RAMTEKThe AI readiness checklist for your firm.
Bar guidance and insurers now expect a firm that uses AI to show three things: that it chose its tools with care, that a lawyer checks what the tools produce, and that it can explain both. This file helps you do that. It is written for any firm using AI tools, and it also records, honestly, what Ramtek does and does not offer today.
Free, no sign-up. Version 1.1, October 2026. This is not legal advice or an ethics opinion. Rules differ by state and by court; check your own jurisdiction's rules and any standing orders, and consult your ethics counsel or carrier where it matters. Rule numbers refer to the ABA Model Rules of Professional Conduct.
Five parts, one folder.
Part 1: Your firm
A checklist of what your firm should have in place, by duty. Tick it, note the evidence you keep.
Part 2: Vendor file
Twelve areas to ask any AI vendor about, with Ramtek's answers today, including the gaps.
Part 3: Carrier worksheet
The topics insurers and brokers report asking about, with space for your answers.
Part 4: Policy starter
A one-page AI use policy you can edit and adopt.
Part 5: Records to keep
What to put in your vendor file, and how to pull Ramtek's records.
What Ramtek can show you, and what it cannot.
The vendor file answers 39 questions across twelve areas. For Ramtek: 19 yes, 13 partly, 3 on request, 4 no. It does not hide the gaps. These are things many vendor questionnaires ask for that Ramtek does not offer today:
| Asked for in many questionnaires | Ramtek today |
|---|---|
| SOC 2 Type II or ISO 27001 for Ramtek itself | Ramtek's database provider reports a SOC 2 Type II; Ramtek has no report of its own. |
| A zero-data-retention agreement with the AI provider | The provider may keep requests for up to 30 days for safety monitoring. |
| Single sign-on (SAML) | Sign-in is by individual login with optional authenticator-app two-factor. |
| Per-matter permissions or ethical walls | Users at a firm share its clients, matters, library and saved results. |
| Customer-managed encryption keys, a choice of data region, or on-premises hosting | Not offered. |
| An independent penetration test report | Not available today. |
| Contractual audit or inspection rights over Ramtek's systems | Not offered. |
| A HIPAA business associate agreement | Discuss with us before uploading protected health information. |
| A notice-before-change commitment for subprocessors | Ask for it in a DPA. |
A firm whose policy requires one of these should not use Ramtek for that purpose, or should ask us first. Read how data is handled on Security and the bar-opinion summary on Bar ethics.
Use it with any tool, not only ours.
Parts 1, 3, 4 and 5 are for any AI tool your firm uses. Part 2 shows the questions to put to every vendor.
Questions, or something marked "on request"? support@ramtekintelligence.com