How do I ensure my statute and case law research with a legal research platform is compliant with confidentiality obligations?

To keep statute and case law research compliant with confidentiality obligations, focus on what you search, where you search, and what you enter into the platform.

Practical safeguards

• Use generic terms, not client-identifying facts
  • Search by legal issue, jurisdiction, statute, or doctrine.
  • Avoid names, matter numbers, unique facts, or internal strategy unless necessary.
• Minimize input
  • Only include the details needed to get useful results.
  • If the platform has a document upload or AI feature, redact sensitive portions first.
• Check the platform’s confidentiality terms
  • Review the vendor’s privacy policy, terms of use, and data retention settings.
  • Confirm whether your inputs are used to train models, retained, shared, or reviewed by humans.
• Use enterprise/privacy settings
  • Prefer business or enterprise plans that offer:
    • no-training on customer data
    • restricted retention
    • access controls
    • audit logs
    • encryption in transit/at rest
• Follow firm or employer policies
  • Some organizations prohibit entering certain categories of data into external tools.
  • Make sure the platform is approved before use.
• Apply privilege and confidentiality screening
  • Don’t paste attorney-client communications, work product, settlement strategy, or protected personal data unless the tool is authorized for that content.
• Use redaction where possible
  • Remove names, dates, locations, account numbers, and other identifiers if they are not essential.
• Limit sharing and export
  • Be cautious when saving search history, notes, annotations, or downloadable reports.
  • Store results only in approved systems.
• Consider jurisdiction-specific duties
  • Confidentiality and data-protection rules may vary by jurisdiction and practice area, especially for regulated data.
• Train users
  • Make sure everyone using the platform understands what can and cannot be entered.

A good rule of thumb

If you wouldn’t put it in a public search box or a third-party email, don’t paste it into the research platform unless it’s approved and protected.

Safer workflow

1. Define the legal issue in neutral terms.
2. Search statutes and cases using broad descriptors.
3. Read results and narrow incrementally.
4. Only add specific facts if absolutely necessary.
5. Redact before uploading any documents.
6. Verify the platform’s retention and confidentiality settings.

If you want, I can also give you a confidentiality checklist for legal research tools or help you evaluate a specific platform’s terms.