It is easy to judge an AI tool by its demonstration and skip the terms. For a regulated firm, the contract is where the real questions are answered, and a short read before you sign saves trouble later.
Data and training
Find the clause that says whether your data trains the provider's models. For client data, the answer needs to be no. Find where the data is stored and whether a data processing agreement that meets the UK GDPR is in place.
Exit and ownership
Check what happens to your data if you leave, whether you can export it, and how long the provider keeps it after you go. A tool that holds your data hostage is a tool to avoid.
Liability and change
Read how the provider handles errors, downtime and changes to the service, and what it will and will not stand behind. Many AI contracts disclaim a great deal, and knowing what you are carrying yourself is part of the decision.
A few minutes with the contract tells you more about whether a tool belongs in a law firm than any demonstration will.
On the data side, the ICO's UK GDPR guidance explains what a processor contract has to contain.
If a contract is sitting in front of you and the demonstration was persuasive, have us read the terms before you sign. It is quicker than unwinding a bad agreement later: get in touch.