The General Counsel AI Market Map

AI is changing the General Counsel role at three levels. First, legal departments are using AI to perform legal work, including research, drafting, contract review, matter intake, litigation support, legal operations and spend management. Second, AI is changing the economics of the legal function: work that once went to outside counsel can increasingly be handled in-house, while legal teams are being asked to show more clearly how they contribute to business speed, risk reduction and cost control. Third, the General Counsel is increasingly involved in governing AI used across the company — raising questions about authority, data access, contracts, privacy, agent permissions, human review, recordkeeping and accountability.

The Open Future Forum General Counsel AI Market Map organizes the market into two connected layers — Legal Department AI (Research → Contract → Intake → Litigate → Control Spend) and Enterprise AI Control (Comply → Govern Data → Govern AI). This is not a vendor ranking. It is a map of where AI is entering the legal function, how the economics of legal work are changing, and what General Counsel should require before AI is trusted with material work.

The map includes specialist legal AI products, established legal technology platforms with documented AI capabilities, and governance systems that help companies control AI used outside the legal department. A vendor may support several workflows, but it is placed where its strongest documented use case sits rather than counted repeatedly.

Five Findings

1. Legal AI is moving from assistance into workflow

The first generation of legal AI helped lawyers research, summarize and draft faster. The next generation is moving deeper into legal operations — triaging incoming matters, reviewing contracts against playbooks, preparing first drafts, extracting obligations, building chronologies, reviewing invoices, assembling regulatory research and routing work. The more important change is not faster drafting. It is that legal departments can redesign how work enters the team, what gets automated, what stays in-house and what still requires outside counsel.

2. Contracting remains one of the clearest in-house AI use cases

Contracts are high-volume, repetitive and governed by recognizable standards, which makes them well suited to supervised AI: clause identification, playbook comparison, redlining, risk flagging, intake, drafting, obligation extraction and post-signature review. The main buying decision is whether the legal department needs better legal review or better contract lifecycle management. Those are related problems, but they are not the same.

3. AI is starting to reset the economics of outside counsel

Routine legal work is becoming easier to perform internally with AI support. That does not make outside counsel less important in every area — it changes which work justifies outside-counsel rates. Work most exposed to insourcing includes routine research, first drafts, standard contracts, document review, matter summaries and basic regulatory monitoring. Outside counsel remains particularly important for novel legal questions, high-stakes disputes, board matters, crisis response, regulatory investigations and specialist judgment.

4. The GC is becoming one of the control points for enterprise AI

The legal department’s AI exposure extends far beyond legal software. Sales, HR, finance, customer service and engineering teams can now deploy AI systems that access company data, communicate externally or take actions inside enterprise systems. The General Counsel increasingly needs visibility into who approved the use case, what the system can access, which vendor terms apply, what data can leave the company, which actions the system can take, which decisions require human review, which records are retained and what happens if the system fails.

5. Legal AI should be judged by defensibility, not fluency

A legal AI system can produce a persuasive answer and still be wrong. The relevant questions are: what source supports the answer, which version of the law or policy was used, what data entered the system, who had access, what did a human review, and can the decision later be reconstructed? The issue is not whether AI can produce an answer. It is whether the legal department can defend how that answer was reached.

The OFF Legal AI Value Test

Legal AI creates value through five mechanisms, and they should remain separate.

Capacity

Can the same team handle more work?

Cost

Does the legal function reduce actual internal or external cash cost?

Quality

Does the workflow improve accuracy, consistency, completeness or adherence to legal standards and playbooks?

Risk

Does the system reduce legal, compliance or control exposure?

Business Speed

Does the business receive usable legal answers, contracts or approvals faster?

A lawyer saving five hours is a capacity gain. If that prevents a hire, it may create avoided cost. If work moves from a law firm to the internal team, it may create a cash saving. Those are different economic outcomes and should not be collapsed into one.

The OFF GC AI Control Test

For material AI systems, Open Future Forum proposes five control questions.

Authority

Who approved the system and the use case? Who owns the underlying business decision?

Access

Which data, credentials, tools and systems can the AI reach?

Evidence

Can material outputs and actions be reconstructed?

Accountability

Which human remains responsible for review and escalation?

Defensibility

Could the company explain the deployment and resulting decision to a regulator, court, board, customer or counterparty?

Practical AI Control Record

The Control Test asks whether the system is governed adequately. The Control Record is the evidence the company should be able to reconstruct. For each material production AI system, the company should be able to identify:

Owner → Purpose → Vendor → Model → Contract → Identity → Data → Permissions → Human Review → Logs → Incident History

This does not need to live in one software product. It does need to be recoverable.

The General Counsel AI Market Map

The map groups vendors into eight workflows across two bands. This is not a ranking, and inclusion does not imply endorsement. Intake, Comply and Govern AI are read here through their capabilities rather than a named vendor table in this edition — see the Vendor Evidence Standard for how a fuller vendor review would extend this map.

1. Research

Legal research, case analysis, regulatory research, drafting, document analysis, internal precedent search and legal knowledge retrieval.

What are the best AI tools for legal research?

The strongest legal research products combine AI with authoritative legal content, source verification and legal-specific workflows. General Counsel should evaluate source authority, citation accuracy, jurisdictional coverage, internal knowledge access, verification speed and data handling. The best product is not necessarily the one that produces the most polished answer — it is the one lawyers can verify efficiently.

Primary value: Capacity · Quality · Business Speed

2. Contract

Contract review, drafting and lifecycle management.

What are the best AI tools for contract review?

There are two main product types. Specialist contract-review products focus on legal analysis, playbooks and redlining. CLM platforms with AI address a broader process that includes intake, approvals, execution and post-signature management. The GC should first identify whether the bottleneck is lawyer review or the wider contract process.

Primary value: Business Speed · Capacity · Cost

3. Intake

Matter intake, triage and workflow.

Legal work often arrives through email, Slack, Teams, forms, meetings and informal requests. AI intake can classify requests, retrieve policies, answer routine questions, identify risk, route matters, assign lawyers and generate initial responses.

How can AI improve legal intake?

AI intake should route routine work efficiently while escalating higher-risk matters to the right lawyer. A good system should reduce both business waiting time and legal-team interruption.

Primary value: Capacity · Business Speed

4. Litigate

Litigation, investigations and e-discovery.

What should General Counsel look for in litigation AI?

Litigation systems need reproducibility, audit trails, source linkage, privilege protection, preservation, review protocols and human validation. AI can reduce manual work without changing the legal team’s responsibility for the process.

Primary value: Cost · Capacity · Quality

5. Control Spend

Outside counsel, legal spend and sourcing.

AI can improve invoice review, billing-rule enforcement, matter budgeting, firm selection, pricing analysis, spend forecasting and outside-counsel benchmarking. The larger issue is economic: AI is changing which work companies need to buy from law firms at all.

6. Comply

Compliance and regulatory workflows.

AI can support regulatory monitoring, policy analysis, compliance research, investigations, control evidence, internal reporting and risk classification.

How can AI help corporate compliance?

AI is well suited to monitoring large volumes of changing information and identifying potentially relevant issues. Higher-impact workflows need more control, especially where AI contributes to decisions affecting employees, customers, regulatory filings, financial outcomes or legal rights.

Primary value: Risk · Quality · Capacity

7. Govern Data

Privacy, data governance and information risk.

GCs increasingly need to know what information entered a system, whether its use was authorized, whether the vendor can retain it or use it for model training, where it is processed, which subprocessors receive it, whether personal data can be deleted, and which employees or agents can access it.

Can privileged information be put into legal AI?

Potentially, but privilege and confidentiality implications depend on the product, jurisdiction, contractual terms, security architecture and the circumstances of use. Legal teams should evaluate retention, training rights, access controls, subprocessors, logging and security before uploading privileged material. The fact that software is marketed to lawyers does not by itself resolve privilege or confidentiality questions.

Primary value: Risk · Quality

8. Govern AI

Enterprise AI governance: AI inventories, risk classification, vendor review, agent permissions, human-review requirements, AI policies, model records, incident management and regulatory evidence.

What is the General Counsel’s role in AI governance?

Legal does not need to own every technical control. It should help determine which uses are permitted, which require escalation, which contract terms are required, which records should be retained, who remains accountable and what evidence would be needed in a dispute. The GC’s role is to help make AI deployment legally defensible.

The AI Outside Counsel Reset

Which legal work is most exposed to insourcing?

Should law firms pass AI productivity gains to clients?

If AI materially reduces the work required, GCs should understand how that affects pricing. That may mean fixed fees, portfolio pricing, reduced associate leverage, outcome-based pricing or different staffing models.

Should law firms disclose AI use?

For material matters, clients should understand whether AI is being used, which systems are involved, how confidential data is handled, whether third-party models receive client information, and how AI output is reviewed.

How should GCs evaluate AI-enabled law firms?

Ask what work AI is performing, which models are used, how output is reviewed, how client data is protected, and whether AI changes staffing or pricing.

Legal AI and Enterprise AI Governance Are Different Markets

Legal AI

AI used by legal teams to perform legal work: research, drafting, contracts, litigation, matter management and spend control.

Enterprise AI Governance

AI used elsewhere in the company that legal must help govern: HR agents, finance agents, sales agents, customer-service agents, coding agents, marketing systems and automated decision systems.

A legal department can buy excellent legal AI and still have significant enterprise AI exposure.

Shadow AI

Shadow AI is AI use that never reaches legal, IT or procurement — personal AI accounts, browser tools, consumer chatbots, AI meeting tools, unsanctioned agents and free file-analysis services. Potential exposure includes confidential information, personal data, trade secrets, privilege, customer data, intellectual property, record retention and unreviewed vendor terms.

What should General Counsel do about shadow AI?

The objective should be to make AI use visible and governable: providing approved alternatives, defining prohibited data, identifying high-risk uses, training employees, monitoring material usage where appropriate, and creating an escalation process.

AI Use-Case Risk Tiers

The following is an operational starting point, not a legal conclusion. Classification may differ by jurisdiction, sector, data type and decision impact.

The purpose is to match controls to consequence.

AI Agents Change the Legal Question

Traditional software generally waits for instructions. AI agents can act. An agent may have credentials, system access, data access, communication authority, spending authority, permission to change records, or permission to trigger other systems. The question becomes: who authorized the agent to act, and within what limits?

GC + CISO + CIO: Who Owns What?

No single executive can effectively own all enterprise AI risk. Explicit ownership matters before a material deployment reaches production.

What Should the Board Expect the General Counsel to Know About AI?

The board does not need the GC to explain model architecture. It should expect the GC to understand where AI creates material legal or governance exposure: which material AI systems are in production, which high-risk use cases have been approved, which major AI vendors the company depends on, which data those systems can access, which agents can take external or financial actions, which incidents have occurred, whether critical AI decisions can be reconstructed, and whether accountability is clear.

General Counsel AI Market Maturity

Based on the vendor set reviewed for this edition.

More developed

Legal research, contract review, e-discovery and litigation support.

Scaling

Legal intake, spend management, legal workflow automation, internal legal knowledge.

Emerging

Agent governance, enterprise AI control, AI decision records, cross-system legal orchestration.

These are observations from the reviewed vendor set, not claims that products do not exist elsewhere.

GC AI Maturity Model

Stage 1: Assist

Lawyers use approved AI for research, drafting and summarization.

Stage 2: Automate

Repeatable workflows such as contract review, intake and invoice analysis become partially automated.

Stage 3: Orchestrate

AI works across legal systems, internal knowledge, matters and approvals.

Stage 4: Insource

The legal department uses technology to perform more work internally and reassesses what requires outside counsel.

Stage 5: Govern

Legal participates in enterprise-wide governance of material AI deployments, agents, data and accountability. The goal is not for legal to own every AI decision. It is to ensure material AI deployment is visible, controlled and defensible.

What Should a General Counsel Buy First?

Start with a workflow that has high volume, repetition, clear standards, a measurable baseline, human review, and limited downside from a correctable first-pass error. For many teams, that means contract review, legal research, intake, document summarization or invoice review. Start where value and control are easiest to prove.

Questions to Ask a Legal AI Vendor

Contract Terms and Clauses to Negotiate

General Counsel should review customer-data ownership, training rights, input and output use, confidentiality, privilege, data retention, deletion, subprocessors, security, model providers, IP ownership, indemnification, liability limitations, regulatory cooperation, audit rights, incident notification, termination, model changes and data return. The level of protection should reflect the system’s access, authority and business impact — a low-risk internal productivity tool should not receive the same legal treatment as an autonomous system with access to customer or financial records.

What Should an AI Acceptable-Use Policy Cover?

A practical policy should address approved tools, prohibited data, high-risk uses, human-review requirements, customer and personal information, privileged material, external communications, agent permissions, procurement requirements, escalation and incident reporting. Policies should be usable by employees, not written only for lawyers.

How Should General Counsel Respond to an AI Incident?

For a material incident, legal should work with security, technology and the relevant business owner to determine what happened, which system was involved, what data was affected, which actions were taken, whether the activity can be reconstructed, which contracts apply, whether notification obligations exist, whether the system should be suspended, and what remediation is required. The company should preserve evidence early.

How Should a GC Measure Legal AI ROI?

Do not reduce ROI to hours saved. Measure turnaround time, matters handled per lawyer, contract-review time, business response time, work brought in-house, outside legal spend, capacity, error rates, escalation rates, avoided hiring, full technology cost and business delays avoided. Then classify the benefit: capacity is not automatically cash savings, avoided hiring is not the same as reduced payroll, and faster contracts can create real business value even if legal headcount remains unchanged.

Will AI reduce in-house legal headcount?

AI is likely to reduce repetitive work per matter. That does not necessarily mean broad legal-team headcount reduction. The near-term effect may instead be that existing legal teams can handle more work, bring more routine work in-house, respond faster, reduce dependence on outside counsel, spend more time on strategic advice, and take on enterprise AI governance.

What General Counsel Should Not Do With AI

• Do not treat a fluent answer as a verified answer.
• Do not put sensitive information into uncontrolled systems.
• Do not approve an agent without understanding its permissions.
• Do not assume standard SaaS terms address AI-specific issues.
• Do not automate a high-impact decision without naming the accountable human.
• Do not count saved lawyer time automatically as cash savings.
• Do not treat AI governance as a legal-only problem.
• Do not buy technology before defining the workflow it is meant to improve.

General Counsel AI: Key Questions Answered

What are the best AI tools for General Counsel?

It depends on the workflow. Research, contracts, litigation, legal operations and enterprise AI governance are separate markets.

How are in-house legal teams using AI?

For research, drafting, contract review, intake, document analysis, litigation support and legal operations.

What are the best AI tools for contract review?

Specialist review systems and broader AI-enabled CLM platforms solve different parts of the contract process.

Can AI reduce outside counsel costs?

Yes, particularly when research, drafting, document review and routine contracts can move in-house.

Which legal work is most likely to move in-house?

Routine research, first drafts, document review, standard contracts and recurring regulatory work.

Should law firms disclose AI use?

GCs should understand material AI use where it affects client data, staffing, review or pricing.

Can privileged information be put into legal AI?

Potentially, but only after evaluating product-specific legal, security, retention and access issues.

Should employees be allowed to use general AI tools?

Companies should define approved tools, prohibited data and higher-risk uses rather than rely only on employee discretion.

What is shadow AI?

AI used without approved controls, potentially exposing confidential, personal, privileged or proprietary information.

How should GCs govern AI agents?

Define authority, identity, data access, permissions, human review, logging and incident escalation.

Who is responsible when an AI agent makes a mistake?

The company still needs an accountable human and business owner.

What records should companies keep about AI?

For material systems, records should connect owner, purpose, vendor, model, contract, identity, data, permissions, review, logs and incidents.

How should legal AI ROI be measured?

Through capacity, cost, quality, risk and business speed.

Will AI replace in-house lawyers?

It is more likely first to remove repetitive work and change the mix of internal and external legal work.

Who should own enterprise AI governance?

Legal, security, technology, privacy and business owners should share responsibility according to their functions.

What should the board expect the GC to know about AI?

Where material AI risk exists, who owns it, what systems can do and whether important decisions can be defended.

---

What OFF’s Existing Research Adds

This market map is the supply-side view. Open Future Forum’s existing General Counsel AI Report examines a different question: what evidence and records counsel may need when production AI is involved in contracts, attribution, disputes, incidents and governance. That distinction should remain explicit.

The market map shows which products and workflows are developing. The GC research examines what records and controls counsel may need. The OFF Legal AI Value Test asks whether the system improves capacity, cost, quality, risk or business speed. The OFF GC AI Control Test asks whether the deployment is authorized, controlled, evidenced, accountable and defensible.

Methodology and Disclosure

Vendor Evidence Standard

A fuller market map should be backed by a master evidence table recording, for every vendor: current company name, exact product name, primary workflow, specific documented AI capability, buyer (GC, legal ops, contracts, litigation, compliance, privacy), vendor type (AI-native, established platform with AI, or governance/infrastructure), evidence status (documented, publicly demonstrated, announced, or limited public evidence), official source and date checked. This edition names representative vendors by category; the full per-vendor evidence table is pending a future data pass, and no vendor here should be read as scored, ranked or formally endorsed in the meantime.

AI-native classification

For this report, AI-native means AI is foundational to the product’s primary workflow rather than a feature added to an established platform. This is an editorial classification and may change as products evolve.

Vendor Inclusion Note

Vendor inclusion is editorial. The map is based on public information. No vendor paid for placement. Categorization is not an endorsement. The map does not score, rank, or evaluate vendor quality. During source review, no vendor in the map was identified as an IA Seed Ventures portfolio company or as a Murray Newlands advisory client.

About Open Future Forum

Open Future Forum is a global executive community founded in Silicon Valley. Its network reaches tens of thousands of executives and investors worldwide. It runs a year-round calendar of events for senior executives and investors, including CEOs, CFOs, CMOs, CISOs, General Counsel, private equity leaders, founders, and AI leaders, through Forum Select, its invite-only private gatherings, and Forum Events, its open panels and gatherings. Beyond events, Open Future Forum convenes peer groups and executive boards and publishes original research built on first-party survey and qualitative data from its executive network. The General Counsel AI Market Map is a companion to the General Counsel AI Report, alongside the CFO, CMO, CISO and Private Equity AI Market Maps and the wider Enterprise AI Buying & Budget Index.

External vendor descriptions reflect public product positioning reviewed during source research. They are not affiliated with this report and do not endorse it.