G
GAAS LAWDefence. Strategy. Outcomes.
Request Demo
TL.03Trust Layer · AI Use Policy

AI assists. Humans decide.

Every AI output on the GAAS LAW platform is a suggestion. Nothing reaches an insurer, a client, a court, or a counterparty without a qualified human signature. This page is the single source of truth for how AI behaves inside the Platform.

Principle — The 70/30 Rule

The Platform’s AI automates up to 70% of operational workload — classification, completeness checks, draft outputs, flag detection. The remaining 30% — and every 100% of legal judgement, client communication, and financial commitment — is human-controlled.
§ 01

Scope of AI

AI inside the Platform is used for three bounded purposes:

  • Classification. Categorising operational events (billing events, evidence items, medical findings) into structured types with confidence scores.
  • Extraction. Pulling structured fields from unstructured source documents (medical reports, disclosure, correspondence).
  • Suggestion. Proposing draft outputs (time entries, liability positions, settlement ranges) for human review and approval.

AI is not used for: autonomous decision-making, external communication, financial commitments, or any action that would bind the firm or insurer.

§ 02

What AI cannot do

AI inside the Platform is architecturally incapable of the following actions:

  • Send communications to clients, counterparties, experts, courts, or insurers.
  • Finalise, sign, or dispatch invoices, settlement offers, or pleadings.
  • Move matter status forward past an approval gate without a human approver.
  • Change rates, reserves, authority levels, or billing terms.
  • Access data outside the tenancy in which it is operating.
  • Overwrite or delete audit logs, approvals, or signed-off outputs.

Notice — Architectural, not policy

These restrictions are enforced in the Platform architecture, not by policy alone. There is no code path, endpoint, or configuration that permits an AI actor to perform the above actions. Every state transition is logged with actor_type — and actor_type = ‘ai’ cannot enter a finalising state.
§ 03

Human approval is required

Every AI-suggested action flows through a defined approval chain before it has effect:

Billing eventsFee earner approves classification and time before it enters the invoice stream
InvoicesFour stages: fee earner → supervisor → partner → finance
Medical positionsAI drafts; qualified legal professional approves
Causation analysisAI presents CLB / LCB / Moore in parallel; partner selects position
PaymentsRecorded by a human; no AI involvement
External communicationAlways human-authored; AI never sends
§ 04

Explainability

Every AI output is accompanied by: (a) a confidence score between 0 and 1; (b) the top contributing factors to the suggestion; (c) the source records consulted; and (d) the model version and timestamp. Suggestions below a configurable confidence threshold are automatically routed for expanded human review.

§ 05

Training data

  • Customer Matter Data is not used to train third-party foundation models.
  • Where model fine-tuning is performed, it uses aggregated, anonymised signals only and remains within the UK / EU perimeter.
  • Customer tenants are isolated at the model-inference level. No prompt or output from one tenant is visible to another.
§ 06

User override

Users may override, reject, or edit any AI suggestion at any time. Every override is captured in the audit trail with a reason and timestamp. The Platform does not reward AI concurrence or penalise human disagreement — both are equally valid outcomes.

§ 07

Monitoring

Model performance (accuracy, calibration, drift) is monitored continuously. Material changes in model behaviour trigger review by the Compliance Office before customer rollout. No silent model swap occurs; every model version change is logged and notifiable.

Principle — Summary

AI inside GAAS LAW is a structured co-pilot, not a decision-maker. The Platform exists to give humans better information, not to replace their judgement. That is the product, not a restriction on the product.

Questions or Requests

Contact the GAAS LAW Compliance Office at compliance@gaaslaw.com.

Data Subject Requests

Submit a GDPR request to privacy@gaaslaw.com. Responses within 30 days.