AI agent · Law firms

An AI agent for your law firm that welcomes, qualifies and books without touching professional secrecy.

It takes new-client requests, identifies the area of law and the urgency, checks for conflicts of interest before booking, then prepares the file for the lawyer. It never gives legal advice.

  • No legal advice
  • Conflict check before booking
  • Data hosted in Europe
Case intakeSimulation, fictional data

The lawyer receives a ready file

Area of law, urgency, documents requested: the agent does the first sort and passes on a clear summary. The first meeting starts on substance.

Professional secrecy stays intact

Client names and the lawyer's calendar are covered by secrecy. The agent only reads free or busy slots and never reveals a conflict to the person asking.

Every use case of the AI agent for law firms, from intake to case updates.

  • The agent identifies the area of law, the urgency and the documents needed, and never gives legal advice. The lawyer receives a file ready to work on.

  • The agent offers the right lawyer's slots and sends the confirmation with the list of documents to bring. The conflict-of-interest check runs before the booking, and a conflict is never revealed to the person asking.

  • The agent reads incoming documents, renames them and files them in the right folder, so the team stops losing time on filing.

  • Clients ask where their case stands. The agent answers from the file and passes any question of substance to the lawyer.

Case intakeSimulation, fictional data

The conversation ends, the new client's record is waiting for the lawyer.

Every new request arrives qualified, the lawyer decides what happens next.

One agent, connected to your tools, from the email to the opened matter.

  • Gmail or Outlook

    Reads the request sent to the firm's address and pulls out the essentials.

  • Form

    Website form

    Asks the intake questions, and never advises.

  • Cal.com

    Offers the right lawyer's slots and sends the confirmation.

  • Secib

    Secib, Kleos, Diapaz

    Prepares the matter-opening sheet for the team to approve.

  • The firm's calendar

    Reads free or busy slots only, never the content.

  • Document base

    Files incoming documents in the right matter.

Every Monday, it tells you where the firm loses time.

The rules of the profession, built into the agent from the start.

Professional secrecy

What goes through the agent, where it is hosted and who can access it are decided before deployment, following the guidance of the CNB and the Paris bar.

AI in law firms and professional secrecy

No advice, no negotiation

The agent takes the request, routes and books. Legal advice, the fee agreement and any negotiation stay with the lawyer.

AI tools for law firms, compared

AI Act transparency

Since 2 August 2026, Article 50 of the AI Act requires telling people they are talking to an AI from the start of the conversation.

The AI agent transparency obligation

The full guide: AI and legal document analysis

Legal Guide

AI in law firms: intake, conflict check and legal document analysis

What an AI agent does in a French law firm, from a client's first request to reading their contracts, and the RIN, AI Act and GDPR rules that apply at each step.

Zakaria El Asri18 min

The working rule

The agent checks for conflicts before booking and reads free slots only. The lawyer opens the matter.

A law firm's AI agent takes new-client requests, checks for conflicts of interest, books the first appointment and files the documents clients send. The lawyer keeps the advice, the fee agreement and the decision to take the matter.

Section 01

Intake and booking: the conflict check comes before the appointment

For a new client, the agent receives the request, identifies the area of law and the urgency, then checks for conflicts of interest before booking into the right lawyer's calendar. It sends the confirmation and reminders. It gives no legal advice and negotiates no fees. A conflict hit, an emergency or a question on the merits goes to a person.

Three articles of the Règlement intérieur national (RIN, the national conduct rules of the French bar), in the consolidated version published by the CNB (Conseil national des barreaux) on 7 July 2026, set this path. Article 2.2 puts "the names of clients and the lawyer's diary" under professional secrecy. Article 4.1 bars taking on a new client if a former client's confidences are at risk. Article 19.2 requires a lawyer solicited online to check the person's identity in order to protect secrecy, avoid conflicts of interest and apply anti-money-laundering rules.

  1. 1
    Intake

    The request arrives by e-mail at the firm's general address, through the website form, or as a transcribed voicemail. The agent introduces itself as an AI in its first reply.

    OutlookWebsite formVoicemail
  2. 2
    Triage

    Area of law from the firm's routing table, urgency signals (police custody, hearing, deadline mentioned), individual or business. No analysis of the merits.

  3. 3
    Conflict-of-interest check

    The requester's name and the other parties' names are compared with current and former clients and recorded opposing parties. Any resemblance stops the path.

    Firm's client and matter database
  4. 4
    Human hand-off when neededHuman hand-off

    Possible conflict, emergency, area the firm does not handle, question on fees or on the merits: the assistant or a lawyer takes over, with the summary.

    OutlookTeams or text message
  5. 5
    Booking

    Slot taken in the calendar of the lawyer in charge of that area, under the firm's rules: duration, slots kept for new clients, in person or by video.

    Outlook via Microsoft Graph
  6. 6
    Confirmation

    E-mail naming the lawyer, with the address or video link, the documents to bring, the price of the first consultation and, if the firm wants it, a payment link.

    Outlook
  7. 7
    Reminders

    Reminder the day before with a link to reschedule or cancel. A reschedule goes back through the calendar and the same rules; a cancellation frees the slot and notifies the assistant.

    E-mailText message
  8. 8
    Matter preparation

    Structured summary sent to the assistant, or a draft matter created in the practice-management software when the vendor opens an API for it.

    SecibKleosDiapazJarvis Legal
  9. 9
    Opening by the lawyerHuman hand-off

    The lawyer confirms there is no conflict, meets the client, proposes the fee agreement and decides whether to take the matter.

Typical path of a new-client request, drawn by Lumyniq from the RIN (version of 7 July 2026) and the documentation of Microsoft Graph, Google Calendar, Cal.com and the vendors named. Orange steps are handled by a person.

The conflict check comes before booking because a first meeting is already an exchange of confidences. If the opposing party is a client of the firm, the lawyer must not hear their opponent's side, and the firm may have to step aside. The agent checks the names before the requester sets out the facts. The names compared, the software queried, the reply on a match and the log are covered in section 02.

The confirmation goes out after booking because it carries two pieces of information the RIN requires early: the name of the lawyer acting (article 19.2) and how fees are determined, due "from the moment the lawyer is engaged" (article 11.1).

The diary is covered by secrecy

The RIN puts the lawyer's diary under secrecy: the booking agent reads availability and nothing else. Google Calendar exposes freeBusy.query, which returns only busy periods, with a dedicated scope (calendar.freebusy). Microsoft Graph offers getSchedule, which accepts an application permission (Calendars.ReadBasic) suited to an agent running with no signed-in user.

The sample getSchedule response in the Microsoft documentation includes the subject and location of appointments. Check what comes back under your sharing rights, and mark client appointments as private if the agent should only see free or busy.

Cal.com offers a booking API (POST /v2/bookings) that accepts custom fields: area of law, other parties, urgency.

AI disclosure and the minimum of data

Since 2 August 2026, Article 50 of the AI Act requires people to be told they are dealing with an AI. According to the European Commission FAQ updated on 24 July 2026, the information must be given clearly at the start of the first interaction. The agent writes it in its first reply.

The same reply asks the person not to describe the facts. The CNIL (the French data protection authority) recommends that warning in its advice on chatbots (page of 19 February 2021): where sensitive data may be entered without the service having planned for it, users should be asked not to share it, and a purge should be in place.

For a first appointment, the agent needs the name, contact details, the other parties' names, the area of law, the urgency and the slot. The client tells the facts to the lawyer.

The general rules on AI and secrecy, with the CNB and Paris bar texts, are in our guide to AI in French law firms and professional secrecy.

Section 02

The conflict-of-interest check before booking: what the agent checks and what it keeps to itself

Before offering a slot, the agent compares the requester's name, the opposing party's name and the names of any other parties with the firm's list of clients, former clients and opposing parties. On the slightest resemblance, it books nothing, says nothing about any other client and passes the request to a person the firm has named.

The names the agent compares

The agent asks for three things before any slot: the requester's name, the opposing party's name and the names of anyone else involved (employer, business partner, spouse, other party to the contract). For a company, it takes the registered name and, if the requester knows it, the SIREN number (the French company registration number). It does not ask for the facts.

It compares those names with current clients, former clients and opposing parties already on record. Article 4.1 of the RIN bars a lawyer from taking a new client's matter "if the secrecy of information given by a former client is at risk of being breached" (our translation, as for every RIN quote in this section): closed matters are part of the comparison.

The comparison covers the whole firm. The same article applies these rules to the practice structure "as a whole and to all its members", and to associate lawyers' personal files. If those personal files are kept outside the firm's database, they have to be added, or the check has a blind spot.

Names are normalized before the comparison: accents, capital letters, company forms (SAS, SARL, the French equivalents of a corporation and a limited company), first name and surname order. The agent looks for a resemblance and does not require an exact match.

On namesakes, the rule is asymmetric: the agent flags every resemblance ("SAS Batiplus" and "Batiplus Construction"), a person clears the false positives. A false positive costs the assistant one e-mail, a missed conflict can cost the matter.

Which software, and how

The check queries the firm's client and matter database. A firm that records opposing parties in a dedicated field can query them. A firm that writes them in free-text notes has no usable base, and that has to be said before the project starts.

On Secib, the connector published in Microsoft's documentation has no search-by-name action. Its "Retrieving view's data" action returns the content of a view identified by its name. The firm creates a view listing the parties to each matter, the agent reads it and runs the comparison on its side. That is our reading of the documentation, to confirm with the vendor.

This setup sends the firm's entire client list through the agent. Article 2.3 of the RIN requires the lawyer to ensure secrecy is respected "by any person who works with them in their professional activity", and makes the lawyer answerable for breaches. We count the agent's provider among those people: the list stays in hosting the firm controls, under a contract that says so.

On Kleos, the API add-on sold by Wolters Kluwer is the only documented route. Ask in writing whether it allows a search by name across clients and opposing parties before relying on it.

Diapaz describes, in its KYC module, recording the role of each client and contact in each matter, and a view of potential conflicts "at a glance". The site mentions no API: the agent collects the names, a person runs the check in Diapaz, and the agent offers a slot only after that person clears it. The pattern is the same with Jarvis Legal.

Without an API, a regular export of the client and party list to a table the agent reads is enough. A matter opened since the last export will not be in it: the lawyer runs the check again when opening the matter, the last step of the diagram in section 01.

When the check finds a match

The agent stops. It offers no slot, books nothing and sends no payment link. The request goes through the firm's internal messaging to the person the firm has named for conflicts, with a stand-in for when they are away.

That person receives the names entered, the database entry that resembles them, the reference of the matter concerned and the source channel. The requester is never copied on that message.

To the requester, the agent replies that someone at the firm will pick up the request and get back to them. It uses the same sentence for an emergency, a question on fees or an area the firm does not handle. A reply used only for conflicts would give the match away through its wording alone.

What happens next is the lawyer's call: clear a false positive, obtain the parties' agreement where article 4.1 allows it, or decline. Any refusal and its wording are theirs. When in doubt about what to do, the lawyer consults their bâtonnier (the elected head of the local bar).

What the agent never says

It does not say that a name was found, that the opposing party is or was a client of the firm, which lawyer handles them, or why the request is going to a person. It mentions no other matter, even to reassure. Replying "we already act for that company" would disclose a client's name.

It can tell every requester, before any result, that the firm checks for conflicts of interest before every first meeting. Because every requester hears it, that sentence reveals nothing about anyone.

The rule rests on the RIN. Its article 2.2 puts "the names of clients and the lawyer's diary" under professional secrecy. Article 66-5 of the Law of 31 December 1971, the statutory basis of secrecy, covers consultations, correspondence, meeting notes and the documents in the file, and does not mention client names: the RIN adds them.

Neither text deals with a refusal on conflict grounds. Announcing a conflict to someone who has just named their opponent still tells them that the opponent is, or was, a client of the firm. We draw the rule from that: nothing in the reply may allow that inference. This is our reading of the texts, and the firm's own rules and the bâtonnier have the final say.

What the agent logs

Each check leaves one line in a log: date and time, channel, names as received and normalized names, source queried and the date it was last updated, result.

For a possible match, the line adds the reference of the resembling entry, the person notified and the time of the notice. The decision taken afterwards is entered by that person; the agent writes none.

The log holds neither the facts, which the agent never asked for, nor a copy of the client list. It stays in the firm's environment, open only to the people who handle conflicts, and the firm sets how long it is kept under the GDPR.

The RIN spells out a requirement for "adequate procedures to identify and manage conflicts of interest" only for members of a multidisciplinary network (article 16.4). For other firms, this log is a precaution we recommend: it shows which check preceded each meeting.

This section describes how the system works and is not ethics advice. The general framework for secrecy and AI tools, with the CNB guide and the Paris bar charter, is in our guide to professional secrecy and AI in French law firms.

Section 03

Secib, Kleos, Diapaz, Jarvis Legal: what practice-management software exposes

As of 3 November 2026, none of the four practice-management products examined publishes openly accessible API documentation that lets a third-party agent create a matter. Secib exposes a read-only Power Automate connector, Kleos sells an API add-on, and the Diapaz and Jarvis Legal sites mention none. The agent works through the calendar and the mailbox; a person opens the matter.

ToolWhat the vendor documents publiclyWhat an agent can do with it
Secib neo and Secib air (Septeo)Power Platform connector "SECIB (Preview)": trigger when a case file is created, read the list of firms and the data of a view, 100 calls per minute per connection, access on request to support. SECIB+: no public API catalog, projects case by case.Read a view, be notified when a matter is created. Create a contact or a matter: no documented action, a project to negotiate with the vendor.
Kleos (Wolters Kluwer)Brochure: "Kleos API" to interact with your systems, calendar, task and e-mail sync with Microsoft Office, EU cloud certified ISO 27001.The most explicit API offer of the four. Scope, documentation and price to obtain in writing.
Diapaz (Xelya)View of conflicts of interest in the KYC module, e-mail and calendar on Exchange Online and Outlook. No API mentioned on the site.Book in Outlook. Conflict check and matter creation in the interface, by a person.
Jarvis Legal (LexisNexis)Native Microsoft 365 integration (Word, Outlook, Excel) and an Outlook add-in. No API mentioned on its product page.Same pattern: Outlook as the entry point, matter opened by hand from the summary.
Outlook (Microsoft Graph)getSchedule (application permission Calendars.ReadBasic), findMeetingTimes (delegated only), event creation.Read availability and create the appointment.
Google CalendarfreeBusy.query, calendar.freebusy scope.Read busy periods without reading appointment content.
Cal.comAPI v2 POST /v2/bookings with custom fields, Stripe payment, e-mail and text reminders.Full booking, reminders and payment, connected to Outlook or Google.
Lumyniq survey of 3 November 2026 of the vendors' public pages and documentation. “No API mentioned” means we found none on their public sites; an API may exist under contract.

Secib

The "SECIB (Preview)" connector, published by SECIB in Microsoft's documentation, offers a "When a case file is created" trigger for SECIB neo, SECIB air and Gestisoft, and two actions: retrieve the accessible firms and retrieve the data of a view. It acts on behalf of the whole firm, since version 1.0 does not support per-user authentication, and access is obtained by writing to SECIB support. It contains no action that creates a contact or a matter.

Septeo presents SECIB+ as the route for connecting third-party tools and states that no API catalog is currently public: projects are considered case by case. For a firm on Secib, creating matters automatically is a project to negotiate with the vendor.

The connector's read action could feed the conflict check, from a Secib view listing the parties to each matter. That is our reading of the connector documentation, to confirm with the vendor before any development.

Kleos

The Wolters Kluwer brochure places "Kleos API" in the software's ecosystem, next to Microsoft Office sync. The vendor's API page blocks automated reading; according to the extract indexed by search engines, the API module is an add-on activated through the sales team, and creating matters from the firm's website is among the listed uses. Ask for the documentation and the price in writing before building on it.

Diapaz and Jarvis Legal

Diapaz, published by Xelya, describes a visual conflict check in its KYC module and e-mail on Exchange Online and Outlook: the tool is designed for a person at the screen. Jarvis Legal, distributed by LexisNexis, highlights Microsoft 365 integration and an Outlook add-in. Neither site mentions an API. With these products, the agent books in Outlook and the assistant opens the matter from the summary.

The summary sent to the assistant

Without an API, the agent sends a summary in a fixed format: identity, contact details, other parties, area of law, urgency flagged, slot booked, conflict-check result and source channel. The assistant copies or imports it into the software without re-reading the exchange.

Section 04

Automated legal document analysis: filing incoming documents and answering case updates

In a law firm, automated legal document analysis means an agent that reads the documents and deeds the firm receives, picks out what matters and files them in the right matter. It starts with two simple tasks: sorting the documents clients send and answering questions on how a case is progressing. The lawyer checks what the agent picks out.

Sorting incoming documents

After the first meeting, the client sends their documents by e-mail or through the website form. The agent reads each one, recognizes its type (employment contract, payslip, dismissal letter, judgment), renames it to the firm's convention and files it in the matter.

It then compares what it received with the list of documents requested in the confirmation e-mail, and reminds the client about the missing ones.

The documents go where the firm already keeps its matters: a document management system such as iManage or NetDocuments, a SharePoint site, or the practice-management software when the vendor opens an API for it (section 03).

Case updates

A client who asks where their case stands gets the last step recorded in the matter: submissions filed, hearing date. Any question on the merits goes to the lawyer, with the client's message.

The agent first checks that it is talking to the client on the matter, through the e-mail address or phone number on file. Confirming to a third party that a matter exists would tell them the person is a client of the firm, and article 2.2 of the RIN puts client names under secrecy.

Section 05

Reading a contract with the agent: what it flags for the lawyer

On a contract, a lease or a ruling, the agent picks out clauses, dates, amounts and discrepancies, and every point links to its page in the document. The lawyer reads that summary, checks the points that commit the firm and keeps both the advice and the negotiation. The table lists the most common extractions.

DocumentWhat the agent flags
Commercial contract (services, distribution, framework agreement)Unusual or missing clauses
Non-disclosure agreementDuration, scope, penalties, restrictive clauses
Commercial or residential leaseTermination, indexation, charges
Corporate documents (articles, AGM minutes, shareholder agreement)The same grid applied to every document, in due diligence
Court rulingParties, reasoning, operative part
Terms and conditions of saleCompliance points, abusive clauses
Two versions of the same contractEvery change, flagged
Typical extractions requested from the agent. Every point links to the document, page and paragraph.

The errors the agent reduces, and the ones it adds

The agent reduces errors from fatigue, skim reading of a large volume, confirmation bias, and mistakes when copying dates, amounts and references by hand.

It adds others: an invented clause (hallucination), a wrong extraction from a poor scan. A lawyer's validation, described in section 06, is there to catch them.

Measuring the gain

Lumyniq does not publish a percentage of time saved: it depends on the documents, their scan quality and the level of review the firm keeps. Measure on your own files the average time per document type before and after, errors caught downstream, cases handled per period and the total cost of the tool, licenses and training.

Disregard any ROI multiple announced by a vendor that has not seen your files.

Section 06

Every point the agent flags links to its page in the document. A lawyer approves the ones that commit the firm.

A reliable analysis is prepared upstream. Documents are scanned cleanly, grouped by type and indexed. The agent then processes them in four layers, from raw text to summary. A lawyer finally approves the points that commit the firm, and every extraction keeps its source: document, page, paragraph.

Preparing the documents

A poor scan triggers cascading errors: OCR must be precise before any analysis. Convert documents to a structured format (PDF with OCR, Word, plain text) to process them in batches.

Then group them by type (commercial contracts, leases, NDAs): each family gets its own instructions and review grid. Index the date, parties, jurisdiction and sector so you can filter later.

From scan to summary

The four layers of an analysis

Layer 1

Raw extraction

Quality OCR and structuring of text and visual elements (tables, signatures, stamps).

Layer 2

Semantic understanding

Language models (Claude, GPT, Mistral) parse meaning: parties, obligations, dates, amounts, non-compete clauses.

Layer 3

Critical analysis

Comparison against benchmarks: abusive clauses, imbalances, risks, negotiation points.

Layer 4

Synthesis and reporting

Executive summary, due-diligence brief, compliance report, comparison table.

Approving before use

A lawyer always reviews points with high financial stakes or legal risk. At regular intervals, a sample of documents the agent has already processed is re-analyzed by hand.

Lawyers' corrections are fed back into the agent's instructions. Every extraction stays tied to its source (document, page, paragraph) for fast checking.

Section 07

Off-the-shelf tool or custom agent

Two families of tools read legal documents. SaaS products (Kira Systems, Luminance, LawGeex, ContractPodAi) deploy fast, on subscription. A custom agent, which is what Lumyniq builds, follows the firm's instructions and connects to its tools. Volume, document type, integration and how sensitive the matters are decide between them.

CriterionTurnkey SaaSCustom agent
DeploymentFast, limited initial trainingLonger implementation, with a competent partner
CostPredictable subscriptionHigher upfront investment
Language and formatsOften designed for English and US formatsInstructions tailored to French law and documents
IntegrationAPI bridgesNative: iManage, NetDocuments, SharePoint
Customization and dataLimited customization, vendor dependencyFull control over data
Documents and volumeStandard documentsHigh, steady volume
Investment horizonShortLong
Selection criteria between the two families of tools. A test on your own documents settles borderline cases.

For defense and strategic litigation, prefer in-house hosting, whichever family you choose.

The tool-by-tool comparison (research, drafting, contract review) is in our guide to the best AI tools for legal.

Section 08

Professional secrecy, GDPR and data security

A law firm's documents mix personal data and information covered by professional secrecy. Four sets of rules apply in France: the GDPR, the French Data Protection Act that complements it, the EU AI Act, which classifies some legal AI systems as high-risk, and the RIN, whose article 2 protects professional secrecy including towards technical tools.

What to require from the vendor

From document to access log

Five protections for a document handed to the agent

Original document

PDF, Word or scan, entry on the user side

01

TLS 1.3 in transit

Network channel encryption

02

AES-256 at rest

File and database storage encryption

03

EU hosting

OVH, Scaleway, AWS Europe, Azure Europe

04

DPO and logging

Signed DPA, traced access, periodic audits

05

Host in the European Union (OVH, Scaleway, AWS Europe, Azure Europe), with no transfer outside the EU. Encrypt traffic with TLS 1.3 and storage with AES-256.

Use the enterprise versions of the models (Claude Enterprise, Azure OpenAI, Mistral Enterprise), the only ones that disable training on your data.

Have the Data Processing Agreement (DPA) set out purposes, retention periods and sub-processors. Log every access and every extraction for audits.

Anonymize documents when you can: it greatly reduces the GDPR risk. Forbid staff from entering confidential data into unsecured AI tools.

The processing terms of OpenAI, Anthropic and Mistral are compared in our guide to GDPR and AI agents.

Section 09

Where to start

Start with new-client intake. The agent handles little data there (name, contact details, other parties, area of law, urgency, slot) and the conflict check protects the firm from the first message. First make sure your opposing parties are recorded in a dedicated field of your database, or the check has nothing to query.

Then add document sorting and case updates, which start from the matter the lawyer has opened. For contract review, test the agent on a sample of your own documents and measure time and errors before and after.

To choose the technical building blocks (automation platform, model, compliant hosting), our guides and comparisons lay out the trade-offs, with sources.

Section 10

FAQ: AI in law firms

Yes, for intake: receive the request, identify the area of law and the urgency, run the conflict-of-interest check, book into the right lawyer's calendar, confirm and remind. It introduces itself as an AI in its first reply (Article 50 of the AI Act, in force since 2 August 2026). It gives no legal advice and hands any conflict hit, any emergency and any question about fees to a person.

Related guides

Read next

Sources

Links verified at publication. Regulatory texts change — always defer to the official source.

Free audit

Automate your law firm

45 minutes with Zakaria El Asri: leave with an action plan on the AI automations most useful to your firm.

  • Your current workflows: volumes, steps, friction points
  • The tasks to hand to an agent, and the ones that stay human
  • The tools to connect, SaaS or custom, sized to your team
  • A realistic 3 to 6-month plan
  • GDPR and compliance considerations
No commitment. Practical conversation.Or book a slot directly →