Can a law firm license client files or its own archive for AI training?

The short answer

For client matter content, the answer is generally no. A lawyer's duty of confidentiality covers information relating to the representation of a client, and licensing that material to an AI developer would reveal it. In practice, client matter content is out of scope for a SourceX introduction unless ethics counsel concludes otherwise, which would mean informed consent from each affected client.

That leaves a narrower set: firm-owned operational records that do not contain client information, such as IT tickets, HR policies, internal training material and process documentation. Even these need checking, because client names and facts leak into time entries, ticket notes, file paths and templates. The explainer on why company documents are valuable shows what buyers look for in operational documents generally.

What the rules actually say

The ABA Model Rules of Professional Conduct are a template; each state adopts its own version, so the binding text is your state's rule. The ABA's index of the Model Rules links to each one. Three points matter here.

• Rule 1.6, confidentiality of information. Model Rule 1.6 bars a lawyer from revealing information relating to the representation of a client unless the client gives informed consent, the disclosure is impliedly authorized to carry out the representation, or a listed exception applies. The phrase is broad: it is not limited to privileged communications.
• State versions differ. Wording, exceptions and ethics opinions on confidentiality and technology vary by state and change over time, so the firm's ethics counsel should read the current local rule and any state bar guidance on AI before anything else happens.
• Copyright ownership is a separate question. Under 17 U.S.C. 201, copyright in a work made for hire belongs to the employer, and individual rights can be transferred or licensed separately. A firm may own the copyright in a brief its associates wrote and still be barred from disclosing the client information inside it. Ownership is not permission.

How it applies to common situations

For the operational rows, the pages on ServiceNow incident, change and knowledge records and on HR and payroll records explain how IT and HR material is scoped in any business, law firms included.

What legal-tech consultants should and should not say

Consultants who implement document management, practice management or knowledge systems see archives up close, which is exactly why they should not be the ones proposing to license them. A safe sequence:

1. Never suggest that matter files, work product or client documents could be licensed.
2. Ask the managing partner or COO whether the firm has thought about its own operational records, and suggest that the general counsel or ethics partner leads any review.
3. Share fit information only: headcount, years of operation and which business systems exist. Never share, describe or sample documents.
4. If the firm wants to explore, introduce it to SourceX, where scope, exclusions and redaction rules are agreed with the firm before any work begins.

Operating companies are often a better fit than law firms, because their contract archives and compliance workflows sit inside a broader set of operational records. The page for management consultants covers that wider referral role.

If you are a practicing lawyer weighing a referral reward connected to a client, ask your ethics counsel which conflict and fee rules apply. One example is Model Rule 1.8(a), which sets conditions for a lawyer entering a business transaction with a client: fair and reasonable terms disclosed in writing, written advice to seek independent counsel, and the client's informed consent in a signed writing. The ABA's state variations of Rule 1.8 show how much states differ, so check your own state's rule with ethics counsel before you register.

Disclosure and consent good practice

• Put the firm's ethics counsel in charge of scoping before any inventory work starts.
• Document which categories were excluded and why, so the decision trail is clear later.
• Review engagement letters and outside counsel guidelines, which can restrict use of client information beyond the matter.
• Where client consent is sought for anything, make it specific, written and informed, never a line in a general update.
• Keep inventory work at the metadata level, as a list like the one the data inventory builder produces, and keep every document inside the firm. Delivery needs an executed agreement and the firm's authorization.

Questions to ask your ethics counsel

1. How does our state's version of Rule 1.6 treat firm templates derived from client matters?
2. Which internal records carry client information in ways we might miss, such as file paths, ticket notes or calendar entries?
3. Do outside counsel guidelines or protective orders restrict our handling of client material beyond the rules?
4. Is client consent realistic or appropriate for any specific material, and what would informed consent need to cover?
5. How should staff personal data in HR and IT records be handled?
6. Who signs for the firm, and does the partnership agreement require a vote?

This is general information, not legal, tax or financial advice. Confirm with your own counsel or professional body before acting.

Next step

If a firm or company you advise has 50+ full-time employees at peak (contractors excluded), several years of documented operations and a leader willing to explore a narrowly scoped license, compare it with the who qualifies baseline, then register as a partner and make the introduction. Firm leaders can also apply directly at sourcex.si/apply.