Guide the next draft
A visible response helps the user remove or mask illustrated identifiers before sending when policy calls for it.
Workforce AI Security
AI Governance for Legal
Workforce AI Security for legal teams using third-party AI for client and internal work.
For legal operations, IT and security leaders responsible for employee AI use.
Client updates
PromptUser or AI agent
Write an update for Maya Patel (0491 570 156) about matter L-2026-310.
Redacted
Identifiers removed
The illustrated identifiers are masked so the request can be reviewed in a safer form before sending.
Protected prompt
Write an update for [REDACTED NAME] ([REDACTED PHONE]) about matter [REDACTED REFERENCE].
Synthetic example
Sensitive content was detected in this illustrated request.
Give legal and security a common record
Recorded outcomes support a useful policy conversation without turning day-to-day work into a mystery.
Keep professional judgement with the team
Outputs still need the firm’s normal review. Aona does not assess legal accuracy or give advice.
Workflows
Protect client details in everyday legal AI work.
Start with the everyday AI interactions your people already need to complete.
Synthetic example
Draft a status note without pasting client details
Write an update for [REDACTED NAME] ([REDACTED PHONE]) about matter [REDACTED REFERENCE].
ActivityRedacted
- Group
- Legal
- Data
- Maya Patel · 0491 570 156 · L-2026-310
- Response
- Identifiers removed
Sensitive content was detected in this illustrated request.
Aona is a workforce AI security control, not legal advice or a substitute for professional judgement. Confirm each policy response on the AI tool, endpoint and data path you plan to use. Choose backend hosting and prompt processing separately; confirm the supported configuration and data flow before rollout.
Deployment, on your terms
Your infrastructure. Your processing choice.
Choose where the Aona backend runs, then where Aona processes prompts.
Host the Aona backend
Customer cloud, on-premises or Aona-managed hosting.
Process prompts with Aona
On-device, in your infrastructure or on Aona-managed servers.
Deployment answers
Scope the rollout with the real control boundary.
Confirm the tools, surfaces and data paths that matter before expanding beyond a synthetic test.
View details- 01Discovery
- Endpoint coverage is required for observed workforce AI use. The catalog tracks 10,000+ tools; catalog presence is not an enforcement promise.
- 02Controls
- Configured prompt and file controls apply on supported tool, surface and action combinations. Confirm the exact workflow with a synthetic test.
- 03Deployment
- The browser extension supports Chrome, Edge, Firefox and Safari. The native endpoint app broadens scope, but provider and transport depth differs; IT deploys it on Windows and macOS with its existing tooling.
- 04Review
- Use recorded policy outcomes to support internal review. They are evidence for your process, not an automatic compliance, classification or risk conclusion.
Buyer questions
Answers for the people accountable for workforce AI use.
Illustrated with synthetic data; confirm your workflow before rollout.
Aona tracks more than 10,000 AI tools in its risk catalog, but that discovery breadth does not mean every tool has an available control. The response depends on the tool, surface, action and endpoint. Confirm your required workflows in the evaluation.
On a supported path, the employee receives a clear response before sending. Depending on the configured rule, they may see a block or a prompt to use a redacted version. A hard block does not offer a continue option.
Choose backend hosting separately from Aona prompt processing. Host the backend in your cloud, on your premises or on Aona-managed servers. Process prompts on the user device/on-edge, in your cloud or on-premises, or on Aona-managed servers. Confirm the supported configuration, retention, telemetry and integrations for your rollout; these choices do not change a third-party AI provider’s data handling.
Choose one specific administrative workflow, a group and a simple rule for legal teams. Use synthetic data to check the experience on the intended tool and endpoint, then expand only after reviewing the results.
Aona can help apply configured controls to supported employee interactions. Start with an anonymised administrative workflow, test it on the intended endpoint, and keep the firm’s normal legal review of any output.
No. Aona applies configured workforce AI controls; the firm decides its document, matter and professional-responsibility rules. Confirm the policy and workflow with the people who own them.
Resources
Continue the evaluation
010203
Read the AI governance for law firms guide
Explore client confidentiality, legal AI policy and practical evaluation questions for law firms.
Check supported coverage
Review the practical tool, endpoint and action questions for your evaluation.
Plan a deployment
Use the deployment guide to prepare a measured rollout.
Focused evaluation
Evaluate one matter-administration workflow.
Bring the AI tool, an anonymised work example and the rule your firm wants to test. We will show the employee experience, policy outcome and scope questions that affect deployment.
Book a legal demoClient updates
- Matter workflow and intended AI use
- Synthetic request and sensitive-data rule
- Employee response and review record
- Endpoint scope and rollout plan
Synthetic example