Q1: Does using a cloud-based AI tool with client documents waive attorney-client privilege?

Not necessarily. If the vendor's terms treat the service as a confidential agent of the lawyer — analogous to other service providers traditionally used in legal work — courts generally find this consistent with maintaining privilege. The key factors are whether the disclosure was reasonably necessary to the representation and whether the vendor maintains confidentiality. Review the vendor agreement before relying on this position.

Q2: What is the crime-fraud exception to attorney-client privilege?

The crime-fraud exception removes privilege protection from communications where the client sought the lawyer's assistance to engage in a crime or fraud. The communication must have been made for the purpose of facilitating criminal or fraudulent activity — not merely discussing that the client committed a past crime. Courts apply this exception sparingly, but it is a recognized limitation on otherwise privileged communications.

Q3: How should law firms address privilege in AI tool vendor agreements?

Vendor agreements for AI tools that will process privileged materials should include: (1) confidentiality commitments; (2) no-training commitment (content not used for model training); (3) data deletion provisions after the engagement; (4) encryption-in-transit and at-rest commitments; and (5) a provision confirming the vendor's role as a confidential agent consistent with privilege preservation. The ABA and state bar ethics guidance on cloud computing for lawyers provides a useful framework. --- *Last reviewed: 2026-05-19 by LawyerAI Editorial Team.*

Attorney-Client Privilege

Attorney-client privilege is the legal doctrine that protects confidential communications between a lawyer and client made for the purpose of seeking or providing legal advice, shielding those communications from compelled disclosure in legal proceedings.

Last reviewed: 2026/05/19

Definition

Why It Matters for Lawyers

How AI Tools Handle It

Frequently Asked Questions

Q1: Does using a cloud-based AI tool with client documents waive attorney-client privilege?: Not necessarily. If the vendor's terms treat the service as a confidential agent of the lawyer — analogous to other service providers traditionally used in legal work — courts generally find this consistent with maintaining privilege. The key factors are whether the disclosure was reasonably necessary to the representation and whether the vendor maintains confidentiality. Review the vendor agreement before relying on this position.
Q2: What is the crime-fraud exception to attorney-client privilege?: The crime-fraud exception removes privilege protection from communications where the client sought the lawyer's assistance to engage in a crime or fraud. The communication must have been made for the purpose of facilitating criminal or fraudulent activity — not merely discussing that the client committed a past crime. Courts apply this exception sparingly, but it is a recognized limitation on otherwise privileged communications.
Q3: How should law firms address privilege in AI tool vendor agreements?: Vendor agreements for AI tools that will process privileged materials should include: (1) confidentiality commitments; (2) no-training commitment (content not used for model training); (3) data deletion provisions after the engagement; (4) encryption-in-transit and at-rest commitments; and (5) a provision confirming the vendor's role as a confidential agent consistent with privilege preservation. The ABA and state bar ethics guidance on cloud computing for lawyers provides a useful framework. --- *Last reviewed: 2026-05-19 by LawyerAI Editorial Team.*

Related Concepts

Security

Confidentiality (Legal AI Context)

In the legal AI context, confidentiality refers to the obligation of lawyers and legal AI vendors to protect client information from unauthorized disclosure, and to the technical and contractual measures that implement that protection when client data is processed by AI systems.

Legal Practice

Privilege Log

A privilege log is a document produced in discovery that identifies each document withheld from production on grounds of privilege, describing the document without disclosing privileged content, enabling the opposing party to assess the validity of the privilege claim.

Capability

Privilege Review

Privilege review is the process of examining documents in an e-discovery collection to identify and withhold materials protected by attorney-client privilege, work product doctrine, or other applicable privileges before production to opposing parties.

Security

Zero Retention

Zero retention is a data handling policy under which an AI tool vendor does not store or retain any client-submitted content after the active processing session ends, ensuring that confidential information is not persisted on the vendor's servers.

Related Tools

Everlaw
Cloud eDiscovery with AI predictive coding and document summarization.
Harvey AI
The most expensive legal AI in the market — Am Law 100 firms only.
CoCounsel Legal
Thomson Reuters' GPT-backed legal research and drafting with Westlaw integration (relaunched as CoCounsel Legal, 2025).
Clio
Practice management for 150K+ lawyers with native Manage AI for admin automation.

AI Tools by Practice Context

Move from this definition to role-based legal AI shortlists and the selection criteria that matter for each type of legal team.

AI Tools for Big Law
Am Law 200 and global firm workflows: accuracy at scale, security compliance, and matter-level auditability.
AI Tools for Legal Ops
Legal operations workflows: vendor management, matter management, spend analytics, and process automation.
AI Tools for Small Law Firms
Reviews built for 2–20 attorney firms: collaborative workflows, mid-range budgets, limited IT overhead.

Browse all legal AI solutions by role

Related Reading

How We Score Legal AI Tools: The 5-Dimension Methodology

Last reviewed: 2026/05/19. Definitions are written by the LawyerAI Editorial team. Commercial relationships are disclosed and do not determine editorial scores or conclusions. See our Sponsorship & Affiliate Disclosure.

← All glossary terms

Attorney-client privilege is one of the oldest and most fundamental protections in legal practice. It enables clients to communicate candidly with their lawyers — sharing potentially damaging information that the lawyer needs to provide competent advice — without fear that the communication will be used against them in litigation.

The privilege belongs to the client, not the lawyer. The client can waive it; the lawyer cannot. Disclosure of privileged communications to third parties, including AI tools, raises the question of whether privilege is waived by sharing the communication with a party outside the attorney-client relationship.

This is not a theoretical concern. When lawyers upload confidential client communications or legal advice memos to cloud-based AI tools, they are transmitting privileged material to a third-party service provider. Whether this transmission constitutes waiver depends on: whether the disclosure was made in a manner that was reasonably calculated to maintain confidentiality; whether the vendor is acting as an agent of the lawyer in a manner consistent with maintaining privilege; and the specific terms of the vendor agreement.

Most enterprise legal AI vendors include contractual language treating their services as confidential agents — analogous to legal secretaries, paralegals, or outside vendors traditionally used in legal work — to preserve privilege. Lawyers should confirm this in the vendor agreement before uploading privileged material.

Legal AI platforms take various approaches to protecting attorney-client privilege in their data handling. Enterprise tools like Harvey AI and CoCounsel include vendor agreements designed to preserve privilege by positioning the tool as a confidential agent of the law firm, with contractual prohibitions on disclosure of client content.

E-discovery platforms like Relativity AI and Everlaw are well-established in enterprise legal environments and have data handling practices developed specifically for work with privileged legal matter materials, including encryption standards and non-disclosure commitments.

For organizations handling highly sensitive privileged communications — government investigations, M&A transactions with significant confidentiality stakes — some AI vendors offer on-premise deployment options that avoid transmitting privileged content to external servers at all. This provides the strongest privilege protection but requires more infrastructure.

The practical guidance is: before using any AI tool with material that includes attorney-client communications or legal advice, review the vendor's data handling terms and confirm the basis for privilege preservation. Document this review in the matter file.