Home / Safety / CoCounsel for legal practice
Thomson Reuters Corporation (Toronto, CA)How safe is CoCounsel for the legal profession?
CoCounsel publishes limited privacy safeguards. Ask the provider for clarification before you put confidential legal-practice data into it.
Where does CoCounsel stand in legal practice?
Shared place 30 of 45 options for legal (professional tools and general assistants) on GDPR profile. 6 options, like CoCounsel profile, are Limited. Each tile is an option we follow for this field; click for the check.
Published safeguards
OpenAI GPT and Google Gemini, processing in the USA; hosting in the USA, regional hosting in the UK, Australia and Canada (EU not mentioned); prompts and content not used for training; SOC 2 and ISO 27001 (according to the provider)
How to use CoCounsel safely
- Use the business variant and sign a data processing agreement (DPA).
- Do not enter unnecessary personal data into prompts; anonymise where possible.
- Ask the provider explicitly where data is stored and processed.
- Keep a professional in the loop: confidentiality is mandatory.
Stronger or equally strong in legal practice
Legal MindLegal Mind B.V. (Amsterdam, NL)
LegalMikeNovitec B.V. (Groningen, NL)
LexboostLexboost B.V. (Utrecht, NL)
AndriAndri AI B.V. (Amsterdam, NL)
SpellbookRally Legal (Canada)Latest developments
Via pop-up windows in the HTML preview of code blocks, an attacker could bypass Lockdown Mode and siphon off your chat history, via a manipulated prompt, GPT or shared chat. OpenAI patched the flaw on 18 September 2026; Check Point published the details on 5 November. Users do not need to do anything. source
In the third quarter of 2026, OpenAI made more than 200 reports to law enforcement about threatened violence based on ChatGPT conversations. Conversations in which someone appears fixated on violence may be ended automatically by ChatGPT, and if it happens repeatedly, OpenAI can pause the account. So don't assume that what you type into ChatGPT stays confidential. source
ChatGPT can use plugins to search and summarise iCloud mail and change appointments, including on the free subscription. Signing in uses an app-specific password from Apple; it remains valid if you disconnect the integration in ChatGPT and you must revoke it yourself via account.apple.com. source
Questions
- How safe is CoCounsel for legal practice?
- CoCounsel publishes limited privacy safeguards. Ask the provider for clarification before you put confidential legal-practice data into it. Limited or partly unknown safeguards, check with the provider.
- Does CoCounsel train on my data?
- OpenAI GPT and Google Gemini, processing in the USA; hosting in the USA, regional hosting in the UK, Australia and Canada (EU not mentioned); prompts and content not used for training; SOC 2 and ISO 27001 (according to the provider)
- What should I watch out for with AI in legal practice?
- Professional secrecy is mandatory. Only enter client data into a business/EU variant with a data processing agreement, where input is not used for training. Always keep a lawyer in the loop.
Source documents
Everything about CoCounsel Best AI for legal practice
Summarised by the editorial team from provider documentation · not legal advice
Last checked: 23 October 2026 · How we check
Source: , checked on 23 October 2026
Every Friday: what changed in AI for law firms
New models, prices, oversight and tools, with sources and what it means for you. One email a week, unsubscribe with one click.