AI commitment: what the model sees, and what stays in the lawyer’s control

In September 2026 the national ethics committee of the Israel Bar Association issued an updated opinion (60/24) on the use of artificial intelligence in lawyers' work. The opinion distinguishes an open platform from a controlled environment by three conditions: a written, clear commitment that the data is kept in a controlled environment, that it is not used to train, improve or develop the model, and that it is not accessible beyond the minimum needed to supply the service. It also requires the lawyer to check and verify every output, and it does not allow an autonomous system to make a substantial legal decision, give independent advice, draft pleadings or advance a proceeding.

This page is LegalTech's written commitment about CaseFlow's AI, point by point. Whether a given use meets the opinion remains the lawyer's judgement. This page sets out the facts that judgement needs.

1. A controlled environment

1.1 In CaseFlow's managed AI, a request passes from a LegalTech server to a model provider under a business cloud agreement, and is processed in a region in the European Union. The processing region is set explicitly on the server. If no region is set, the server refuses the request and does not fall back to another region.

1.2 LegalTech's server does not store the content of the request or of the answer, and does not write them to a log. It records only a usage meter: the model, the amount of use and the cost, against the licence.

1.3 A firm that prefers to connect its own provider account does so in the settings. The request then goes from the computer directly to that provider, under the agreement and processing region the firm chose, and does not pass through LegalTech.

2. No training on the firm's data

2.1 LegalTech does not train, improve or develop any model on a firm's data, and does not hold such data.

2.2 The business cloud agreement under which the managed AI runs forbids the model provider to use customer data to train or fine-tune models without permission. LegalTech has given no such permission.

2.3 Data received from a connected Google account (calendar, mail, Drive) is never sent to any AI model.

3. What the model sees

3.1 The model receives only what the task the lawyer asked for needs: the document chosen for a summary, the case details the assistant reads to answer, or the text to be drafted.

3.2 Most AI use starts with a lawyer's request. The exception is court mail: a firm that has connected a mailbox gets incoming court messages sorted automatically. A message the fixed rules cannot sort is sent to the model for sorting only, and the result is shown as a proposal awaiting approval.

4. The lawyer decides; the assistant does the grunt work

4.1 The assistant prepares drafts, summaries and proposals. A draft stays a draft until the lawyer edits and approves it.

4.2 CaseFlow files nothing with a court. An action that leaves the office, such as sending an e-mail, sending a document for signature, charging a card or issuing an invoice, always needs a person's explicit approval. No firm setting can remove that requirement.

4.3 The firm decides how much latitude the assistant has for reversible actions inside the system, and the default is conservative: every change is shown for approval before it is made.

4.4 The assistant's proposals, their approval or rejection, and automatic runs are recorded in the firm's audit log, so what was proposed, what was done, when and on whose approval can be traced afterwards.

4.5 In legal research, the answer shows the sources it relies on so the lawyer can check them. An answer for which no official source was found says so explicitly.

5. What remains the lawyer's responsibility

Under the opinion, AI does not replace professional judgement: the lawyer checks and verifies outputs, including sources, facts and legal claims, and remains personally responsible for every piece of advice, argument or document. CaseFlow is built to make that check easier, not to make it unnecessary.

6. Changes

A material change to this commitment, such as a change of processing region or an added model provider, is published on this page and sent to licensees by e-mail before it takes effect, in line with section 4.2 of the data processing agreement. Questions: privacy@caseflow.co.il.