Privilege safeguards for AI time tracking
Privilege and confidentiality are a checklist with owners, not a sentence in a sales deck. Before firmwide capture hardens, general counsel and the partnership should be able to say where Capture lives, what Create sends for processing, who can see a draft, and what has to happen before an entry reaches Clio. Then they sign continue, or they reopen.
LegalTime AI is built for privacy-conscious firms on Clio, ideally about 10 to 30 lawyers, comfortable up to about 50, with headcount up to about 100. It sits beside the practice system. Capture is local-first on the attorney device by default. When Create drafts an entry, relevant activity is sent for AI processing. Drafts stay with the attorney until release. The attorney approves before release. Pause exists. This is not a monitoring tool, and it is not a surveillance product. A SOC 2 Type II examination is in progress. LegalTime AI is not SOC 2 certified. Pricing is quote-only. A directory note sometimes cites about $125 per seat per month. Get a firm quote. A savings figure does not force continue.
This list is the privilege controls. The week after cutover is a different check. The security questionnaire is the vendor response packet. A failed safeguard reopens the exceptions brief, the control-failure playbook, or the security questionnaire.
The safeguards
| Safeguard | Question | It holds when | Owner |
|---|---|---|---|
| Scope | Is privilege and confidentiality scope written for the attorneys in this rollout? | Named practice areas. Not "everyone, somehow" | Partner, with counsel or operations |
| Capture | Is Capture local-first on the attorney device by default? | Local-first. Timers optional. Install logged | Capture owner and IT |
| Pause | Can an attorney pause and resume without IT when the work should not be captured? | Logged once per in-scope attorney | Capture owner |
| Create | Can attorneys restate Create processing without surprise? | When Create runs, relevant activity is sent for AI processing | Create owner and counsel |
| Subprocessors | Are the AI subprocessors named and reviewable? | The subprocessors page is open, with a dated review note | Counsel and IT |
| Drafts | Do drafts stay with the attorney until release? | No default raw-activity feed for partners | Create owner |
| Approval | Is approval on? | Unsupervised posting stays off | Create and Connect |
| Clio | Do approved releases land on the intended matter? | Beside Clio Manage. A sample is correct. Wrong matters do not receive the send | Connect owner |
| Not monitoring | Is the tool explicitly not surveillance? | Partners sample released narratives only. See the quality sampling brief. No raw feed | Partner and counsel |
| The memo | Continue, or reopen? | Partner or counsel signs continue, or a dated reopen with an owner | Partner, counsel, and operations |
Keep these open while you walk the list: security, subprocessors, the FAQ, pricing, the Clio integration, about, passive time tracking, and the home page.
In the kickoff, say the SOC 2 sentence exactly: examination in progress, not certified.
What counsel should see in writing
| Control | Holds when | Reopen when |
|---|---|---|
| Capture local-first | The default held on in-scope devices | A move off that default, with no memo |
| Create processing | Attorneys can restate it | The packet skips the processing step |
| Subprocessors | A dated review of the subprocessors page | "We trust the AI," with no page |
| Attorney-only drafts | Held | A partner raw-activity feed by default |
| Approval | On | Unsupervised posting enabled |
| Clio matter | Sampled releases are correct | Wrong-matter releases harden |
| Not monitoring | Explicit | A surveillance dashboard justified as "privilege" |
| SOC 2 honesty | Examination in progress, not certified | A certified claim |
| Pricing honesty | Quote-only | A fabricated savings number used to force continue |
| Named owners | Capture, Create, Connect, counsel, and a partner | "Someone will safeguard it" |
| The memo | Written continue or reopen | The checklist ends because the meeting ended |
The same holds on other tools
| Product | What it does | What counsel should confirm |
|---|---|---|
| LegalTime AI | Local-first Capture, Create with processing stated, Connect after approval, beside Clio. | Security, subprocessors, FAQ, pricing, Clio, about, passive time tracking, and the home page |
| Ajax | Screen and content capture, with drafts for release. Security page states SOC 2 Type II certified. | Capture model, Clio depth, and how privilege is packaged, on a demo |
| PointOne | Passive capture across email, documents, calls, and meetings. Custom pricing. | A Clio-only day, processing honesty, and midsize support |
| Laurel | Enterprise time intelligence. | Whether a midsize firm is in the packaging |
| Billables AI | Workflow and API-style capture, with attorney review. Published mid-market tiers. | Live capture, processing, and the review gate, on a demo |
| Clio Manage AI | Suggestions from activity already inside Clio. | Many firms still add a capture layer with its own privilege controls. Confirm terms with Clio |
| MagicTime, Memtime, WiseTime, Timing, Chrometa, Timely | Timelines or light passive capture. | Score the same privilege holds |
| BigHand, Intapp, TimeSolv, Smokeball, MyCase | Passive capture or practice-system time tools. | Confirm the Clio send path, privacy, and governance before continue |
How the product supports the list
- Capture is passive local activity, local-first on the attorney device by default. Pause when the work should not be captured. See passive time tracking and security.
- Create is an attorney-only draft. When Create runs, relevant activity is sent for AI processing. See the FAQ and subprocessors.
- Connect is approval, then release into Clio Manage. See the Clio integration.
That is a written set: local-first default, processing stated, drafts with the attorney, approval, and a continue memo. It is not a monitoring program.
Names to keep straight
LegalTime AI (legaltime.ai) is timekeeping beside your practice system. "Legaltime" in directories can mean an unrelated practice-management product, sometimes listed near $24 a month. See about.
Sources
Related
- The week after cutover
- Security questionnaire
- When a control fails
- Quality sampling
- Exceptions
- Privacy-first timekeeping
Walk the list, then have counsel or a partner write continue or reopen. Start a 30-day free trial or book a 15-minute demo.
Frequently asked questions
What should counsel check before firmwide capture?
Where do we read the subprocessors?
Is this a monitoring tool if we use it to protect privilege?
What if a safeguard fails?
What do we say about SOC 2, price, and the product name?
Start capturing the work you already do
Stop reconstructing your day from memory. Let capture run. Review in minutes. Release only what should bill.
Capture → Create → Connect. Not a monitoring tool.