What are the most common AI readiness gaps at small law firms?

The two most common gaps are Client Communication (Section 4) and Data & Security (Section 6). The disclosure question — whether and how to inform clients that AI is being used in their matter — is unresolved at most small law firms, which creates both ethical uncertainty and a relationship risk. The privilege mapping gap is equally common: most law firms haven't defined which categories of client information are privilege-protected versus general knowledge work that can safely enter AI systems. Without that distinction, either staff avoids AI tools entirely (too cautious) or uses them without appropriate care (too loose) — both outcomes leave value on the table.

Does ABA Formal Opinion 512 require lawyers to disclose AI use to clients?

ABA Formal Opinion 512 (2023) does not create a blanket disclosure requirement, but it does impose competence and supervision obligations that effectively require understanding when disclosure is appropriate. The opinion identifies five duties that apply to generative AI use: competence (understanding the technology and its limitations), supervision (supervising AI-generated work product), communication (considering whether AI use is material to the representation), confidentiality (protecting client information), and candor (ensuring AI-generated output doesn't mislead). For most small law firms, the practical implication is: update engagement letters to address AI use, establish a review protocol for AI-generated work product, and have a clear internal policy on what client data can enter AI tools.

Which AI tools are best for small law firms?

The recommended starting sequence for a 5-50 attorney firm: (1) Clio Duo if you're already on Clio — purpose-built for legal workflows with stronger data handling than general AI tools; (2) Harvey for legal research if research is a primary bottleneck — built specifically for privilege-sensitive data handling; (3) Fathom for AI meeting summaries — no client legal information involved, immediate time savings, builds AI habit before more complex use cases. Avoid using general-purpose public AI tools (ChatGPT, Claude free tier) for client matter research until you've mapped which categories of client information are privilege-protected and established a data policy.

How does attorney-client privilege affect AI readiness at law firms?

Attorney-client privilege creates a unique readiness challenge: not all client information has the same sensitivity, but most law firms haven't mapped the boundary. General knowledge (legal research, drafting from public precedents, administrative tasks) can typically enter AI tools without privilege concerns. Client confidences, legal strategy, and matter-specific communications require much more care. The readiness question isn't 'can we use AI?' — it's 'do we know which data we can use AI with, and have we told our staff?' Firms that answer both questions before tool adoption avoid the most common privilege exposure scenarios.

AI Readiness Checklist for Law Firms

For partners and owners of small law firms with 5–50 attorneys.

What this covers: Firm-type-specific AI readiness checkpoints · The two dimensions where law firms most commonly score low · One recommended first tool · Your specific next step.

A junior associate at a competing firm is now producing first-draft research memos in two hours that used to take eight. Legal tech startups are offering AI-first document review at rates that undercut traditional hourly billing. Enterprise clients are asking what your firm's AI policy is before they sign.

The AI transition in law is not coming. It's here. And the question is no longer whether to engage with it — it's whether your firm has the foundations in place to do it without creating new ethical or business risk.

This checklist tells you where your firm actually stands, with law-firm-specific context the generic AI readiness frameworks skip entirely.

Start with the full self-assessment: This page covers the checkpoints most relevant to law firms. For the complete 7-dimension, 35-checkpoint assessment, use the AI Readiness Checklist for Professional Services Firms.

Why Law Firms Score Differently

The seven AI readiness dimensions apply to all professional services firms. But law firms have a specific scoring pattern driven by two constraints that don't apply to other firm types at the same intensity: attorney-client privilege and professional disclosure obligations.

The two dimensions where law firms most commonly score low: Client Communication (Section 4) and Data & Security (Section 6).

The disclosure question is unresolved at most small law firms. Whether to tell clients AI is being used in their matter, what that disclosure says, and where it appears — in the engagement letter, in verbal communication, in work product headers — has no universal answer. But the absence of a position creates a different risk: if a client later objects to undisclosed AI use, a firm without a documented policy is in a much weaker position than one that thought it through in advance.

The privilege mapping gap is equally common. Attorney-client privilege creates a data classification problem that most firms haven't resolved: which client information is protected, which is general knowledge work, and which staff members are making that distinction on each task? Without a map, data policy can't be enforced — and without enforcement, exposure accumulates.

Law Firm AI Readiness Checkpoints

Work through each checkpoint. Check off what you've done. Leave the rest unchecked — those are your next steps.

Client Communication & Disclosure (Section 4 — Highest Risk for Law Firms)

I've reviewed ABA Formal Opinion 512 (2023) on generative AI and understand which competence, supervision, communication, confidentiality, and candor requirements apply to my firm's AI use
I have a written position on AI disclosure — whether I disclose AI use in client work, what that disclosure says, and how it is communicated (engagement letter, verbal, or both)
I've updated or have a plan to update engagement letters to address AI tool use in client matters — either as a general AI use provision or as a specific disclosure for AI-generated work product
I have a review protocol for AI-generated legal work product — someone is always responsible for confirming accuracy before it goes to a client or is filed
I've considered how AI changes my value proposition to clients — particularly whether my firm's value centers on legal expertise and judgment rather than research production time

Score: ___/5

If you scored 2 or below: Your most important first move is drafting a one-paragraph AI use provision for your engagement letters. You don't need to decide every nuance of AI disclosure policy in one sitting — but having a documented position protects you from the scenario where an undisclosed AI use becomes a problem retroactively. Start there. The rest follows.

Data & Security — Privilege Mapping (Section 6 — Second Most Common Gap)

I've mapped which categories of client information are governed by attorney-client privilege versus general knowledge work that can safely enter AI tools without privilege concerns
I have a documented guideline that tells staff which data categories can enter general AI tools versus which require legal-specific tools with stronger data handling (Harvey, Clio Duo)
I've confirmed how AI tools handle client data — specifically whether they retain it, whether it goes to third-party servers, and whether the data processing terms satisfy my confidentiality obligations
I've evaluated at least one legal-specific AI tool (Harvey, Clio Duo, or CoCounsel) and can articulate why I use or don't use it for client matter work
I've confirmed whether any enterprise clients have AI vendor policies that apply to my firm — several large employer clients adopted AI vendor requirements in 2024-2025

Score: ___/5

If you scored 2 or below: The privilege mapping exercise is the highest-leverage first step for law firm data readiness. Block 90 minutes with your most senior attorney. Answer three questions: (1) What categories of client information does your firm routinely handle? (2) Which of those categories are clearly privilege-protected? (3) What's the rule for staff when they're uncertain? That classification becomes your AI data policy.

Workflow Documentation (Section 3 — Common Third Gap)

I've identified at least one high-volume legal workflow — research memo drafting, contract review, document summarization, client status updates — that involves repetitive writing or structured output
At least one attorney or paralegal is regularly using AI on a defined task type, with a consistent approach to inputs and review
I know how long our highest-volume deliverable takes today — so I can measure whether AI changes that number
I've documented at least one AI-assisted legal workflow end-to-end with enough specificity that a new hire could follow it

Score: ___/4

If you scored 0 or 1: Research memo drafting is the most common high-leverage starting workflow for law firms. Pick one practice area. Define the inputs (case facts, relevant statutes, target jurisdiction). Use Harvey or Clio Duo to generate a first draft. Time it. Compare. That's your first documented AI workflow.

Billing Model Pressure (Section 5 — The Hard Conversation)

I've had a direct conversation with partners about AI-driven pricing pressure from legal tech startups and larger firms — and what that means for our hourly rates over the next 24 months
I've estimated what our matter economics look like if AI cuts associate research and drafting time by 30% — and whether that productivity gain should stay with the firm or get passed to clients
I can explain to a client why AI-assisted legal work from our firm still commands the same fee — and the answer centers on legal judgment, strategy, and accountability, not production time

Score: ___/3

If you scored 0 or 1: This conversation will happen eventually — either on your terms or a client's. Better to have it internally first. The question isn't whether AI will affect legal pricing. It's whether your firm's value proposition is articulated well enough to survive that pressure. Most small law firms that answer this honestly discover their real value is judgment, not hours — and that's a more defensible position than most think.

Your Recommended Starting Point

For law firms at the Foundation or Building stage, the fastest path to a safe first AI workflow is:

Use Fathom for AI meeting summaries — no client legal information required, immediate time savings on client calls and internal meetings, builds the AI habit before higher-stakes use cases.
Add Clio Duo for workflow-embedded tasks — if your firm is on Clio, the AI features built into your existing practice management tool are lower-risk than adding new vendors with different data terms.
Evaluate Harvey for legal research — if research is your primary bottleneck, Harvey is built specifically for privilege-sensitive data handling and provides a stronger foundation for legal research workflows than general-purpose AI tools.

Do not use ChatGPT, Gemini, or Claude free tier for client matter research until you've mapped privilege boundaries and can confirm which data categories are safe to include in AI prompts.

Law Firm AI Readiness Score

Add your section scores. Use this table to find your stage:

Total Score	Stage	Law Firm Priority
14–17	Scaling	Focus on business model adaptation — AI efficiency is improving your throughput; make sure pricing reflects your value, not your production time.
9–13	Building	Close your lowest-scoring section first. For most law firms, that's disclosure position and privilege mapping.
4–8	Piloting	Start with Fathom for meeting summaries and draft your AI engagement letter provision in parallel. Both take less than a week.
0–3	Foundation	One team conversation + one written AI position this week. Don't buy tools until you've addressed disclosure and privilege mapping.

Cross-Links

Complete 7-dimension assessment: AI Readiness Checklist for Professional Services Firms — covers all five firm types with 35 checkpoints
Compliance context: For ABA Opinion 512 requirements, state chatbot disclosure laws, and regulatory compliance details, see the AI Regulation and Compliance Guide for Professional Services Firms 2026
Already past readiness? AI Transformation Checklist for Professional Services Firms — evaluates whether AI is actually changing your firm's economics, not just your toolset

Want Law Firm AI Intelligence Every Week?

The Crossing Report delivers the week's most important AI developments — filtered specifically for professional services firm owners. Every Monday.

Free subscribers get the top 3 insights.

Premium subscribers ($19/month) get deep analysis, tool comparisons, implementation guides, and a specific action step for your kind of firm.

Subscribe free at crossing.one

The Crossing Report — Intelligence for professional services firm owners navigating the AI transition.

© The Crossing Co. You're welcome to share this checklist with other firm owners. Please keep it intact and credit The Crossing Report.