---
title: "Assess a generative-AI vendor against Rule 1.6 before any client input"
url: "https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-vendor-ai-and-subprocessors-risk-questionnaire/united-states"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A25-T1-R5-US"
practice_area: "Privacy, Data Protection & Cyber"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["US"]
last_reviewed: "2026-09-23"
---

# Assess a generative-AI vendor against Rule 1.6 before any client input

> Extract retention, training-use, subprocessors and breach-notice terms from the vendor documents into a table.

Canonical page: https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-vendor-ai-and-subprocessors-risk-questionnaire/united-states  
Last reviewed: 2026-09-23

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Privacy, Data Protection & Cyber](https://ailawframework.com/practice/privacy-data-protection-and-cyber.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | Extract retention, training-use, subprocessors and breach-notice terms from the vendor documents into a table. |
| What the lawyer must review | Check whether the tool learns from or shares prompts If it does, do not input client information without informed consent and reasonable security Apply Opinion 512, Florida 24-1, Texas 705 and D.C. 388 |
| Written for | United States |
| Applies to | [Build a vendor AI and subprocessors risk questionnaire](https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-vendor-ai-and-subprocessors-risk-questionnaire.md) |

## Checking plan

- What the AI does: Extract retention, training-use, subprocessors and breach-notice terms from the vendor documents into a table.
- Basis: Checked against the linked sources on 23 September 2026. Confirm the current instrument before reliance.

## Sources

- [ABA Formal Opinion 512, Generative Artificial Intelligence Tools (29 July 2024)](https://www.americanbar.org/content/dam/aba/administrative/professional_responsibility/ethics-opinions/aba-formal-opinion-512.pdf) (checked 2026-09-23)
- [Florida Bar Ethics Opinion 24-1](https://www.floridabar.org/etopinions/opinion-24-1/) (checked 2026-09-23)
- [Texas Professional Ethics Committee Opinion 705 (February 2025)](https://www.legalethicstexas.com/resources/opinions/opinion-705/) (checked 2026-09-23)
- [District of Columbia Bar Ethics Opinion 388](https://www.dcbar.org/for-lawyers/legal-ethics/ethics-opinions-210-present/ethics-opinion-388) (checked 2026-09-23)
- [ABA Model Rule 1.6, Confidentiality of Information](https://www.americanbar.org/groups/professional_responsibility/publications/model_rules_of_professional_conduct/rule_1_6_confidentiality_of_information/) (checked 2026-09-23)

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*