Industry
Compliance
Law Firms
A law firm AI policy only works if attorneys read it and the approved tool is easier than a personal account. What California's rules, ABA Opinion 512 and SB 574 expect, what the one-page policy should say, and the controls that back it.
Financial ServicesSEC Regulation S-P
Personal ChatGPT, Claude and Gemini accounts put client data outside a firm's Reg S-P safeguards. Tenant restriction headers block them on firm devices while approved business workspaces keep working.
Law FirmsCIS Controls
California courts are sanctioning fabricated AI citations, and SB 574 makes personal verification part of every filing starting January 1, 2027. Here is a ten-step cite check law firms can use, and the controls that make it provable.
Law FirmsCIS Controls
Copilot for law firms answers from every file a user can open, so a screen that lives only in a memo can leak. Here is what California rule 1.10 requires and the Microsoft 365 controls that turn ethical walls into technical barriers.
AECCIS Controls
An AI policy for architecture and engineering firms that works: one firm-wide page plus specific rules for design teams, proposal writers and field staff, each tied to a control that enforces it.
AccountingIRS written information security plan
AI features in tax and practice management software can read client files under new terms. Here is a step-by-step checklist for evaluating an AI tax software add-on against Section 7216, the AICPA Code and the FTC Safeguards Rule.
Law Firms
ABA Formal Opinion 512 expects lawyers to understand an AI tool's terms before client information goes in. This checklist shows law firms how to review an AI vendor contract clause by clause for privilege and confidentiality risk.
CMMC
DFARS 7012 applies the FedRAMP Moderate bar to any cloud service that processes CUI, and AI tools are cloud services. Here is how AEC firms on defense projects keep CUI out of unapproved AI tools, and what to do if it gets in.
Law FirmsCIS Controls
AI legal research tools can expose client confidences when attorneys use consumer accounts with permissive terms. Here is how to vet the terms, configure the tool and roll it out so the duty of confidentiality holds.
Law FirmsCIS Controls
Privileged memos and client communications are one paste away from public AI tools. Here is what ABA Opinion 512, California guidance and the Heppner ruling say, and the labels, DLP rules and policies that keep privileged content in.
AECCIS Controls
Designers are uploading floor plans and massing models to AI tools to save time on proposals. Some AI tools for architects publish what you upload by default. Here is how AEC firms keep client drawings private while still using AI.
Financial ServicesSEC Regulation S-P
Advisers are already using ChatGPT and Claude. The question for a CCO is whether client data goes into a firm-controlled account or a personal one. Here is how to set up AI use that holds up under Reg S-P and an SEC exam.
New articles for your industry
