Kaufman Ops

AI settings for a small law firm in Georgia

Checked against the source documents on October 26, 2026

The State Bar of Georgia's AI toolkit says clickwrap licenses often disclaim confidentiality and points firms toward an enterprise-tier plan with audit logs and retention you control. The settings that answer that are on the main checklist. This page says which ones Georgia points at, and why.

What Georgia has said

State Bar of Georgia, Special Committee on Artificial Intelligence and Technology / Law Practice Management Program / Office of the General Counsel: Generative AI Toolkit, 2026-07-09.

  1. Confidentiality. Do not input confidential client information into any generative AI tool lacking adequate confidentiality and security protections; anonymize client data (Toolkit, Rule 1.6, p.8).
  2. Competence. Rule 1.1: know AI strengths and weaknesses, review and vet all AI content, ongoing education (p.7).
  3. Supervision. Rules 5.1 and 5.3: firms need AI policies and training for lawyers and nonlawyers; AI treated as a nonlawyer assistant; check vendor credentials and security (p.10-11).
  4. Fees. Rule 1.5: assess whether AI time savings justify fee changes, communicate fee impact, seek informed consent before AI tools affect billing, avoid unreasonable fees (p.8).
  5. Disclosure. Clients should be informed how AI is used when circumstances warrant (p.7); chatbot intake needs disclaimers that no attorney-client relationship forms (p.12); Rule 3.3 requires verifying citations, no court disclosure rule (p.9-10).
  6. Verification. Lawyers must review AI output; hallucinated fake cases in a brief mean the lawyer has not met ethical obligations (Pitfalls, p.12).

The line about the tool itself. Clickwrap licenses often disclaim confidentiality; consider a premium or enterprise-tier plan with encryption, audit logs, customizable retention and contractual data-use limits (names ChatGPT Enterprise); checklist for contract terms asks whether vendor trains on identifiable client data, flow-down to the underlying model, and whether prompts and output are retained or purged at contract end (p.9, p.13). (Generative AI Toolkit (Last Updated July 9, 2026), p.9 'Software License Protect)

One line from it: "Ultimately, AI is a tool." (Generative AI Toolkit, Ethical and Regulatory Considerations, p.7).

The settings that answer it

  1. Use the business plan, not a personal one. On Claude Pro, Claude Max and ChatGPT Plus, training on chats is each user's own setting. On Claude Team, ChatGPT Business and Microsoft 365 Copilot with a work sign-in, business data is not used for training by default. On the checklist
  2. Turn off the training and feedback exceptions an admin can still turn off (Claude feedback, ChatGPT personal accounts that are still in use). On the checklist
  3. Set retention on purpose instead of taking the default. On the checklist
  4. Turn on single sign-on so a lawyer who leaves loses access the same day. On the checklist
  5. Decide on connectors, apps and agents before staff add them. On the checklist
  6. Pick a rule on memory, and teach temporary or incognito chats for one-off matter questions. On the checklist
  7. Put the vendor's written terms on training, retention, subprocessors and breach notice in the file. On the checklist
  8. Write the one-page staff instruction and a note for each new hire. On the checklist
  9. Keep a verification step before anything is filed. That is a procedure, not a setting, and no vendor sells it. On the checklist
  10. Decide what the engagement letter says about AI use and billing. That is yours to write; I only flag that the opinion raises it. On the checklist

Rules around it

Technology competence: No. Georgia Rule of Professional Conduct 1.1, Comment [6] currently reads only that a lawyer should engage in continuing study and education (gabar.org handbook.

In motion: Proposed amendment to GRPC 5.3 to add 'services, tools, and output' so AI tools are covered as nonlawyer assistance; sent to Disciplinary Rules and Procedures Committee March 2025, targeted for Board of Governors Fall 2025 meeting; adoption and Supreme Court of Georgia approval not confirmed this session. 2025-06-07 source; Proposed technology comment 6 to GRPC 1.1 and amendment to GRPC 1.6(c), promoted by the Special Committee; current handbook still shows no technology language; no proposed formal advisory opinions pending with the Supreme Court of Georgia as of today. 2025-06-07 source; Judicial Council Subcommittee on AI and the Courts made permanent after the June 2025 report; resources page says 'coming soon'. 2025-07-03 source

What this page is not

This is a tech settings page, not legal advice. The state document above is the ethics half and it is yours to read and decide on. I am not a lawyer. I link the source so you can check me.

Send me one screenshot

Crop out client names, send me a screenshot of your Claude, ChatGPT or Microsoft 365 admin settings page, and I'll write back what I'd change. Free. I never need a login.

If you want this kept current for your firm, that is the monthly desk: I watch these settings as the vendors change them and as your state changes its guidance, answer staff questions in writing, usually within one business day, and write up setup notes for each new hire. $500 a month, cancel any month.

Email nick@kaufmanops.com

Who wrote this

Nick Kaufman

I'm Nick Kaufman. I've spent six years in customer-facing technical support for SaaS, payments and CRM software, including three years at Tier 2 on a CRM built for financial advisors, whose firms work under SEC and FINRA rules. I'm not a lawyer and I don't give legal advice. I set up software so it does what the people responsible for it decided it should do.

Other states: the full list.