Schema LawSign in with Google

Confidentiality

Before a client document goes into any online tool, a lawyer has to know where it goes and who can use it. These posts explain the duties involved and the questions that separate a safe converter from a risky one. Start with whether it is safe to upload client documents to an OCR tool.

  1. Does OCR Software Store My Documents? Retention 101

    Does OCR software store my documents? Online tools usually keep uploads for a while. Where copies sit, how to delete them, and how to set a retention period.

    retentiondeletionocr

  2. OCR Vendor Subpoena: Who Can Demand Your Uploaded Files?

    An OCR vendor subpoena can reach files a firm uploaded. What the Stored Communications Act limits, what it allows, and the contract terms to check.

    subpoenastored communications actvendor terms

  3. OCR Export Controlled Documents: ITAR and EAR Limits

    Before you OCR export controlled documents online, read how the ITAR and the EAR define export, release and the end-to-end encryption carve-out.

    export controlsitarearocr

  4. OCR Without Sending Documents to OpenAI: How to Check

    Want OCR without sending documents to OpenAI or another model provider? Where to look, how to read a subprocessor list, and what to do if none is acceptable.

    subprocessorsmodel providersvendor review

  5. Attorney Client Privilege and AI Tools: The Risks

    How attorney client privilege and AI tools interact: one federal ruling on waiver, the confidentiality rules, work product, and the contract terms that help.

    privilegework productethics opinionsai tools

  6. AI Document Tool for Lawyers That Doesn't Train: 6 Checks

    Six checks for choosing an AI document tool for lawyers that doesn't train on files, prompts, outputs or feedback, with a dated note for the firm's records.

    model trainingai toolsvendor terms

  7. Is It Safe to Upload Legal Documents to ChatGPT?

    Whether it is safe to upload legal documents to ChatGPT depends on the plan, its settings and the document. What OpenAI's pages say, and a rule to apply.

    chatgptconfidentialityclient files

  8. OCR Vendor Data Breach: What a Law Firm Does Next

    After an OCR vendor data breach, a law firm secures the account, lists which client documents were exposed, weighs notice duties and keeps an incident log.

    data breachincident responsevendor review

  9. Client Consent to Use AI Tools on a File: When to Ask

    When you need client consent to use AI tools or an online converter on a file, what informed consent must cover, sample engagement wording, and handling a no.

    informed consentengagement lettersai tools

  10. Accidentally Uploaded a Confidential Document to ChatGPT?

    If you accidentally uploaded a confidential document to ChatGPT, here is what to delete, what OpenAI's pages say deletion does, and whom to tell.

    chatgptconfidentialityincident response

  11. Closed System Legal AI: What the Term Should Mean

    Closed system legal AI has no standard definition. Learn what the term should mean, how it differs from a public chatbot, and the questions that test it.

    closed systemconfidentialityvendor review

  12. OCR for Sealed Records: What to Settle Before Upload

    Before you run OCR on sealed records, settle who may hold a copy, where the converted text will live and when it is deleted. A checklist for the file.

    sealed recordsconfidentialitycourt orders

  13. Private OCR: What Makes a Converter Confidential

    Private OCR keeps a scan away from anyone outside your control. Compare local, self-hosted and closed-service converters, and match each to the document.

    private ocrconfidentialitypdf to word

  14. Encrypted OCR: In Transit, at Rest, and the Gaps

    Encrypted OCR protects a document on the way to a converter and in storage. See what each kind of encryption covers, what it leaves open, and how to check.

    encryptionconfidentialityvendor review

  15. OCR That Does Not Train on Your Data: How to Verify

    How to find OCR that does not train on your data: what training means, where the exceptions hide in the terms, and how to test a vendor's promise.

    model trainingvendor termsocr

  16. Can OCR Vendor Employees See My Documents? How to Check

    Can OCR vendor employees see my documents? Assume some can until the vendor says otherwise. How to find out who, why, and what controls a vendor documents.

    vendor accessconfidentialitydue diligence

  17. OCR Student Education Records: FERPA Limits for Counsel

    Before you OCR student education records, check how they reached you. What FERPA says about outside vendors, subpoenas, consent and de-identified text.

    ferpastudent recordsocr

  18. OCR Documents Containing EU Personal Data: Transfer Rules

    Before you OCR documents containing EU personal data in a US service, check the GDPR's scope, the processor contract and the transfer tool that applies.

    gdprdata transfersocr

  19. OCR a Password Protected PDF Without Losing Protection

    To OCR a password protected PDF you need an unlocked copy, and that copy has no protection. Whose password it is, what to track, and how to re-protect.

    password protectionpdf securityconfidentiality

  20. OCR Before or After Redaction? The Order That Is Safe

    Should you run OCR before or after redaction? Use OCR to find what to redact, then build the text layer from the redacted pages. Steps and a final test.

    redactionproductionstext layer

  21. Is Free Online OCR Safe for Legal Documents?

    Is free online OCR safe for legal documents? Often not for client files. See how free converters make money, what their terms say, and a two-minute check.

    free ocrconfidentialityterms of use

  22. OCR Documents Under a Protective Order: Vendor Rules

    Before you OCR documents under a protective order, read its vendor, undertaking and destruction clauses. What to look for, and a pre-upload checklist.

    protective orderdiscoveryvendorsconfidentiality

  23. OCR Documents With Social Security Numbers Safely

    How to OCR documents with Social Security numbers: what court rules make you redact, how to search for identifiers, and where exports multiply them.

    social security numberspersonal identifiersredaction

  24. OCR Tool That Does Not Share Data Between Customers

    How to find an OCR tool that does not share data between customers: the ways firms' documents get mixed, the public link trap, and nine questions to ask.

    customer separationvendor reviewocr

  25. Is OCR Text Part of the Client File? What to Hand Over

    Whether OCR text is part of the client file depends on your jurisdiction's test. How the two approaches treat converted copies, and what to hand over.

    client filefile transferocr

  26. OCR Trade Secret Documents Without Losing Secrecy

    How to OCR trade secret documents without weakening the secrecy claim: the reasonable measures test, vendor terms to read, and a handling record to keep.

    trade secretsconfidentialityocr

  27. Convert PDF to Password Protected PDF Before You Send It

    How to convert a PDF to a password protected PDF before it goes to a client: when to do it, the steps, the encryption setting, and what a password misses.

    pdf passwordencryptionsending documents

  28. OCR Vendor Data Processing Agreement: Clauses to Read

    What an OCR vendor data processing agreement should say about client documents: permitted use, subprocessors, output rights, deletion and what to negotiate.

    vendor contractssubprocessorsconfidentiality

  29. Law Firm AI Policy Document Upload Rules: A Template

    What a law firm AI policy should say about document upload: template clauses, three tiers of tools, an approval process and a way to check it is followed.

    ai policyconfidentialityfirm management

  30. Is It Safe to Upload Client Documents to an OCR Tool?

    It can be safe to upload client documents to an OCR tool once you know what the vendor keeps, who sees it and what it promises. Questions to ask first.

    confidentialityvendor diligenceocr

  31. OCR With Data Retention Control: Who Sets the Clock

    OCR with data retention control means your firm sets how long uploads live. How to compare tools on periods, holds, per-matter rules and proof of deletion.

    retentionlitigation holdvendor review

  32. Shadow AI in Law Firms: Finding Unapproved Upload Tools

    Shadow AI in law firms is the chatbots and converters staff use without approval. How to find the tools, run an amnesty and move people to approved ones.

    shadow aifirm policysupervision

  33. Schema Law Security: What the Site Says and Does Not Say

    Schema Law security in the site's own words: the four commitments on every plan, what changes by plan, what the site leaves unsaid, and what to ask.

    schema lawsecurityvendor review

  34. OCR Data Residency: Where Are Uploaded Files Processed?

    OCR data residency is the country where a service processes and stores your uploads. How to find it out, where region claims leak, and a clause to use.

    data residencyvendor reviewocr

  35. OCR Vendor Business Associate Agreement: Who Needs One?

    When a law firm needs a business associate agreement with an OCR vendor before uploading medical records, what it must say, and what to do without one.

    medical recordshipaavendor contracts