---
title: "Build an upload checklist for a matter before any file goes into a tool"
url: "https://ailawframework.com/obligations/confidentiality-and-client-information/build-an-upload-checklist-for-a-matter-before-any-file-goes-into-a-tool"
type: "task"
site: "AI Law Framework"
id: "A51-A20260923-4"
practice_area: "Confidentiality & client information"
tier: "yellow"
lawyer_review: "required"
last_reviewed: "2026-10-22"
---

# Build an upload checklist for a matter before any file goes into a tool

> From the matter type and the approved-tool list, produce a checklist of what may be uploaded, what must be redacted, and which tool is permitted.

Canonical page: https://ailawframework.com/obligations/confidentiality-and-client-information/build-an-upload-checklist-for-a-matter-before-any-file-goes-into-a-tool  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Confidentiality & client information](https://ailawframework.com/obligations/confidentiality-and-client-information.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | From the matter type and the approved-tool list, produce a checklist of what may be uploaded, what must be redacted, and which tool is permitted. |
| What the lawyer must review | Do not upload unless the terms and matter sensitivity clearly allow it Record the decision on the file |
| Written for / versions | 1 jurisdiction versions below |

## Checking plan

If the terms or the matter sensitivity do not clearly allow it, do not upload. Record the decision on the file.

- What the AI does: From the matter type and the approved-tool list, produce a checklist of what may be uploaded, what must be redacted, and which tool is permitted.
- What the lawyer does: Set the scope, verify the evidence, resolve exceptions and approve the final output for its intended use.
- Basis: Suggested checking approach based on the task guidance. Complete the assessment for the actual tool, information and jurisdiction.

## Checks the lawyer makes

1. Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
2. Verify every relied-on citation, figure and name against the source document.
3. The responsible lawyer approves the exact version before use.

## Sources

- [ABA Business Law Today: How to Protect Your Law Firm's Data in the Era of GenAI, December 2024](https://www.americanbar.org/groups/business_law/resources/business-law-today/2024-december/how-protect-law-firm-data-era-gen-ai/) (checked 2026-09-23)
- [CLINIC: How to Safely Incorporate AI Into Your Immigration Practice, 17 December 2025](https://www.cliniclegal.org/resources/how-safely-incorporate-ai-your-immigration-practice) (checked 2026-09-23)

## Forms and precedents for this task

| Form or precedent | Kind | AI level | Summary |
| --- | --- | --- | --- |
| [Checklist before any file on a matter goes into a tool](https://ailawframework.com/precedents/confidentiality-and-client-information/matter-tool-upload-checklist.md) | Checklist | Yellow | Matter-by-matter checklist before a document is put into a tool: confidentiality, court limits, personal information, overseas handling, the client's instructions, and any information barrier. |
| [Protocol before using a self-learning generative AI tool (United States)](https://ailawframework.com/precedents/confidentiality-and-client-information/us-self-learning-gai-confidentiality-protocol.md) | Checklist | Yellow | A check before anyone puts information relating to a representation into a generative AI tool that may learn from inputs or reveal them in later output, including to someone behind an ethical wall. |
| [Staff undertaking on unapproved generative AI tools (United States)](https://ailawframework.com/precedents/confidentiality-and-client-information/us-staff-undertaking-unapproved-gai.md) | Letter | Yellow | A short undertaking by a lawyer or staff member not to put firm or client information into a generative AI tool the firm has not approved, and to tell a supervisor if that happens. |
| [Check before using a hypothetical in a generative AI tool (United States)](https://ailawframework.com/precedents/confidentiality-and-client-information/us-hypothetical-prompt-check.md) | Checklist | Yellow | A check that a prompt is a true hypothetical under Rule 1.6 Comment [4]: no reasonable likelihood that the tool, or a later reader of the output, could identify the client or the situation. |
| [Confidentiality undertaking for an external reviewer or expert](https://ailawframework.com/precedents/confidentiality-and-client-information/external-confidentiality-undertaking.md) | Letter | Yellow | Undertaking by a person outside the practice who will see client material, limiting use to a stated purpose and prohibiting upload to a tool the practice has not approved for that material. |

Signed-in accounts can read the full text of each one.

## Jurisdiction versions

| Jurisdiction | Level |
| --- | --- |
| [United States](https://ailawframework.com/obligations/confidentiality-and-client-information/build-an-upload-checklist-for-a-matter-before-any-file-goes-into-a-tool/united-states.md) | Yellow |

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*