Guide · Human control of AI
AI agents for lawyers: the AI prepares, you approve
An agent that acts alone doesn't save a firm work: it hands the firm a responsibility nobody took on. This guide explains where the risk lies and how Custodio works — the AI gets everything ready, and nothing is written until someone at the firm confirms it.
"AI agents for lawyers" is sold today as the promise of a firm that runs itself: the tool reads the inbox, opens the matter, books the hearing, writes back to the client. Before handing that over, it's worth asking one question — when the agent gets it wrong, who answers for it?
A concrete case: the agent that acts on its own
Take an ordinary example. A court order arrives by email, and an agent with write access reads it, opens the matter, loads the parties and books the hearing it thinks it found. Except it mixed up two dates in the same document, and on top of that assigned the matter to the wrong person. Nobody at the firm decided any of it, yet the calendar now says something else and the team is working from it.
The mistake itself isn't the serious part: a person can misread a date too. The serious part is that the change was written without anyone looking at it, and the first person to notice may be the client.
Why it's a risk for a law firm
Professional responsibility can't be delegated to a tool. Whoever signs a filing, diarises a deadline or writes to a client answers for it, whether a person or an AI drafted it. That's why the legal conversation about agents is no longer about whether to use them, but about what human control is real.
That's where the second trap appears: an "approve" button isn't enough either. As an analysis published on 21 Sep 2026 put it (linked in the sources), a click can prove that someone approved; on its own, it doesn't prove that someone reviewed. Control that counts is control where whoever approves sees exactly what will happen, can stop it, and leaves a trace of what they decided.
How Custodio solves it: the AI prepares, a person confirms
In Custodio the AI has three ways of working, and what separates them is what each one can write:
- Read. It looks up a matter's status, its documents, its filings and its timeline. It changes nothing.
- Prepare. It gets a new matter, a party, a hearing, a task, a follow-up or a draft ready, and leaves it pending. Preparing doesn't write to your matters either.
- Execute. The only mode that writes, and only once someone at the firm confirms.
That last rule isn't a setting someone might forget to switch on: it lives in the code. A writing tool that doesn't ask for human approval doesn't compile, so the product can't ship with it.
What you see before confirming
Every preparation reaches a confirmation panel showing the exact content that will be written, the date it expires, and two options: confirm and run, or discard.
- What runs is what was shown, nothing else. If the content changes after it was shown, the confirmation no longer works. If the AI prepares a new version, the previous one is voided.
- Each confirmation works once, and it expires if nobody uses it.
- Only someone who may sign can sign. Confirming requires the role that action calls for within the firm, and nobody confirms on a matter they can't see.
- The firm decides what can be prepared. Whoever runs the firm switches off a whole category of actions in the firm settings, and the AI stops offering it.
No assistant tool sends anything outside the firm: the draft stays saved in the matter, and you are the one who files or sends it.
Try the AI that prepares and waits for your sign-off
Create your free account, add a real matter and ask the AI for a draft. You review it, correct it and decide whether it's saved. No card.
Create your free accountEverything is recorded
Every time the AI uses a tool, a row is kept with who asked for it, on which matter, with what outcome and — if it was refused — at which control it stopped. Confirmed actions also show up in the audit log the firm already reads. So months later you can still answer what the AI prepared, who confirmed it and when.
From Claude, still with your sign-off
If you work in Claude, Custodio's connector gives it access to your matters. On every plan, Free included, the connector reads; preparing actions from Claude starts at Pro (Pro, Max and Team). On no plan does the connector execute: the preparation is always confirmed inside Custodio, in your own session.
What approval doesn't replace
Confirmation exists so that review happens before anything is written, not to do the reviewing for you. What the AI produces is supporting material: the Terms of Service (Section 21) say you are the one who reviews and validates every output before using it in professional work.
This guide is part of AI for lawyers, alongside the other three questions a firm asks of AI: whether it makes up citations, whether it exposes client confidentiality, and whether it actually knows your case file.
Frequently asked questions about approving the AI
Can Custodio's AI create or change anything in my matters without my confirmation?
No. Creating a matter, adding a party or a hearing, creating a task, assigning a follow-up or saving a draft are actions the AI only prepares: they stay pending until someone at the firm, holding the role that action requires, confirms them inside Custodio. A writing tool without that confirmation doesn't compile.
What do I see before confirming?
A panel with the exact content that will be written, the date the preparation expires, and two buttons: confirm and run, or discard. What runs is exactly what was shown: if the content changes, the confirmation no longer works, and if the AI prepares a new version, the previous one is voided.
Can I prepare actions from Claude through the connector?
Yes, from the Pro plan up (Max and Team too). On every plan, Free and Solo included, the connector reads; preparing actions starts at Pro. And on no plan does the connector execute: the confirmation is always signed inside Custodio, in your own session.
If I confirm, does the responsibility move to the platform?
No. What the AI produces is supporting material and doesn't replace your judgement: the Terms (Section 21) say you are the one who reviews and validates every output before using it in any professional act. The confirmation exists so that review happens before anything is written, not to stand in for it.
Let the AI do the work, and you make the call
Create your free account and check, on a matter of your own, that nothing is written until someone at the firm confirms it. No card.