A 6-attorney civil litigation firm in Gainesville had a familiar problem: the junior associates were drafting motions faster than the partners had ever seen, and the partners had figured out the source quickly — the associates were running first drafts through consumer ChatGPT. The work product was good. The risk profile was unacceptable.

One of the partners had attended a Florida Bar CLE on AI in the practice of law and came back convinced that ABA Model Rule 1.6(c) and Florida Bar Rule 4-1.6 made the consumer-AI workflow indefensible. Settlement drafts, deposition summaries, opposing-counsel correspondence, and confidential client communications were being routed through services with no Business Associate or Confidentiality Agreement, no audit logging, and no training opt-out. The firm’s malpractice carrier was beginning to ask cybersecurity questions on its renewal application that pointed in the same direction.

The firm reached out to Simply IT for a setup that captured the productivity win without the bar exposure — with documentation a Bar disciplinary panel or a malpractice underwriter would recognize as reasonable efforts.

Simply IT deployed a multi-vendor AI gateway tuned to legal practice workflows. Claude was configured as the primary model for long-document analysis, brief argumentation, and reasoning tasks. ChatGPT was set up for fast first-draft conversational writing and routine correspondence. Perplexity was added for cited legal research with verifiable case-law sources. Every model was on enterprise-tier with vendor training opt-out enforced contractually and audit logging at the prompt level.

Attorney-specific permissions reflected the firm's matter management approach. Each attorney's AI sessions were scoped to their active matters; partners had broader access including financial and client-development data. Automatic redaction caught client names from the firm's case management system, settlement amounts, opposing-party identifiers, and matter numbers before any prompt reached a model. The redaction map stayed inside the firm's network.

Simply IT drafted a Firm AI Policy that explicitly mapped to ABA Model Rule 1.6(c) and Florida Bar Rule 4-1.6 reasonable-efforts standards. The policy covered acceptable use, prohibited use, attorney review responsibilities, and audit-log retention. Annual technology-competence training (ABA Model Rule 1.1 Comment 8) was implemented with documented attendance for every attorney. The malpractice carrier's renewal questionnaire was reviewed and the firm's responses were strengthened with the new control documentation.

Within 90 days of deployment, the firm measured a 60% reduction in brief and motion drafting time across the six attorneys. The junior associates were producing higher-quality first drafts; the partners were spending less time on developmental editing and more on substantive review. One associate reported finishing a brief that would historically have taken eight hours in three. Another reported the drafting of a complex motion-in-limine going from a full day to a long afternoon.

The compliance picture was the deeper win. The firm now had documentation a Bar disciplinary panel would recognize as reasonable efforts — vendor agreements with confidentiality terms and training opt-out, audit logs of every AI prompt during the period, a written firm AI policy, attorney technology-competence training records, and a quarterly review process. The firm's malpractice carrier renewal questionnaire took 30 minutes to complete with the new documentation in hand.

The managing partner noted that the deployment gave the firm two competitive advantages it did not have before: the productivity to take on cases that previously would not have penciled out, and a defensible cybersecurity posture that several enterprise clients had explicitly asked about during outside-counsel-guideline reviews. Simply IT continues to manage the gateway and the firm's broader IT environment.