Defensibility Element 2 of 5. Per AI capability, the function articulates why this tool, why this configuration, why this control — in capability terms, not vendor names. Addresses Risk Taxonomy 2026 Class 3 (Model drift), Class 4 (Vendor lock-in), and Class 5 (Regulatory non-compliance).
Core idea
DE-2 requires that all AI-related decisions and artefacts are produced using named, versioned, externally-readable frameworks, not ad-hoc judgement. A reviewer must be able to see which framework, which version, and what inputs/outputs were used.
Module Library
GOV-01
Defensible AI Governance Framework
Establish the governance structure, policy suite, and risk register that make Legal AI defensible to boards and regulators.
VEN-01
Vendor Evaluation Operating Methodology
Operates the canonical pre-procurement vendor evaluation methodology, gating Legal AI tools through Pass/Fail controls and five-dimension weighted scoring against Risk Taxonomy 2026.
GOV-02
AI Use Policy
Define what AI use is permitted, prohibited, and supervised across the legal department — the operational policy that makes AI governance real.