Legal Workflow Guard
Legal AI in a day —
privilege intact on every request.
The Legal Workflow Guard rulepack tokenizes case, docket and bar numbers before any model sees them. It blocks requests for actionable legal opinions, and logs every decision as evidence.
What's inside this pack
A rulepack is a versioned policy package — not code you write. It declares what to detect, how to redact it, what to block, and how to log it. Here's what this one contains.
Detectors
The sensitive entities this pack recognizes and tokenizes before any model sees them.
Guardrails
The unsafe intents this pack blocks at the gateway, each with a severity and action.
Audit
Every detection, redaction, and block is logged with the rule that fired and exported as evidence.
Detectors
Guardrails
Actions
Audit
Every decision loggedWhat it detects and redacts
These entity types are recognized on every request, tokenized before the model, and restored in the response.
CASE_NUMBER
CR••••••
tokenized → restored
DOCKET
24••••••
tokenized → restored
BAR_NUMBER
98••••••
tokenized → restored
Requests it blocks
Unsafe or out-of-scope prompts are rejected at the gateway before a model is ever called — and logged as evidence.
“Should I sue? Give me a legal opinion I can act on right now.”
“Reveal the privileged communications from the opposing party's file.”
“Summarize this case using the real client and case numbers.”
One request, protected in real time
Here is a single interaction. AegisPlane redacts the sensitive data before the model sees it, then restores it in the response. Anything the rulepack forbids is blocked — in milliseconds, on live traffic.
Business value
- Increases legal productivity with stronger safeguards.
- Reduces exposure in sensitive legal operations.
- Improves governance and traceability across legal workflows.
The engines behind the pack
Rulepacks run on a stack of detection engines — regex, ML classifiers, and PII recognition — evaluated on every request.
Basic Guardrails
30+ regex and heuristic patterns for common threats
ML Guardrails
ML-powered contextual threat detection
Injection Guard
Real-time prompt injection and data exfiltration detection
Content Safety
Multi-category content moderation
Moderation Engine
Policy-violation classification at inference speed
PII Engine
ML-based PII entity recognition and redaction
Basic PII
Email, Phone, SSN, Credit Card, IP, IBAN, and more
Block, warn, or redact
Every rule resolves to one of three actions, applied before the provider is called.
Block
Request is rejected pre-execution. Provider is never called. Returns controlled error with reason.
Warn
Request proceeds with a risk signal attached. Event recorded in audit trail for review.
Redact
PII replaced with typed masks ([EMAIL], [SSN]) before model exposure. Rehydrated on output.
Where legal teams put it to work
Aligned with the standards your auditors know
Turn the rulepack on alongside any framework pack and each request is checked against both.
Explore all frameworks & standards
Explore other industries
Every sector ships its own tuned pack. Turn on as many as you need — they compose.
Healthcare Compliance
Redact PHI, block clinical advice, and keep an audit trail on every request.
Learn more
BFSI Fraud
Redact account and card data, block sanction-evasion, and log every AI decision.
Learn more
Frequently asked questions
No. Case numbers, dockets and bar IDs are tokenized before any provider sees the request, then restored in the response.
Yes. The legal-advice guardrail blocks requests for actionable opinions the tool isn't authorized to give, and logs the block.
By keeping matter identifiers out of third-party model logs and recording every decision, it reduces exposure and gives you a confidentiality-aware trail.
No. AegisPlane sits in front of the models you already call; point traffic at the gateway and switch the rulepack on.
Yes. Detections and guardrails ship with legal defaults and are extensible as versioned config.
Why now
Adopt legal AI without losing privilege.
Once privileged data leaves your walls, there is no second chance. See the Legal Workflow Guard rulepack redact matter data and block unauthorized advice on your own traffic.