Artificial Intelligence in Professional Firms: AI Arrives Before Data Security

Gaia Banfi
Intelligenza artificiale negli studi professionali l AI arriva prima della sicurezza dei dati
In this article
Want similar results?
Discover how LumenONE can transform your customer management.
Learn More
Back to Blog

In the offices of lawyers and accountants, artificial intelligence is used to search for rules and rulings and to summarise documents: case files, deeds, financial statements and payslips. These are papers that clients hand over assuming they will stay within the firm.

A survey by the Observatory on Professionals and Digital Innovation of the Polytechnic University of Milan captures the phenomenon. Out of 1,768 questionnaires, the share of firms that introduced security measures after adopting AI stops at one fifth.

Where Artificial Intelligence Has Entered

The use of AI outside firm management systems concerns 36 per cent of law firms, 39 per cent of accountants, 42 per cent of labour consultants and 47 per cent of multidisciplinary firms. Above 29 staff the figure reaches 62 per cent, while below three it stays at 27 per cent.

How it is used says more than the adoption rate. Legal and case-law research covers 82 to 87 per cent of cases, document analysis and summarisation about half, while client-facing chatbots remain between 4 and 6 per cent.

None of these uses is marginal, because they all involve the content of case files. Outside the perimeter of the management system, that upload leaves no traceable record.

The Gap Between Large and Micro Firms

Alongside the 20 per cent figure there is a second one: fewer than a quarter of firms have defined access protocols by level of experience. The first-year trainee and the senior partner often see the same things.

Among large firms, measures introduced after AI rise to 72 per cent. The same firms use AI outside the management system in 62 per cent of cases, and 89 per cent have at least four of the six basic technologies.

According to the survey, this is a gap of scale, not of awareness. The head of a micro firm knows the value of a case file as well as a partner in a firm of thirty staff, but lacks someone to translate that knowledge into a configuration.

Costs and Low-Cost Measures

Average annual technology spending is 10,500 euros for a law firm, 14,450 for an accountant and 29,330 for a multidisciplinary firm. In Italy there are 69,210 accounting firms and 297,000 staff, with an average of 4.3 people per firm.

Within that budget, the survey notes, there is no room for a dedicated security role. Defining access protocols by level requires someone to design them, apply them and update them at every arrival and departure of a trainee.

Some measures, however, cost little. A register of the tools in use, a written ban on pasting client documents into free public tools, and a clause in the privacy notice on the use of AI all require few resources. The correct sequence, according to the survey, starts from the register, because without knowing what is in use every other measure works blindly.

Original article: tomshw.it

Gaia BanfiLumenIA
I help Italian companies understand and adopt artificial intelligence in a concrete, safe, and measurable way.

You might be interested

See all
    Modelli di intelligenza artificiale italiani quali sono e cosa fanno
    • News

    Italian Artificial Intelligence Models: What They Are and What They Do

    In recent years Italy has developed a number of artificial intelligence language models trained with particular attention to the Italian language. The topic involves universities, research centers and companies, both…

    ⏱ 2 minuti di lettura
    Intelligenza artificiale negli studi professionali l AI arriva prima della sicurezza dei dati
    • News

    Artificial Intelligence in Professional Firms: AI Arrives Before Data Security

    In the offices of lawyers and accountants, artificial intelligence is used to search for rules and rulings and to summarise documents: case files, deeds, financial statements and payslips. These are…

    ⏱ 3 minuti di lettura
    AI Act dal 2 agosto 2026 cosa cambia davvero per le aziende tra obblighi GPAI e trasparenza
    • News

    AI Act from 2 August 2026: what really changes for companies between GPAI obligations and transparency

    From 2 August 2026 a new phase of the AI Act, the European regulation on artificial intelligence, comes into force. From this date the transparency obligations of Article 50 and…

    ⏱ 3 minuti di lettura