Risk Before Revenue: The Compliance-First Bet Mid-Sized Law Firms Are Making on Legal Tech
Photo by Daniil Komov on Unsplash
- 67% of Meritas member law firms ranked risk and compliance as their single top legal technology investment priority — outranking generative AI tools in the spending queue.
- 57% of surveyed firms cited generative AI as among the most critical technology issues they currently face, with roughly 80% expecting to deploy it within five years.
- The ABA's 2024 Tech Report documented AI adoption among attorneys nearly tripling — from 11% to 30% — in a single year, signaling an acceleration phase already underway.
- Legal tech advisor Corey Garver described the current market as an ideal window for mid-sized firms to upgrade vendors, given unusual fragmentation across most software categories.
What Happened
67%. That single figure anchors the most counterintuitive finding in recent legal industry research: law firms are prioritizing risk and compliance over generative AI as their primary legal technology investment target. According to Canadian Lawyer Magazine, the Meritas Law Firm Alliance partnered with Legaltech Hub to survey 100 member firms across its global network during February and March of 2024 — and the results paint a portrait of an industry building infrastructure before adding intelligence. Risk and compliance edged out every other category on the investment priority list, including generative AI tools, document automation, and practice management platforms.
The full dataset carries several layers worth unpacking. 57% of respondents flagged generative AI as among the most pressing technology challenges their firms currently face — awareness is clearly not the gap. More than half of the participating firms also identified document automation systems and legal software platforms as major near-term investment targets, suggesting the appetite for efficiency tools is genuine. Importantly, 77% of respondents reported already having a formal technology strategy in place, and approximately 80% anticipated deploying some form of generative AI within five years. Nicola Shaver, CEO of Legaltech Hub, who co-analyzed the results, made a point that tends to get lost in vendor conversations: a significant share of firms can expand their technology capabilities without purchasing new products, simply by unlocking functionality already embedded in systems like Microsoft 365, Teams, and SharePoint.
Photo by Egor Komarov on Unsplash
Why It Matters for You
Think of risk and compliance investment the way you would think about inspecting a building's electrical wiring before installing a smart home system. You can add all the connected devices you want — but if the underlying system is not safe or up to regulatory code, the innovation layer creates more danger than convenience. That is precisely the dynamic playing out across mid-sized law firms right now, and it has direct consequences for anyone who relies on outside counsel, signs contracts, or operates a business in a regulated space.
The compliance surge is not happening in a vacuum. Data privacy regulations have multiplied across jurisdictions over the past three years. Emerging AI governance frameworks — from the EU AI Act to sector-specific guidance from the FTC — are creating concrete new obligations for firms and for the corporate clients they serve. Cybersecurity incidents targeting legal data have grown in both frequency and consequence. Law firms hold extraordinarily sensitive client information, and regulators are paying closer attention to how that data is managed. Investing in risk and compliance legal technology has become less a choice and more a cost of continued operation for any firm that handles material client matters.
Chart: Meritas Law Firm Alliance and Legaltech Hub survey, February–March 2024, 100 global member firms. Green bar indicates forward-looking adoption timeline.
The AI adoption curve in the broader legal industry is already steeper than most observers anticipated. The American Bar Association's 2024 AI TechReport found that 30% of attorneys' offices reported using AI-based legal technology tools — nearly triple the 11% recorded just one year earlier. That rate of uptake compresses the window firms have to get foundational systems right before AI capabilities land on top of them. A separate Wolters Kluwer Future Ready Lawyer Survey, covering over 800 lawyers across the U.S., China, and eight European countries, found that more than 90% of respondents were already using at least one AI tool daily, with approximately half reporting revenue gains of between 6% and 20% they attributed directly to AI adoption. The firms most likely to realize those gains, the data consistently suggests, are those that treated compliance as their first investment rather than their last.
Corey Garver, Meritas' legal technology advisor, observed that the legal tech market remains unusually fragmented — with dominant players controlling only one or two software categories — making this a rare window for firms to move to better platforms without navigating an entrenched monopoly structure. That fragmentation also puts meaningful leverage in the hands of buyers who arrive with a clear strategy, which loops back to the 77% of surveyed firms that already have a formal technology plan. Firms without one are effectively shopping without a list.
This pattern — compliance investment unlocking AI readiness — echoes what Smart AI Agents observed in Microsoft's enterprise AI push, where the organizations gaining the most from agentic tools were those that had already standardized their data environments and access controls before deployment.
The AI Angle
The generative AI conversation inside law firms has moved from "should we?" to "how do we deploy this without creating new liability?" The 57% of Meritas respondents who named generative AI a critical technology issue are not skeptics — they are practitioners who understand that AI legal tools inside a law firm create specific professional responsibility questions that remain unsettled in most jurisdictions. The ABA's 2024 data showed that 74.7% of surveyed attorneys cited accuracy as their single biggest AI concern, which explains the sequencing: firms are not skipping directly to AI-powered contract review without first establishing the compliance and data hygiene systems that would catch errors before they reach a client's hands.
Document automation sits as the bridge technology in this picture. More than half of Meritas survey firms flagged it as a top investment area, and it represents a lower-stakes entry point for law firm automation — a way to test AI-adjacent workflows on internal processes before deploying generative tools in client-facing contexts. Legal software vendors are increasingly bundling AI features into platforms firms already license, which is precisely what Shaver was pointing to when she noted that firms can expand capability by going deeper into systems they already own. Contract review workflows that run through Microsoft Copilot or SharePoint-integrated tools, for instance, may already be available inside a firm's existing subscription with no additional procurement required.
What Should You Do? 3 Action Steps
If you use outside counsel for contract review, compliance work, or document drafting, ask whether generative AI tools are involved and what human review process validates the output before it reaches you. A court would likely look at whether a firm exercised reasonable professional judgment in supervising AI-assisted work — the rules of professional conduct in most U.S. jurisdictions require attorneys to understand the tools they deploy. Asking this question before engaging a firm is not only appropriate; it may reveal something important about how seriously that firm takes legal technology governance.
The same regulatory pressures driving law firm investment in risk and compliance legal technology are hitting businesses directly. Data privacy statutes, sector-specific AI use requirements, and evolving cybersecurity obligations may already create compliance duties around how your team uses AI legal tools, contract review software, or automated legal software platforms. Before you sign any new vendor agreement that includes AI-powered features, confirm what your applicable jurisdiction's rules say. The statute reads differently in California's CPRA, the EU AI Act, and emerging state frameworks — and "the vendor handles compliance" is not a safe assumption to carry into a contract.
The 77% of Meritas survey firms with a formal technology strategy did not arrive there by accepting vendor demos. They identified their specific risk exposure, inventoried existing systems, and built toward defined objectives. The same approach applies whether you are managing contracts for a small business, advising clients on legal matters, or evaluating law firm automation tools for an in-house function. Know what problem the legal software solves for your specific context before committing to a platform. Enterprise-grade tools designed for large law firms are not always the right fit — and Shaver's point about extracting value from systems you already license is worth testing before adding another vendor to the stack.
Frequently Asked Questions
Why are law firms prioritizing risk and compliance over generative AI in their legal technology budgets right now?
Regulatory pressure is the primary driver. Evolving data privacy laws, new AI governance frameworks like the EU AI Act, and increased cybersecurity obligations are creating concrete legal duties for firms and for the corporate clients they serve. Firms recognize that deploying generative AI legal tools on top of a weak compliance foundation compounds liability exposure rather than reducing it — so the investment sequencing goes infrastructure first, then capability. The Meritas survey found 67% of firms ranked risk and compliance as their top legal tech investment priority, which reflects this deliberate ordering rather than skepticism about AI's potential.
How fast is AI adoption actually growing inside law firms, and what does current data show about revenue impact?
Faster than most benchmarks suggested even two years ago. The American Bar Association's 2024 AI TechReport found 30% of attorneys' offices reporting use of AI-based legal technology tools — nearly three times the 11% recorded one year prior. A Wolters Kluwer survey covering over 800 lawyers across the U.S., China, and eight European countries found more than 90% using at least one AI tool daily, with approximately half reporting revenue gains of between 6% and 20% they attributed to AI adoption. The adoption curve is real; what varies significantly is whether underlying compliance and data governance structures are in place to sustain it.
Is document automation in legal software the same as generative AI contract review, or are they different tools?
They overlap increasingly but are not the same. Traditional document automation in legal software uses predefined templates and conditional logic — variables populate into a fixed structure to produce a document. Generative AI contract review and drafting tools produce original text from prompts or analyze existing agreements for risk language using large language models. More than 50% of Meritas survey respondents expressed strong interest in document automation as a near-term investment target, likely because it offers a more controlled entry point for law firm automation before committing to the less predictable outputs of generative systems. Many firms are using document automation as a proof-of-concept environment before extending AI legal tools into client-facing workflows.
Do mid-sized law firms need to buy new legal software platforms to modernize, or can they use tools already in place?
Many firms can go substantially further with what they already license. Nicola Shaver, CEO of Legaltech Hub, who co-analyzed the Meritas survey results, specifically highlighted that platforms like Microsoft 365, Teams, and SharePoint already include features — document management, workflow automation, collaboration tools — that go underused at most mid-sized firms. Corey Garver, Meritas' legal technology advisor, noted that the fragmented market makes this an ideal moment to evaluate whether current contracts are delivering value, but the first step is typically an audit of existing functionality before adding new vendors. A court would likely look unfavorably at a firm that purchased redundant legal software when equivalent capability already existed in its licensed stack.
What should a small business owner ask before signing a contract that involves AI-powered legal software or automated contract review?
Three questions cover most of the material ground. First, who bears liability if the AI generates an error — the vendor, the attorney, or you? The answer is almost never the vendor. Second, what data does the tool retain or train on, and does using it trigger any disclosure obligations under applicable privacy law? Third, has a licensed attorney reviewed the AI output for your specific jurisdiction and contract type? AI legal tools and automated contract review platforms can meaningfully reduce time and cost on routine matters, but they are not substitutes for jurisdiction-specific professional judgment. Before you sign anything material, confirm in writing whether AI was used in preparing it and whether a human professional reviewed and stands behind the output.
Disclaimer: This article is for informational purposes only and does not constitute legal advice. The information presented here reflects publicly available research and editorial analysis. Readers should consult a licensed attorney for guidance specific to their legal situation, jurisdiction, and circumstances.
Get NewsLens — All 19 Channels in One App
AI-powered news with action steps. Install free, works offline.
No comments:
Post a Comment