Sovereign legal AI: follow a matter through the system

Sovereignty is tested on a matter, not a slogan. Where are documents stored? Where do models process requests? Are data retained or used for training? Who can see the exchanges, for how long, and under which contractual terms?

Follow each step

Ask providers to document storage, inference, subprocessors, access, retention and deletion. Identify the country of each processing step and the commitments that apply to your organisation. A firm should also examine professional secrecy and access between matters; an in-house team may need to check permissions, the data processing agreement and service continuity. Both should verify encryption, logs and the ability to inspect the sources behind an answer.

This follows the French National Bar Council’s evaluation guide, which asks lawyers to consider sovereignty, confidentiality, security and reliability. Its professional conduct guide also addresses the lawyer’s responsibility for AI use.

What to ask Jimini to substantiate

According to our data protection policy, application data are hosted in France. Model providers process requests within the European Union, without retaining customer data or using them for training under the stated commitments. Jimini states its ISO 27001:2022 certification in its terms of use. Our trust centre shows this certification and its controls.

Set those documents against your matters, obligations and contract. Our page on AI and professional secrecy covers the lawyer’s obligations; this page helps you compare the evidence providers can supply.