Your Legal AI Should Inherit Your Matter Permissions

Legal AI security should be an operating condition

A firm should not have to rebuild its security model every time legal work moves into AI.

Matter permissions are the access rules that determine which people at a firm can open a particular matter and view the information associated with it. Firms establish those rules as part of managing the matter, keeping confidential work available to the assigned team without making it visible across the entire firm.

When Clio Work is used with Clio Manage, a user can work only with matters they are already permitted to access. If the firm changes access to the matter, that change carries into Clio Work. The firm does not have to reproduce the same decision in a separate AI permission system.

A lawyer working through an urgent client issue should not have to reconstruct the matter in a separate AI workspace, decide which materials should be copied from Clio Manage, or confirm whether that workspace reflects the same access rules as the matter. For information already held in Clio, the secure path should also be the simplest path.

With Clio Manage, Clio Work can work from relevant documents, communications, notes, deadlines, tasks, and other matter information already available to the user. That reduces repeated uploading and re-explaining because the relevant context is already available within the matter.

It also makes the security model easier to follow. Every additional copy, repository, and permission system creates another place where access can drift. Keeping the context and its access rules attached to the matter makes that drift less likely.

Lawyers can focus on the legal question in front of them, knowing that access remains tied to the matter they are working from.

Secure context makes AI more useful

Matter context improves the work only when it reaches the AI within the right access boundaries.

Clio Work can also be used on its own. In that experience, it starts with the documents and context the user provides. The experience described here applies when Clio Work is used with Clio Manage, where relevant matter information is already available to the requesting user.

Using that matter context, Clio Work can analyze documents, surface facts and risks, research legal issues with cited authority, and generate drafts or summaries without requiring the user to rebuild the matter in a blank workspace.

The lawyer spends less time finding, transferring, and re-explaining information. They can spend more time reviewing the result, applying professional judgment, and moving the matter forward.

This same architecture extends into drafting. Client details, case activity, prior correspondence, legal research, drafts, and final documents can remain with the matter instead of becoming separate files that must be downloaded, renamed, transferred, and filed again.

Security and usefulness come from the same foundation. The AI receives richer context for the work an authorized user needs to perform, while remaining within the boundaries that determine what that user is entitled to access.

Protection throughout the AI workflow

Matter permissions determine which information a person can access. Firms also need confidence in what happens to that information when AI is used.

With Clio Work, the path from the matter to the AI model and back is managed through Clio. The firm’s data of record remains in the Clio platform. When a lawyer makes a request, Clio retrieves the relevant information from a matter they are authorized to access and sends only what is needed to complete that request.

The information is processed temporarily by the AI provider and then returned to Clio. Under Clio’s zero-data-retention terms, the provider does not retain that information after completing the request and does not use it to train its models. Customer data is encrypted in transit and at rest, and each firm’s information remains separated through access controls and tenant isolation. For firms handling electronic protected health information, Clio supports HIPAA obligations by storing and processing ePHI according to the HIPAA Security Rule. Firms can review Clio’s security and compliance documentation in the Clio Trust Center.

The result returns to the lawyer who made the request. It is not permanently saved unless they choose to save it, and the lawyer remains responsible for reviewing the work and deciding what is used or shared. Actions that leave Clio or affect a client or matter require human confirmation.

For firms, this creates a workflow they can understand and govern from end to end. Access begins with the permissions already attached to the matter. Information is processed only for the task at hand. The provider does not retain it. The result comes back to the authorized lawyer, who remains in control of what happens next.

The value comes from firms being able to understand and govern the complete path without piecing together separate repositories, permission models, and AI environments.

Legal AI governance in one connected system

As firms adopt more technology, governance can become fragmented.

An ethical-wall integration can link two permission systems. It does not remove the need to keep those systems aligned. The firm still has to connect user identities, map matters and documents, maintain access rules, monitor activity across both environments, and make sure changes in the practice management system are reflected in the AI platform.

Clio Work is designed differently. When it’s used with Clio Manage, the matter, its context, and the rules governing access begin in the same system. Firms do not have to recreate those relationships in a separate AI environment or continually verify that users, documents, and permission changes match across both systems. Elsewhere across Clio’s legal AI platform, intake, communications, accounting, matter management, and legal work can contribute to a more complete client record. The matter-level access described here continues to come from Clio Manage.

Administrators continue managing matter access in Clio Manage. Lawyers using Clio Work with that matter work within the same boundaries. The context and the rules governing who can see it stay together.

This will become increasingly important as AI takes on longer and more sophisticated sequences of work. The more capable AI becomes, the more important it is to establish what the AI can access, which matter it is acting on, who authorized the work, and who remains accountable for the result.

A platform built around the same client and matter context provides a consistent foundation as those capabilities evolve. It also gives lawyers a consistent experience: open the matter, ask the question, review the result, save what is valuable, and move the work forward.

Support for responsible AI use

Firms need to know that adopting AI will not weaken the professional standards their clients depend on. Confidentiality, appropriate access, human judgment, and clear accountability all remain essential as AI becomes part of legal work.

Clio is designed around those responsibilities. Access controls help keep matter information available to the right people. Transparent data practices make it easier to understand how information is handled. Human review remains part of the workflow, and records of AI activity support oversight across the firm.

The goal is to make responsible use easier to sustain in everyday practice. Legal professionals should be able to work with AI in the context of an authorized matter, apply their judgment to the result, and stay in control of what is saved, relied on, or shared.

Clio Work applies Clio’s security and data-protection controls while carrying forward the context and access rules already governing the matter. Across Clio’s legal AI platform, broader client, firm, and work context can support the task without blurring who is permitted to see what.

See how matter permissions carry into Clio Work

Use Clio Work within Clio’s legal AI platform to carry authorized matter context into research, document analysis, and drafting alongside the access rules already attached to the work.

A free trial gives your team space to explore how matter context, clear controls, and human review can support real legal work.

Start your free Clio Work trial. 

How do matter permissions work in Clio Work?

Clio Work follows the matter permissions already maintained in Clio Manage. A user can work only with matters they are authorized to access, and the same access boundaries apply to the information available within Clio Work.

Do firms need to create separate AI permissions for Clio Work?

No. Firms manage access through the matter permissions they already use in Clio Manage. When access to a matter changes, the firm does not need to recreate that change in a separate AI permissions system.

Can Clio Work access every matter in a firm’s account?

No. Clio Work can work only with matters the individual user is permitted to access. Matter context remains tied to the requesting user’s existing permissions.

What information does Clio Work send to AI providers?

When a user submits a request, Clio sends only the information needed to complete that task. The firm’s data of record remains in Clio, and the provider processes the task-specific information temporarily before returning the result.

Is customer data used to train third-party AI models?

No. Under Clio’s enterprise terms, AI providers do not use customer data to train their models. The information is also processed under zero-data-retention commitments.

Is information generated in Clio Work automatically saved?

No. The result returns to the lawyer who made the request and is not permanently saved unless the user chooses to save it. The lawyer remains responsible for reviewing the work and deciding what is relied on or shared.

Does Clio Work replace a firm’s ethical-wall or conflict-management policies?

No. Clio Work follows the matter access controls maintained in Clio Manage, but firms remain responsible for establishing and administering their own ethical-wall, conflict, confidentiality, and professional-responsibility policies.

How is Clio Work different from an AI tool linked through an ethical-wall integration?

An ethical-wall integration can connect an AI platform to permissions held in a practice management system, but the firm still has to keep users, matters, documents, and access changes aligned across both. As one example of Clio’s platform design, Clio Manage allows matter context and access rules to carry into Clio Work rather than being synchronized after the fact.