Your lawyers already use ChatGPT. Client data shouldn't go with it.
Shadow Shield sits in each lawyer's browser and strips client identifiers out of prompts before they reach consumer AI tools. Your firm gets a record of what was caught, and nobody's prompt text is ever stored.
Rolled out through your firm's existing Chrome management. No change to how staff work.
Summarise the settlement terms for matter M-2291-044. The claimant's SSN is 412-55-0193 and opposing counsel is r.hale@hale-partners.com.
Summarise the settlement terms for matter [REDACTED:CUSTOM_MATTER]. The claimant's SSN is [REDACTED:SSN] and opposing counsel is [REDACTED:EMAIL].
Shadow AI is already inside your firm
Banning AI tools rarely stops their use. It moves the use to personal accounts, where the firm can't see it and the vendor's consumer terms apply.
Confidentiality duties still apply
ABA Formal Opinion 512 (July 2024) reminds lawyers that the duty of confidentiality under Model Rule 1.6 covers what they put into generative AI tools.
Consumer plans are not enterprise plans
Free and personal AI plans often allow the vendor to keep prompts or use them for training. Your enterprise agreement doesn't cover a lawyer's personal account.
No record means no answer
When a client or insurer asks how you control AI use, "we have a policy" is weaker than a dated record of what was stopped.
Three steps, one afternoon for IT
IT rolls it out
Your administrator pushes the Shadow Shield browser extension through Chrome's managed policy. Each browser enrolls itself with your firm.
Staff work as usual
When someone sends a prompt to a supported AI tool, protected details are swapped for placeholders on their own machine, before anything leaves it.
Partners see the record
The control center shows which tools are in use, how risky each vendor's consumer terms are, and every redaction by date and kind of data.
Standard identifiers, plus your own matter numbers
| Kind of data | Replaced with |
|---|---|
| Social Security numbers | [REDACTED:SSN] |
| Payment card numbers | [REDACTED:CREDIT_CARD] |
| Email addresses | [REDACTED:EMAIL] |
| Phone numbers | [REDACTED:PHONE] |
| Client matter codes | [REDACTED:CUSTOM_MATTER] |
Tell it how your firm numbers matters
Add your matter format once, and every browser in the firm starts catching it. Use # for any digit, or add whole words such as a client's name.
Built so we never hold your clients' secrets
A tool that guards confidential data shouldn't collect it. These are fixed parts of how Shadow Shield is built, not settings.
Prompt text stays on the device
Redaction runs in the browser. The control center receives only the kind of data found, the site, and the time.
Staff appear by code
Reports show each person as a keyed code. An administrator can look someone up by email when there's a reason to.
Stops on errors
If Shield hits an error while checking a prompt, it holds the prompt instead of sending it. If an AI tool changes its page, Shield may miss prompts there until we update it.
A dated audit trail
Every redaction is logged with a UTC timestamp, ready for a client questionnaire or an insurer.
The AI tools your staff actually use
Each tool is rated from its vendor's own published terms for free and personal plans.
Priced per user, billed annually
Pro
For solo lawyers and small firms. Install the extension and protected details are removed before a prompt leaves the browser.
- Shadow Shield browser extension
- Basic redactions: Social Security, card, email and phone numbers
- All supported AI tools
Enterprise
For mid-market firms that need central control. Everything in Pro, managed by your IT team from one place.
- Centralized admin dashboard
- Custom entity rules, such as your matter numbers and client names
- SSO and Active Directory integration (coming soon)
Prices in US dollars, before applicable taxes. Want to try it first? Ask about a 30-day pilot for $500, credited to your first year.
See what your firm is sending to AI tools this week.
A 2-minute video shows a prompt being redacted before it reaches ChatGPT, and how the catch appears in your audit log.
Watch a video demo on Loom