AI Privacy for Lawyers

MyYaad is an AI privacy tool used by anyone who works with sensitive information — and lawyers are one of the clearest fits. AI tools like ChatGPT and Claude are transforming legal work, from drafting contracts to summarising case law. But every prompt containing a client name, case number, or privileged detail is a potential confidentiality breach. This page covers how MyYaad applies to legal work specifically. See who else uses MyYaad →

MyYaad swaps two kinds of details: the ones you save in your vault — names, addresses, companies, anything you choose — and the ones it detects automatically: email addresses, phone numbers (UK, US and international), credit-card numbers, bank IBANs, API keys and similar secrets, US Social Security, ITIN and EIN numbers, UK National Insurance and UTR numbers that pass their checks, Indian Aadhaar and PAN numbers and Canadian SINs, plus national ID numbers from the UAE, Ghana, Italy, Switzerland, Belgium, Spain, Brazil, Argentina, Chile, Mexico, Pakistan, Malaysia, Singapore, South Korea, Sweden, Ireland, Sri Lanka and China. Some details, such as dates of birth, passport numbers and postcodes, it notices but sends as you typed them. Save them in your vault to swap them.

See It in Action

Without MyYaad

Draft a settlement letter for Sarah Mitchell regarding a recent traffic accident at 42 Victoria Road, Manchester.

With MyYaad

Draft a settlement letter for Amira Kovac regarding a recent traffic accident at 19 Westfield Lane, Bristol.

With Sarah Mitchell and her address saved in the vault.

The AI receives the version with stand-ins. The details MyYaad swapped stay on your device.

The Confidentiality Problem

Every time a lawyer types a client name into ChatGPT, that data enters a system they do not control. AI providers may log prompts, use them for model training, or store them on servers in jurisdictions with different data protection standards. The SRA (Solicitors Regulation Authority) Code of Conduct requires solicitors to keep client affairs confidential. The ABA Model Rules impose similar obligations in the US. Using AI with real client data without adequate safeguards risks disciplinary action — regardless of whether the AI provider actually misuses the data. The risk is not hypothetical. AI prompts have been discovered in training datasets, leaked through API vulnerabilities, and accessed by third-party auditors. For lawyers, a single exposed client name can mean professional misconduct proceedings.

How MyYaad Swaps Client Details

MyYaad sits between you and the AI. In supported prompt and document flows, before your prompt leaves your device, it swaps the client details you save in your vault and the ones it detects automatically for realistic stand-ins: - Client names and addresses are swapped when you save them in your vault - Email addresses, phone numbers, bank IBANs and card numbers are detected and swapped as you type - Financial figures and case references: save them in your vault to swap them; otherwise they are sent as typed - Dates of birth: MyYaad notices dates, but it does not swap them yet — they are sent as you typed them. Save specific dates in your vault to swap them today. The AI receives a coherent prompt with the context it needs, with stand-ins for the details MyYaad swaps. Anything MyYaad does not swap is sent as typed, so check the pre-send preview. When the AI responds, MyYaad swaps the stand-ins back, showing you the response with your real client details restored. Each AI provider sees different stand-ins. If you use ChatGPT for drafting and Claude for review, the stand-ins the two providers see do not match each other.

Document Handling for Legal Files

Lawyers frequently need to reference contracts, witness statements, or correspondence when prompting AI. Supported formats: PDF, Word and Excel: Use as Context · Excel (.xlsx): AI-safe copy. MyYaad reads these documents on your device and swaps the values you have saved and the personal details it detects automatically before the content is used with an AI service. Review what MyYaad will send before you send or upload it, and take extra care with complex Word or spreadsheet files. Files attached directly in a chatbot are not protected.

Compliance and Audit Trail

MyYaad's pre-send preview shows you the substitutions at the point of send — what was matched, which shadow value replaced it, which AI provider it was sent to. This lets lawyers check what is leaving the device before it is sent. The desktop app has an Audit Log page, a local record on your device. Important. MyYaad reduces exposure; it is a tool, not a legal certification. Your firm's own SRA / ABA / state-bar compliance review still applies.

Risk Comparison

Scenario	Without MyYaad	With MyYaad
Client name in prompt	Real name sent to AI provider	Realistic stand-in sent for a saved name
Case details in prompt	Real dates, amounts, addresses exposed	Saved and automatically detected values swapped; others sent as typed
Document as AI context	Entire document uploaded to AI	Text with stand-ins sent — original file stays local
AI provider breach	Real client data exposed	Stand-ins for the swapped details; other details as typed
Cross-provider correlation	Same data visible to all providers	Each provider sees different stand-ins
Pre-send review	No visibility of what's being sent	Preview panel shows the substitutions before send

What MyYaad does and doesn't protect

MyYaad swaps details in what you type and in the documents you bring in through its Documents page — that's the channel it's built for. It does not protect files attached directly in a chatbot. It can't retract what an AI provider already remembers about a client from past chats, and it doesn't cover data a connected integration hands the model directly. Used inside its scope, the client details MyYaad swaps are not in the prompts you send. It's a tool that reduces exposure — not a legal certification. Your firm's own SRA / ABA / state-bar compliance review still applies.

See the full threat-model boundary →

Start protecting client data today

MyYaad is free, runs on your computer, and works with ChatGPT, Claude, Gemini, DeepSeek, Grok and Perplexity. The app needs no account.

Download MyYaad Free

MyYaad reduces exposure; it is not a compliance certification or a substitute for your organisation's legal and security review.