“Use a zero data retention system built for legal work (Harvey, CoCounsel, etc) and get client consent before using AI on their matters.”
in “How are you using AI with client data without freaking out about privacy?” · 13 voices
ValuesGeneral useUnverified voice
12 more voices in this thread
- r/legaltech · Aug 25, 2026NeutralProvider APIs offer strong retention controls, but legal software vendors may still keep data for model improvement, so lawyers should read each product's privacy policy. (summary, not a quote)open
- r/legaltech · Aug 8, 2026ClaudeCriticizes
“We considered AWS Bedrock-claude, but cross-border issues, the need for agreements, and the fact that it is too hard relative to the local solution.”
open - r/legaltech · Aug 7, 2026
ChatGPTCriticizes
“For anything with client names, IDs, medicals, or privileged notes, consumer ChatGPT/Claude is the wrong tier. Those plans can train on or retain inputs unless you have a written enterprise/API deal with zero retention.”
open - r/legaltech · Aug 7, 2026
HarveyNeutral“Harvey is not zero data retention. Harvey requires ZDR from the model providers it calls, which is a statement about what OpenAI and Anthropic keep, not about what Harvey keeps.”
open - r/legaltech · Aug 7, 2026
CopilotMixed
“I’m not yet sure how Open AI’s Business plan compares, as I’m looking to switch to Codex due to GitHub Copilot burning tokens too quickly.”
open - r/legaltech · Aug 7, 2026
ChatGPTNeutral
“Open AI for example has a difference set of security standards, terms, and policies for enterprise and business as opposed to their standard consumer levels.”
open - r/legaltech · Aug 7, 2026ClaudeNeutral
“The business/teams version is protected by the same commercial agreement as enterprise.”
open - r/legaltech · Aug 7, 2026
ChatGPTValues
“I do not understand the obsession with ZDR.”
open - r/legaltech · Aug 7, 2026
CopilotMixed
“GitHub Copilot Pro or GPT Pro for instance do not have privacy protection by default, but can have the option disabled for feeding into the model.”
open - r/legaltech · Aug 6, 2026ClaudeValues
“Section B separately provides that the customer retains rights to Inputs and owns Outputs, and that Anthropic may not train on Customer Content.”
open - r/legaltech · Aug 6, 2026ClaudeValues
“Check over the commercial terms and the data processing addendum for Anthropic. It’s actually quite reassuring.”
open - r/legaltech · Aug 6, 2026
HarveyValues“Using a vendor like Harvey is nice in part because they have a lot more negotiating power to get ZDR.”
open