AI-Powered Legal Workspace

Desk of Dr. G

Your AI paralegal toolkit. Analyze contracts, triage NDAs, assess risk, and draft responses in seconds.

Welcome, Dr. G

Every analysis below was generated by AI in seconds, using realistic documents from a small-town Iowa general practice. Click through each tab to see what would normally take hours, done instantly.

NDA Triage

An NDA from a local grain cooperative crossed with a tech vendor. AI reads it, flags the traps, and classifies risk in seconds.

~45 minutes ~8 seconds with AI

Contract Review

A 3-year IT services contract for a small law firm. AI finds 10 red flags, drafts redline language, and prioritizes what to negotiate first.

~2 hours ~12 seconds with AI

Client Response

A bakery owner in Pella emails about forming an LLC. AI drafts a warm, knowledgeable response addressing all five questions.

~30 minutes ~6 seconds with AI

Risk Assessment

AI analyzes both documents together, identifies 16 risks across 5 categories, and creates an action plan with deadlines.

~3 hours ~15 seconds with AI

These are not mockups. Every analysis was generated live by AI.

Click any card above or use the tabs to explore each tool.

NDA Triage

An NDA between Prairie Harvest Grain Cooperative (Grinnell, IA) and Heartland Digital Solutions (Des Moines, IA) for a software implementation. AI read all 9 sections and classified it in seconds.

Overall Classification

AI recommendation: Do not sign without revision

RED
Risk Score
8/10

This "mutual" NDA is heavily one-sided in favor of Heartland Digital. Critical issues include forced assignment of derivative works created from Prairie Harvest's agricultural data, Delaware venue and governing law despite both parties operating in Iowa, and asymmetric assignment rights.

Clause-by-Clause Analysis
Standard

Sections 1.1 to 1.3: Definition of Confidential Information

V
Comprehensive and well-structured definition with standard carve-outs. Appropriately covers agricultural data, crop yields, and storage capacities specific to the cooperative.
No changes required.
Standard

Section 2: Obligations of Receiving Party

V
Standard confidentiality obligations with appropriate care standards. Properly addresses compelled disclosure with notice requirements.
No changes required. Consider clarifying timeline for notice in compelled disclosure scenarios.
Red Flag

Section 3.2: Confidentiality Survival, 7 Years

V
7-year survival period is 2 to 3 times longer than market standard. Most NDAs use 2 to 3 year survival. This creates indefinite liability for agricultural data that loses practical value much sooner. Combined with the 5-year initial term, that is 12 years of obligation.
Negotiate: Reduce survival to 3 years maximum. Consider tiered approach: 3 years for general business information, 5 years for true trade secrets.
Critical

Section 4.2: Derivative Works Ownership

V
THE MOST CRITICAL ISSUE. Forces Prairie Harvest to assign ALL derivative works and improvements to Heartland Digital, even though those works are created using Prairie Harvest's own operational data. Heartland Digital could then license those improvements to Prairie Harvest's competitors. This directly contradicts the "mutual" NDA framing.
Complete rewrite required. Options: (1) Joint IP ownership with mutual licensing, (2) Prairie Harvest retains rights to improvements specific to its operations, (3) Heartland Digital must get written consent before monetizing derivative works. At minimum, Prairie Harvest must retain the right to use derivative works for its own operations.
Critical

Section 8.2: Arbitration in Wilmington, Delaware

V
Major strategic disadvantage. Both parties operate in Iowa, yet disputes must be resolved in Delaware. This forces Prairie Harvest to travel out of state, hire Delaware counsel, and incur substantial cost for a transaction with zero Delaware nexus. Combined with Delaware governing law (Section 9.1), this creates compounding "home court" advantage for Heartland Digital.
Negotiate: Change venue to Des Moines or Cedar Rapids, Iowa. Change governing law to Iowa law. If Delaware is insisted upon, require Heartland Digital to bear all travel costs and allow virtual arbitration.
Critical

Section 9.4: One-Sided Assignment Rights

V
Asymmetric assignment. Heartland Digital can freely assign to affiliates or successors without Prairie Harvest's consent. Prairie Harvest cannot assign at all without written consent. This means Prairie Harvest's confidential agricultural data could be transferred to unknown third parties, potentially competitors.
Critical revision: Make assignment mutual (both require consent). Add restrictions: assignee must assume all NDA obligations, no assignment to competitors without consent, Heartland Digital remains liable for assignee breaches.
Caution

Section 5.1: Non-Solicitation (2 years)

V
The 2-year period is reasonable, but "contact in connection with the Purpose" could be broadly interpreted. Could restrict hiring of many employees, not just key contacts.
Clarify "contact" to mean direct project contacts only. Consider reducing post-termination period to 1 year.
Standard

Sections 6 and 7: Indemnification and Remedies

V
Standard mutual indemnification with reasonable consequential damages exclusion. Appropriately recognizes equitable relief for NDA breach. Attorney's fees for prevailing party is balanced.
No changes required.
Priority Actions
1

DO NOT SIGN without revising Section 4.2 (Derivative Works). This is the most critical issue.

Immediate / Managing Partner
2

Negotiate venue change from Delaware to Iowa (Sections 8.2 and 9.1).

Before signing / Lead Attorney
3

Revise assignment rights to be mutual (Section 9.4).

Before signing / Contracts Team
4

Reduce confidentiality survival from 7 years to 3 to 5 years (Section 3.2).

High priority / Negotiation round

Contract Review

A 3-year IT services agreement between Hawkeye Law Group (Pella, IA) and TechBridge Managed Services (Des Moines, IA). AI reviewed all 11 sections from the client's perspective.

Overall Assessment

AI recommendation: Do not sign without substantial revisions

Unfavorable
Risk Score
9/10

This contract heavily favors TechBridge with punitive early termination fees ($42,000+), automatic 5% annual increases, a liability cap of only $8,400 (3 months of fees), and 72-hour breach notification that is dangerously slow for a law firm handling privileged information.

Top 10 Red Flags with Suggested Redlines
Section Current (Problem) Suggested Redline Priority
2.4 Early Termination Must pay remaining fees minus 15%. Year 1 exit = ~$42,840. Cap at 3 months of fees, only within first 12 months. Critical
3.2 Price Increases Automatic 5% annual increase, no notice or negotiation. 0% during initial term. Post-renewal: max 3% with 60-day notice and termination right. Critical
7.1 Liability Cap Capped at 3 months of fees ($8,400). A data breach could cost 10x that. 12 months of fees. Exclude data breaches and gross negligence from cap entirely. Critical
4.3 Breach Notice 72 hours to notify. Too slow for attorney-client privilege obligations. 24 hours verbal, 48 hours written. Daily updates until resolved. Provider pays notification costs. Critical
3.6 Expenses Reimbursement up to $5,000 per expense with no prior approval. $500 threshold. Itemized receipts. Travel limited to IRS mileage rates. Critical
11.2 Assignment Provider can assign freely. Client cannot assign at all. Mutual consent required. Client gets termination right if assignee fails security audit. High
6 IP Ownership Provider owns ALL tools, scripts, configs, even custom ones you paid for. Client owns custom deliverables. Provider keeps generic methodologies only. High
4.5 Data Return 90 days to return or destroy your data after termination. 5 business days for access. 10 business days for certified destruction. High
3.5 Late Interest 18% per annum, compounded monthly on 15-day terms. 6% simple interest. Net 30 payment terms. Good faith dispute holdback right. High
5.3 SLA Credits Max 25% credit ($700) even if systems are down for days. Remove cap. Termination right if uptime drops below 95% for 3 months. Medium
Financial Impact Summary
$42K+
Early Exit Cost (Year 1)
$8,400
Liability Cap (3 mo.)
5%
Auto Annual Increase
18%
Late Payment Interest

Client Response Generator

Linda Jacobsen from Pella emailed about forming an LLC for her bakery "Dutch Oven Delights." She has 5 questions and a March 15 lease deadline. AI analyzed the inquiry and drafted a warm, Iowa-specific response.

Intake Analysis

Client
Linda Jacobsen
Matter Type
LLC Formation
Urgency
March 15 Deadline
Referral
Deb Van Der Berg

Questions Identified (5)

1 LLC formation costs and timeline in Iowa
2 Spousal involvement, single or multi-member LLC?
3 DBA vs. LLC, what is the difference?
4 Liability protection for house and pension
5 Food handling permits for commercial operation

Potential Billable Services

LLC Formation Operating Agreement Spouse Structure Regulatory Consultation Lease Review Business Insurance Advice
AI-Generated Draft Response

Risk Assessment

AI analyzed both documents together to identify risks across the law firm's exposure. It found 16 distinct risks, categorized by severity and likelihood, with specific mitigation strategies for each.

Overall Risk Level: HIGH

The law firm faces significant exposure from both contracts. Critical issues include a liability cap far too low for privileged legal data, breach notification timelines that may violate Iowa Rules of Professional Conduct, and vague security standards inadequate for attorney-client privileged information.

Risk Matrix
2
Critical Risks
7
High Risks
6
Moderate Risks
1
Low Risks
Critical and High Risks
Critical

RISK-001: Liability Cap Only $8,400 for Privileged Legal Data

V
TechBridge's liability is capped at 3 months of fees (~$8,400). A single data breach involving attorney-client privileged information could result in malpractice liability, client notification costs, regulatory fines, and reputational damage far exceeding this amount. The cap applies even for gross negligence.
Mitigation: Negotiate cap to 12 months minimum. Require cyber liability insurance naming the firm as additional insured. Carve out data breaches and security incidents from liability cap entirely.
Critical

RISK-002: 72-Hour Breach Notification May Violate Professional Conduct Rules

V
Iowa Rules of Professional Conduct Rule 32:1.6 requires reasonable precautions for privileged information. The 72-hour notification window may be too slow for a law firm to meet its obligations to notify affected clients. Most professional liability carriers require 24-hour notification.
Mitigation: Amend to 24-hour verbal notification, 48-hour written. Require daily updates until resolved. Require TechBridge to maintain incident response procedures compatible with Iowa Rules of Professional Conduct.
High

RISK-003: Vague Security Standards for Privileged Information

V
"Commercially reasonable" safeguards is undefined. No requirements for encryption, MFA, access controls, or security certifications. 90-day data return period is excessive for sensitive legal files. No prohibition on subcontractors accessing data.
Mitigation: Require AES-256 encryption, TLS 1.2+, MFA, SOC 2 Type II. Reduce data return to 10 business days. Require written approval for subcontractor access.
High

RISK-007: IP Lock-In, Provider Owns Everything Built for You

V
TechBridge owns all tools, scripts, and configurations developed during the engagement, even custom ones built specifically for the firm. The license terminates when the contract ends, meaning the firm loses access to its own IT infrastructure customizations upon switching providers.
Mitigation: Negotiate client ownership of custom deliverables. Provider retains only pre-existing generic methodologies. Add escrow provision for source code. Grant perpetual license at minimum.
High

RISK-008: Asymmetric Indemnification

V
Provider's indemnification is limited to "gross negligence or willful misconduct" (very narrow). The firm's indemnification covers "any claims" from use of services (very broad). This means if Provider's negligence causes a breach, the firm may still be on the hook.
Mitigation: Make indemnification symmetric. Expand Provider's obligations to include ordinary negligence. Narrow firm's obligations to gross negligence only.
High

RISK-011: NDA Derivative Works Assignment to Software Vendor

V
Heartland Digital owns all improvements created from Prairie Harvest's operational data. If the law firm assists in evaluating the software, any insights developed could be claimed by Heartland Digital.
Mitigation: Clarify in engagement letter that firm's work product is excluded. Add carve-out to NDA for legal analysis and advice.
Recommended Action Plan
1

Do not execute the IT Services Agreement until liability cap is increased and cyber insurance carve-out is added.

Before signing / Managing Partner + Outside Counsel
2

Engage Iowa IT contract counsel to renegotiate. Focus on liability caps, breach notification, security standards, IP ownership, and symmetric indemnification.

Within 7 days / Managing Partner
3

Review NDA with managing partner. Draft separate engagement letter with IP carve-outs and confidentiality protocols.

Within 7 days / Contracts Counsel
4

Obtain detailed security audit from TechBridge. Verify SOC 2 Type II or ISO 27001 status.

Before signing / Office Manager
5

Clarify NDA governing law conflict. Negotiate Iowa law and venue.

Before engagement / Managing Partner
6

Establish internal IT service level expectations and after-hours emergency procedures.

Within 14 days / Office Manager
7

Add expense approval workflow: require quotes over $1,000, pre-approval over $5,000.

Within 14 days / Finance Manager
8

Document NDA limitations in client engagement letters. Next review date: May 11, 2026.

Before client intake / Managing Partner

My Notes

Type or record voice notes. Notes are saved locally in your browser and automatically deleted after one week.

RECORD
Saved Notes

No notes yet. Type or record one above.

Upload Document for Analysis

Upload a PDF to extract its text content. You can then review the extracted text and use it with the AI analysis tools.

Click to upload or drag a file here

Supports PDF, TXT, DOC, and DOCX files