{
  "dataset": "OCG AI Clause Crosswalk",
  "version": "1.0",
  "last_updated": "2026-05-04",
  "license": "CC-BY-4.0 with attribution required",
  "attribution": "Zusman Partners, ai-engagement-letter-fee-billing pillar resource. https://zusmanpartners.com/law-firms/ai-engagement-letter-fee-billing/",
  "method": "Categorical crosswalk synthesized from publicly published outside counsel guideline templates (Association of Corporate Counsel sample AI guidelines, June 2025), the Texas Attorney General Outside Counsel AI Use Policy (revised July 31, 2025), state-bar opinions, big-firm practitioner commentary, and corporate billing guidelines (e.g., Bayer Billing Guidelines). Specific clause language is composite — the dataset does not republish any one client's confidential OCG.",
  "row_count": 30,
  "rows": [
    {"row_id": "01", "clause_category": "Outright generative-AI ban", "observed_in_industries": ["Health care", "Government", "Defense"], "sample_clause_language_composite": "Outside Counsel may not use any generative artificial intelligence tool on any matter for the Client without prior written authorization from the Client's General Counsel.", "recommended_response": "Negotiate", "response_rationale": "Outright bans are sometimes overbroad. Negotiate to permit enterprise-isolated tools with no model training on client data; preserve carve-out for spell-check and document-comparison utilities. Reject if scope cannot be narrowed.", "operative_rule": "ABA 1.5/1.6/5.3", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "02", "clause_category": "Pre-approval of specific AI tools", "observed_in_industries": ["Financial services", "Health care", "Government"], "sample_clause_language_composite": "Outside Counsel shall obtain Client's prior written approval for each generative AI tool deployed on the Client's matters; the approval shall identify the tool, vendor, and configuration.", "recommended_response": "Accept", "response_rationale": "Defensible posture if firm maintains a pre-vetted vendor list. Map to firm's authorized-tools §1 of AI policy; submit list at engagement open.", "operative_rule": "ABA 1.6/5.3; CA Practical Guidance", "source_id": "S08", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "03", "clause_category": "AI use disclosure required", "observed_in_industries": ["Financial services", "Tech", "Insurance"], "sample_clause_language_composite": "Outside Counsel shall disclose to the Client any use of generative AI in the preparation or drafting of work product furnished to the Client.", "recommended_response": "Accept", "response_rationale": "Aligns with NYSBA Task Force sample clause and ABA 512 communication duty. Build into every AI-material matter file note.", "operative_rule": "NYSBA Task Force; ABA 1.4", "source_id": "S09", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "04", "clause_category": "Bill-line AI disclosure", "observed_in_industries": ["Financial services", "Tech"], "sample_clause_language_composite": "Each invoice shall identify, by time entry, any use of generative AI and the cost or efficiency benefit obtained.", "recommended_response": "Negotiate", "response_rationale": "Reasonable in principle but operationally heavy. Negotiate matter-level rollup over time-entry-level disclosure where time entries already capture review work.", "operative_rule": "ABA 1.5; FL 24-1", "source_id": "S06", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "05", "clause_category": "AI saved-time discount", "observed_in_industries": ["Financial services", "Tech", "Pharma"], "sample_clause_language_composite": "Where generative AI materially reduces the time required for a task, Outside Counsel shall reflect such time savings in invoiced fees.", "recommended_response": "Accept", "response_rationale": "Mirrors ABA Op 512 and California/Texas/DC opinions. Hourly billing already prohibits charging for unworked time. Document the time-saved analysis in the bill narrative.", "operative_rule": "ABA 1.5; CA; TX 705; DC 388", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "06", "clause_category": "AI subscription pass-through prohibition", "observed_in_industries": ["Health care", "Government"], "sample_clause_language_composite": "Outside Counsel may not pass through to the Client any cost associated with the Outside Counsel's generative AI subscription, license, or per-use charges absent Client's prior written consent.", "recommended_response": "Accept", "response_rationale": "Consistent with ABA 512 — AI tool costs are firm overhead unless agreed otherwise. Treat as default firm-overhead posture.", "operative_rule": "ABA 1.5; ABA 512 fees", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "07", "clause_category": "Per-use AI cost pass-through (consent-based)", "observed_in_industries": ["Tech", "Energy"], "sample_clause_language_composite": "Outside Counsel may charge actual per-use costs of approved generative AI tools provided that such charges are itemized on the invoice and the Client has agreed in writing prior to incurrence.", "recommended_response": "Accept", "response_rationale": "Mirrors Texas Op 705 and ABA 512's permitted treatment. Disclose the per-use rate at engagement open and itemize at invoice.", "operative_rule": "TX 705; ABA 512", "source_id": "S04", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "08", "clause_category": "Public LLM prohibition", "observed_in_industries": ["Financial services", "Health care", "Insurance", "Government"], "sample_clause_language_composite": "No information designated as Confidential, Restricted, or Internal-Only shall be processed by a public-facing or consumer generative AI tool, including but not limited to free-tier ChatGPT, Claude, or Gemini.", "recommended_response": "Accept", "response_rationale": "Already firm-policy-default for any midsize firm with regulated clients. Map to authorized-tools §1.", "operative_rule": "ABA 1.6; PA 2024-200", "source_id": "S11", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "09", "clause_category": "Tenant-isolation requirement", "observed_in_industries": ["Financial services", "Health care", "Defense"], "sample_clause_language_composite": "Generative AI tools deployed on the Client's matters shall operate in a tenant-isolated environment such that Client data is not commingled, accessible to other tenants, or used to train, fine-tune, or improve the underlying model.", "recommended_response": "Accept", "response_rationale": "Standard enterprise-tier requirement. Firm vendor attestations should already cover this.", "operative_rule": "ABA 1.6; CA Practical Guidance", "source_id": "S08", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "10", "clause_category": "No-training carve-out", "observed_in_industries": ["Tech", "Pharma", "Health care"], "sample_clause_language_composite": "Vendor agreements governing AI tools used on Client matters shall expressly prohibit use of Client inputs or work product to train, refine, or improve any AI model.", "recommended_response": "Accept", "response_rationale": "Same operative protection as tenant isolation. Confirm in vendor DPA before tool authorization.", "operative_rule": "ABA 1.6; CA Practical Guidance", "source_id": "S08", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "11", "clause_category": "Data residency restriction", "observed_in_industries": ["Financial services", "Government", "Defense"], "sample_clause_language_composite": "All generative AI processing of Client data shall occur within United States data centers; no cross-border transfer is permitted.", "recommended_response": "Negotiate", "response_rationale": "Negotiate vendor's published data-residency posture vs. blanket US-only requirement; some authorized vendors route inference globally.", "operative_rule": "Sectoral (HIPAA, GLBA, CMMC)", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "12", "clause_category": "Vendor security attestation right", "observed_in_industries": ["Financial services", "Health care", "Government"], "sample_clause_language_composite": "Outside Counsel shall furnish, on Client request, the SOC 2 Type II report, ISO 27001 certificate, or equivalent independent security attestation for each generative AI vendor used on Client matters.", "recommended_response": "Accept", "response_rationale": "Already required under most firm vendor-management programs. Furnish on request; do not negotiate the right itself.", "operative_rule": "Sectoral; ABA 1.6", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "13", "clause_category": "Tool inventory reporting", "observed_in_industries": ["Financial services", "Tech", "Insurance"], "sample_clause_language_composite": "Outside Counsel shall maintain and provide on quarterly request a register listing all generative AI tools used on the Client's matters during the preceding quarter, including matter, tool, vendor, and intended use.", "recommended_response": "Negotiate", "response_rationale": "Quarterly cadence is reasonable; per-matter cadence is operationally heavy. Negotiate cadence and aggregation level.", "operative_rule": "ABA 1.4; ABA 512 supervision", "source_id": "S03", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "14", "clause_category": "Output validation certification", "observed_in_industries": ["Financial services", "Health care", "Insurance"], "sample_clause_language_composite": "All generative AI work product furnished to the Client shall be reviewed and certified by the responsible attorney as to factual and citation accuracy prior to delivery.", "recommended_response": "Accept", "response_rationale": "Already required by ABA 512 supervision. Build into matter-file workflow.", "operative_rule": "ABA 5.1/5.3; FL 24-1", "source_id": "S06", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "15", "clause_category": "Privilege preservation requirement", "observed_in_industries": ["All sectors"], "sample_clause_language_composite": "Outside Counsel shall not use any generative AI tool in a manner that would compromise the attorney-client privilege or work-product doctrine applicable to Client communications.", "recommended_response": "Accept", "response_rationale": "Aligns with NYSBA Task Force. Document the privilege analysis in the matter file.", "operative_rule": "NYSBA Task Force; ABA 1.6", "source_id": "S09", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "16", "clause_category": "Indemnification for AI errors", "observed_in_industries": ["Tech", "Pharma", "Insurance"], "sample_clause_language_composite": "Outside Counsel shall indemnify the Client against any losses arising from inaccuracies, hallucinations, fabricated citations, or other defects in generative AI output furnished to the Client.", "recommended_response": "Reject", "response_rationale": "AI-output indemnity is broader than the firm's standard malpractice carrier coverage; it converts a malpractice question into an uninsured contractual liability. Replace with the firm's standard malpractice posture and Rule 5.3 supervision attestation.", "operative_rule": "ABA 5.1/5.3; carrier exclusion", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "17", "clause_category": "AI disclosure in court filings", "observed_in_industries": ["All sectors (Litigation matters)"], "sample_clause_language_composite": "Outside Counsel shall include any disclosure required by the court of competent jurisdiction regarding the use of generative AI in pleadings, briefs, or other filings.", "recommended_response": "Accept", "response_rationale": "Already required by standing-order tracking. Map to firm's standing-order register.", "operative_rule": "Court standing orders; NJ Preliminary Guidelines", "source_id": "S12", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "18", "clause_category": "Cross-border transfer restriction (EU/UK)", "observed_in_industries": ["Pharma", "Auto", "Tech with EU exposure"], "sample_clause_language_composite": "Outside Counsel shall not transfer Client data into any generative AI tool that processes data outside the EEA or the UK, except in accordance with applicable Standard Contractual Clauses or an adequacy decision.", "recommended_response": "Accept", "response_rationale": "Mirrors GDPR/UK GDPR transfer rules; should already be firm posture for EU-data matters.", "operative_rule": "GDPR Art. 44–46", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "19", "clause_category": "Sub-processor disclosure", "observed_in_industries": ["Health care", "Financial services"], "sample_clause_language_composite": "Outside Counsel shall disclose all sub-processors of generative AI tools accessing Client data and shall obtain Client consent before adding new sub-processors.", "recommended_response": "Negotiate", "response_rationale": "Sub-processor lists for major AI vendors change frequently. Negotiate vendor-published sub-processor page as the reference; commit to 30-day prior notice for material changes.", "operative_rule": "Sectoral; vendor DPA standards", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "20", "clause_category": "Breach notification SLA", "observed_in_industries": ["Financial services", "Health care", "Insurance"], "sample_clause_language_composite": "Outside Counsel shall notify the Client within 24 hours (or such shorter period as applicable law requires) of any actual or suspected breach of confidentiality involving Client data processed by a generative AI tool.", "recommended_response": "Accept", "response_rationale": "Default for any sector with breach-notification regulation. Map to firm incident-response runbook (§8 of AI policy).", "operative_rule": "Sectoral (HIPAA, GLBA, state breach laws)", "source_id": "S07", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "21", "clause_category": "Specific framework compliance", "observed_in_industries": ["Government (FedRAMP, TX-RAMP)", "Health care (HITRUST)", "Defense (CMMC)"], "sample_clause_language_composite": "Generative AI tools used on the Client's matters shall comply with the FedRAMP Moderate baseline (or equivalent framework specified by the Client) for the duration of the engagement.", "recommended_response": "Negotiate", "response_rationale": "FedRAMP-authorized AI tools are limited in 2026. Negotiate equivalent framework substitution (SOC 2 Type II + tenant isolation) where the underlying control objectives are met.", "operative_rule": "Sectoral; TX AG OC AI Policy", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "22", "clause_category": "Client-data carve-out", "observed_in_industries": ["Financial services", "Health care", "Tech"], "sample_clause_language_composite": "All Client data processed by generative AI tools shall be used solely for the purpose of the Client's representation; no Client data shall be used by Outside Counsel or its vendors for any other purpose.", "recommended_response": "Accept", "response_rationale": "Standard. Already firm posture under Rule 1.6 confidentiality and ABA 512.", "operative_rule": "ABA 1.6", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "23", "clause_category": "Phase-limited AI use", "observed_in_industries": ["Pharma", "Government", "Defense"], "sample_clause_language_composite": "Generative AI may be used for legal research and first-draft preparation but may not be used for final-draft generation, client communications, regulatory filings, or court submissions absent specific written approval.", "recommended_response": "Negotiate", "response_rationale": "Reasonable carve-out structure; map to firm authorized-uses matrix. Negotiate scope of approved uses and pre-cleared categories.", "operative_rule": "ABA 5.1/5.3; client risk policy", "source_id": "S03", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "24", "clause_category": "Senior-attorney sign-off", "observed_in_industries": ["Financial services", "Health care", "Insurance"], "sample_clause_language_composite": "All generative AI-assisted work product furnished to the Client shall be reviewed and approved by a Partner or other senior attorney with substantive responsibility for the matter prior to delivery.", "recommended_response": "Accept", "response_rationale": "Operationalizes ABA 512 supervision. Already standard for any matter where AI is material.", "operative_rule": "ABA 5.1/5.3", "source_id": "S03", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "25", "clause_category": "Audit log retention", "observed_in_industries": ["Financial services", "Health care", "Government"], "sample_clause_language_composite": "Outside Counsel shall retain logs of all generative AI tool usage on the Client's matters (prompts, outputs, user identity, timestamp) for a minimum of three years post-matter closure.", "recommended_response": "Negotiate", "response_rationale": "Three-year retention is reasonable; some firms cannot retain full prompt-and-output logs for confidentiality reasons. Negotiate hash-based or summary-level log retention as alternative.", "operative_rule": "ABA 1.6; ABA 512 supervision", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "26", "clause_category": "Right to terminate for AI misuse", "observed_in_industries": ["All sectors"], "sample_clause_language_composite": "Material breach of this AI Policy shall constitute grounds for immediate termination of the Outside Counsel relationship; no termination fee shall apply to terminations under this provision.", "recommended_response": "Negotiate", "response_rationale": "Termination right is reasonable; carve-out the no-termination-fee provision where the firm has incurred non-refundable costs (expert retainers, depositions paid).", "operative_rule": "Engagement-letter law", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "27", "clause_category": "Anonymization requirement", "observed_in_industries": ["Financial services", "Health care"], "sample_clause_language_composite": "Confidential client information shall be anonymized or pseudonymized prior to input into any generative AI tool such that the input cannot identify the Client or any third party.", "recommended_response": "Accept", "response_rationale": "Mirrors California Practical Guidance. Already firm policy for any matter with regulated data.", "operative_rule": "CA Practical Guidance; HIPAA", "source_id": "S08", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "28", "clause_category": "Vendor exit and data-deletion", "observed_in_industries": ["Financial services", "Health care"], "sample_clause_language_composite": "Upon termination of the engagement or removal of any AI tool from the firm's authorized tool list, Outside Counsel shall confirm in writing that all Client data has been deleted from the AI tool's storage.", "recommended_response": "Accept", "response_rationale": "Standard data-deletion posture. Map to firm vendor-management runbook.", "operative_rule": "ABA 1.6; sectoral", "source_id": "S01", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "29", "clause_category": "Conflict-check enhancement (AI)", "observed_in_industries": ["Financial services", "Tech"], "sample_clause_language_composite": "Where Outside Counsel uses generative AI tools that retain client information across matters, Outside Counsel shall enhance conflicts-clearance procedures to detect any cross-matter information bleed.", "recommended_response": "Negotiate", "response_rationale": "Operationally complex; negotiate scope to enterprise-tenant tools where information bleed is architecturally precluded.", "operative_rule": "ABA 1.7/1.9/1.10; ABA 1.6", "source_id": "S11", "last_verified": "2026-05-04", "change_history": "initial"},
    {"row_id": "30", "clause_category": "No-AI in privileged communications", "observed_in_industries": ["All sectors (Litigation)"], "sample_clause_language_composite": "No portion of any communication subject to attorney-client privilege shall be input into a generative AI tool unless the tool operates exclusively within the firm's tenant and no third party can access the contents.", "recommended_response": "Accept", "response_rationale": "Standard privilege-preservation posture. Already firm policy.", "operative_rule": "NYSBA Task Force; ABA 1.6", "source_id": "S09", "last_verified": "2026-05-04", "change_history": "initial"}
  ]
}