QuestionLegal ServicesAI GovernanceData Protection

Do AI contracts stop client data being used for model training?

18 August 2026

Answered by Rohit Parmar-Mistry

Short answer

A quick answer first, then the fuller context below.

AI contracts should stop client data being used for model training only when the terms say so clearly. Check retention, human review, subprocessors, audit rights and data deletion before any confidential matter enters the tool.

What this points to

This usually points to Secure AI implementation

If this question reflects a real workflow, supplier, data or governance decision inside the firm, do not treat the answer as theory. Use it to decide whether you need a light assessment, a deeper audit, a controlled implementation path, governance support or recovery from a genuinely stalled AI attempt.

secure AI implementation Audit risk and opportunity Talk through the risks and options with Rohit

Detailed answer

The fuller context, trade-offs and practical steps behind the short answer.

Why the contract matters before client data reaches an AI tool

For a law firm or other professional services business, the safest answer is to treat every AI tool as a data processor or data recipient until the contract proves otherwise. Marketing copy, product FAQs and console settings are helpful, but they are not enough on their own. The written terms need to explain whether prompts, uploaded documents, chat history and generated outputs can be used to train or improve models.

The practical question is not whether a supplier says it is secure. It is whether your firm can show a clear control trail: what data leaves the firm, where it is processed, how long it is retained, who can review it, which subprocessors touch it, and what happens when you ask for deletion.

The safest answer in practice

Yes, you should require a contractual guarantee that client data will not be used to train the provider's models. If the supplier cannot give that commitment in binding terms, confidential client material should stay out of the tool unless you have a separately approved, anonymised workflow.

For legal services, the bar is higher than ordinary productivity use. Client confidentiality, privilege, data protection, SRA duties and matter quality review all point to the same operating rule: no sensitive client material should enter an AI system until the firm has checked the contract and recorded the decision.

Check your AI tool risk and efficiency controls

What the guarantee should cover

A useful contract should be specific. Look for language that says customer content, prompts, files, embeddings and outputs are not used to train foundation models or improve shared services. The wording should also cover temporary retention, abuse monitoring, support access, human review, backups and logs. A narrow promise about model training is helpful, but it does not answer every confidentiality risk.

The firm should also check whether the no-training commitment applies by default or only after an admin setting is changed. If the protection depends on an enterprise tier, a private workspace, a zero data retention option or a particular regional setting, that needs to be documented in the internal approval record.

How to turn the contract into a usable control

Start with a short intake checklist for each AI-enabled workflow. Record the supplier, intended use, data categories, retention period, subprocessors, transfer basis, audit evidence and reviewer owner. Then decide which uses are allowed, restricted or prohibited. For example, public research summaries may be allowed, anonymised precedent analysis may need review, and raw client bundles may be prohibited unless a stronger private deployment is in place.

Staff also need plain rules, not a long policy that nobody uses. Tell people which approved tools they may use, what data must be removed first, when a human must review the output, and where evidence of the check is stored.

Keep AI governance evidence current

What to do if the terms are unclear

If the contract is silent or vague, do not fill the gap with assumptions. Ask the supplier direct questions: is customer content used for training, can humans review prompts, what is the retention period, where is the data processed, who are the subprocessors, and can the firm get deletion or audit evidence? If the answers are still unclear, limit the tool to non-confidential data or stop the use case.

For higher-risk work, consider a private deployment, a legal-specific platform with stronger contractual terms, or an internal workflow that strips personal and client-identifying data before any AI processing. The right answer depends on matter sensitivity, user training, integration design and the quality review process around the output.

Conclusion

A no-training guarantee is a minimum control, not the whole governance model. The firm still needs retention limits, access controls, subprocessors, transfer checks, review steps and an audit trail showing why the tool was approved for that data. If those pieces are missing, keep client data out of the tool until the operating model is fixed.

Build a controlled AI implementation plan

Need a safer AI route for your firm?

If this article reflects a live decision in your practice, the useful next step is to map the workflows, confidentiality risks, supplier controls and governance gaps before tools spread informally.

Frequently asked questions

Direct follow-up answers written for searchers, buyers and internal decision makers.

Is a vendor FAQ enough evidence?

No. Use the contract, data processing terms, security documents and admin settings as the evidence base. A public FAQ can support the review, but it should not be the only control.

Can staff use public AI tools with anonymised information?

Sometimes, but anonymisation must be real and repeatable. Remove client names, matter facts, unique identifiers and commercially sensitive details, then require human review of the output.

What if an enterprise plan says it does not train on our data?

Check whether that protection is contractual, whether it applies to all features, and whether any settings must be enabled. Record the evidence and revisit it when the supplier changes terms.

Who should own the decision?

Ownership should sit with a named business and risk owner, supported by IT, data protection and matter-quality reviewers. The key is accountability, not a one-off tool sign-off.

Need help implementing this?

If this question points to a live process, policy or supplier decision, the next step is usually to turn the answer into a controlled plan. These services are the most relevant starting points.

Need More Specific Guidance?

Every organisation's situation is different. If you need help applying this guidance to a specific process, book a discovery call or take the assessment first.