Home → Intelligence → Themes → Regulation
Intelligence Theme
Regulation & Compliance
EU AI Act, GPAI obligations, NIST AI RMF, ISO 42001, state AI legislation, professional conduct rules. The regulatory perimeter inside which legal AI operates.
Articles in this theme
3 articles
Executive Brief
Pillar 4 — Governance, Risk & Defensible AI
Pillar 4 is where Defensibility is operationalised. It pairs the Risk Taxonomy 2026 (the inventory of what can go wrong) with the Five Defensibility Elements (the operating controls), produces the Defensibility Posture Statement (the one-page institutional artefact), and runs the Evidence Register (the underlying documentation cache). Pillar 4 is the pillar regulators, insurers, acquirers, and professional conduct bodies query directly.
22 May 2026
12 min read
P4
Anchor Essay
Risk Taxonomy 2026 — The Nine Classes of Legal AI Risk
Risk Taxonomy 2026 names the nine canonical classes of legal AI risk: hallucination, data leakage, model drift, vendor lock-in, regulatory non-compliance, professional conduct exposure, client confidentiality breach, shadow AI proliferation, and accountability dilution. Each class carries a distinct mechanism, distinct evidence requirements, and a distinct mitigation pattern that legal functions must operationalise individually. The Taxonomy is the inventory side of the Defensibility framework: where Defensibility describes the response capability a legal function must demonstrate, the Taxonomy describes what must be responded to. Risk Registers maintained by legal functions should map each entry to one of the nine classes. Vendor evaluations should be scored against the classes. Incident reviews should classify root cause against the framework. The Taxonomy is binding canon for institutional legal AI risk management.
22 May 2026
P4
Anchor Essay
Defensibility — The Operating Standard for Legal AI
Defensibility is the operating standard for AI use in legal functions. It is the practical answer to one question: when a regulator, plaintiff, board member, client, or professional conduct body challenges an AI-influenced decision, can the legal function produce, within twenty-four hours, the contemporaneous evidence, the methodology, the governance trail, and the named accountability chain that the decision rests on? Five elements constitute Defensibility: decision traceability, methodology transparency, evidence framework, governance posture, and continuous learning. Defensibility is the legal-specific lens that translates ISO/IEC 42001 management-system requirements and EU AI Act high-risk obligations into the daily operating cadence of a legal department. The Defensibility Posture Statement is the one-page artefact that captures the function's posture, signed by the General Counsel, and producible within twenty-four hours of any external request that could plausibly result in adversarial scrutiny.
22 May 2026
P4