LEGAL
AI your firm keeps under its own controls.
Firms holding privileged material judge an AI tool by its controls long before its features. So this page starts there.
Balau AI is not a practice management system and does not set out to be one. It connects permitted context around a client, prepares work for a person to review, and keeps the evidence of how that happened.
- Access
permissions redaction approval sources evidence
THE CONTROL LAYER
Four controls, on every workspace.
These are not settings a firm has to switch on, and they are not specific to one kind of practice. They govern every Balau AI workspace, whoever is working in it.
Personal identifiers are redacted before AI processing.
Access follows the firm’s existing roles and data permissions.
AI-assisted output stays traceable to permitted sources.
Consequential actions require human approval, and that approval is named.
WHAT THE RECORD HOLDS
Answerable after the fact.
SOC 2 Type 2 and ISO 27001 programs are in progress. Posture, sub-processor, and practice documentation goes to prospective customers on request.
Who saw what, and when.
What changed, and who approved the change.
Which permitted sources an AI-assisted answer was built from.
Which documents went outside the firm, and to whom.