong contract version, or a summary of duties, dates and risks reaches people or systems beyond the requester’s authority.
The request may need to stop or change
Do not continue unchanged when restricted information would enter an unapproved service, the output would act before lawyer responsible for the matter can intervene, or use the controlled document version and verify every cited clause cannot be maintained. Consider less information, a controlled account or a non-AI process.
Request checklist
Questions to ask before using the tool
- 01
Has the company approved this account configuration for summarise a contract, rather than only approving the product?
- 02
Who is permitted to expose an executed or draft contract to this tool and for this purpose?
- 03
Who receives a summary of duties, dates and risks, and what will they do with it?
- 04
Does lawyer responsible for the matter have enough authority and time to stop the result?
- 05
Would another region, audience or frequency activate a different company rule?
Worked request
What the employee should submit
This example supplies decision facts without pasting the underlying material into the approval record.
- requester
- commercial lawyer
- task
- Use AI to summarise a contract.
- information
- an executed or draft contract
- tool
- An approved company account
- frequency
- Recurring work
- region
- Where the work and affected people are located
- purpose
- Analyse
- impact
- Legal guidance
- review
- Complete human review
- owner
- lawyer responsible for the matter
Useful safeguards
Controls that fit this request
- ✓
Use the controlled document version and verify every cited clause
- ✓
Separate source material from the request record and expose only what the tool needs for a summary of duties, dates and risks.
- ✓
Keep the use within analyse and run another check if the audience, tool or intended effect changes.
- ✓
Link the completed check to the applicable policy version and append later reassessments separately.
Questions people ask
About this AI use
Is using AI to summarise a contract automatically allowed?
The company policy supplies the answer after it receives the real tool, data, purpose, impact and review plan. This page only prepares those facts.
What does the policy need to know about this use?
Describe a summary of duties, dates and risks, identify an executed or draft contract, name the exact tool and account, explain who will receive or rely on the output, and state how lawyer responsible for the matter will review it.
Which evidence makes the answer reproducible?
Link the completed check to the applicable policy version and append later reassessments separately. A classification and controlled reference may be enough when copying an executed or draft contract would create unnecessary risk.