--- title: "AI for Law Firms in Germany: Tools, Compliance, and BRAO" description: "A practical guide for German law firms and lawyers on using AI tools legally — BRAO, GDPR, confidentiality rules, and which AI tools work in practice." image: "https://compound.law/assets/images/og-image-en.webp" source: "https://compound.law/en-DE/news/ai-for-law-firms-germany/" language: "en" --- ![AI tools for law firms in Germany — BRAO compliance and GDPR guide](https://compound.law/assets/images/news/ai-law-firms.webp) Guides # AI for Law Firms in Germany: Tools, Compliance, and BRAO 5 April 2026 Short answer German law firms can use AI tools for legal research, contract review, document drafting, and client intake — provided they address professional secrecy under BRAO, GDPR compliance, and appropriate human oversight. The question is not whether AI is permissible, but how to deploy it defensibly. - BRAO Section 43a (confidentiality) and Section 43e (external service providers) are the primary professional law constraints. - Every AI tool processing client data requires a DPA, cross-border transfer assessment, and sub-processor review. - AI tools are legally usable for many law firm workflows — but require a documented operating model and human review. **AI for law firms in Germany** is a practical and legally viable option — but not without constraints. German lawyers, managing partners, and law firm technology teams need to navigate **professional secrecy obligations under the BRAO**, **GDPR data protection rules**, and the professional responsibility to supervise AI-generated work. This guide covers what German law firms are actually using AI for, what the rules say, and how to deploy AI tools in a way that is defensible under German and EU law. ## How German Law Firms Are Using AI AI adoption in German law firms has accelerated since 2023. The practical use cases cluster around several core workflows: - **Legal research and case analysis** — summarising case law, searching precedents, extracting relevant holdings from long judgments - **Contract review and drafting** — identifying unusual clauses, generating first drafts of standard commercial agreements, redlining and comparison - **Client intake and document triage** — routing documents, extracting key facts from client-provided files, intake questionnaires - **Internal knowledge management** — searching internal document archives, precedent banks, and matter files - **Billing and time entry support** — generating narrative descriptions from time logs and file notes Most German law firms that have moved beyond experimentation use AI in a **tiered model**: general, non-client-specific tasks in one tier, and carefully scoped client-matter tasks in another. The more sensitive the matter, the more restricted the AI access. ## What German Professional Rules Say About AI — BRAO and BORA The **Bundesrechtsanwaltsordnung (BRAO)** is the primary professional conduct framework for German lawyers. It does not prohibit AI use, but it creates obligations that directly affect how AI may be used in legal practice. **Section 43a BRAO — Confidentiality** The core confidentiality obligation covers all information entrusted to the lawyer in the course of professional activity. When an AI tool is an external service, any transfer of confidential client data to that tool must be consistent with this obligation. The **Bundesrechtsanwaltskammer (BRAK)** confirmed in its December 2024 AI guidance that professional secrecy analysis is required before deploying AI tools that process matter-related information. **Section 43e BRAO — Outsourcing to External Service Providers** Where a lawyer engages an external provider to process confidential information, Section 43e requires a written contract that: - commits the provider to confidentiality - limits processing to the agreed purpose - includes deletion or return of data after the engagement - ensures the provider’s employees are bound by equivalent secrecy obligations For practical purposes, this means an AI vendor agreement for a law firm must go further than a standard GDPR DPA. The **Section 43e content** is an additional layer on top of data protection law. **Berufsordnung für Rechtsanwälte (BORA)** The BORA imposes further conduct obligations including competence requirements. A lawyer who uses AI-generated legal analysis without review risks violating their **duty of diligent professional conduct**. Delegating judgment to an AI system does not transfer liability. ## GDPR and DSGVO for Law Firms Using AI Alongside professional conduct rules, German law firms face **GDPR obligations** any time client data — which almost always includes personal data — is processed by an AI tool. ### DPA Requirements If an AI provider processes personal data on behalf of the law firm, the firm is typically the **data controller** and the provider the **processor**. This requires a **data processing agreement (DPA)** or **Auftragsverarbeitungsvertrag (AVV)** under **Article 28 GDPR**. The DPA must address: - subject matter and duration of processing - nature and purpose of processing - type of personal data and categories of data subjects - obligations and rights of the controller - sub-processor chains and approval mechanisms - deletion or return of data on termination Most enterprise AI vendors (OpenAI, Anthropic, Microsoft, Google) provide DPA templates. However, **signing a DPA is not the same as having a compliant processing arrangement**. Firms must verify the actual data flows match what the DPA describes. ### Cross-Border Transfers Many AI providers process data outside the EEA, or use sub-processors located outside the EEA. This triggers **Chapter V GDPR requirements** for international transfers. The primary legal mechanisms are **Standard Contractual Clauses (SCCs)** and adequacy decisions. Firms should ask each AI vendor: - Where are prompts, files, and outputs processed or stored? - Which sub-processors are involved, and where are they located? - Is EU/EEA data residency available, and at what level (infrastructure vs. logical)? - Does the vendor use data for model training, and how is this controlled? ### Data Protection Impact Assessments Where AI processing creates a **high risk to individuals** — for example, large-scale processing of sensitive personal data, systematic profiling, or automated outputs that affect individual rights — an **Article 35 GDPR DPIA** may be required. Law firm AI deployments involving client health data, criminal records, or employee personal data in volume warrant careful analysis. ## Best AI Tools for German Law Firms German law firms are using AI tools across several categories. Each category has different compliance implications. ### AI Legal Research Tools - **Perplexity Enterprise** — web-based research with cited sources; enterprise version offers data protection controls and DPA. Suitable for open legal research, not for loading confidential matter documents. - **Lexis+AI, Westlaw AI** — established legal database providers with AI search layers; contractual frameworks designed for professional use ### AI for Contract Review and Drafting - **Claude Enterprise (Anthropic)** — strong analytical and drafting capabilities; enterprise DPA available, EU data residency options. Suitable for contract analysis when configured correctly. See the [Claude Enterprise legal guide](https://compound.law/en-DE/tools/claude-enterprise/) for procurement details. - **GPT-4 via OpenAI API** — widely used for document drafting; requires careful configuration for law firm use. See the [AI APIs for law firms guide](https://compound.law/en-DE/compliance/ai-apis-for-law-firms-germany/) for the full analysis. ### AI APIs for Custom Legal Solutions Law firms building internal tools or custom workflows increasingly turn to **AI APIs** rather than off-the-shelf tools. This provides more control over data handling, prompt engineering, and integration with existing matter management systems. - **Anthropic API** — available with DPA and SCCs; see [Anthropic API legal guide](https://compound.law/en-DE/tools/anthropic-api/) - **OpenAI API** — DPA available; European data residency documented for eligible API deployments; see [OpenAI API legal guide](https://compound.law/en-DE/tools/openai-api/) The [AI APIs for German law firms compliance guide](https://compound.law/en-DE/compliance/ai-apis-for-law-firms-germany/) covers the provider comparison in detail. ### AI for the Legal Industry — EU AI Act Considerations The **EU AI Act** classifies most legal research and drafting tools as **minimal or limited risk** AI systems. However, AI systems used to assist in judicial or quasi-judicial decisions, or systems that evaluate individuals’ legal situations in ways that significantly affect their rights, may attract higher-risk classification. Law firms using AI for [legal services under the AI Act](https://compound.law/en-DE/ai-act/legal-services/) should check whether their specific use case crosses into the high-risk tier. ## What to Check Before Adopting an AI Tool Before rolling out any AI tool in a German law firm, work through this compliance checklist: 1. **Data classification** — define which matter data may and may not be processed by the tool 2. **DPA / AVV** — obtain and review the vendor’s data processing agreement 3. **Section 43e BRAO contract review** — verify the contract includes confidentiality, purpose limitation, and deletion commitments 4. **EU data residency** — confirm where data is processed and stored, including sub-processors 5. **Training data opt-out** — verify whether the vendor uses inputs for model training and how to disable it 6. **Sub-processor list** — obtain a current list of sub-processors and assess EEA exposure 7. **DPIA screening** — assess whether the use case triggers an Article 35 GDPR obligation 8. **Internal usage policy** — document permitted use cases, prompt guidelines, and human review requirements 9. **Access controls** — restrict AI tool access to fee earners with a need to use it for the specific matter type 10. **Competence and supervision** — ensure lawyers using AI tools review outputs before relying on them professionally ## How Compound Law Helps Law Firms with AI **Compound Law** advises German law firms and legal departments on the legal and compliance framework for AI adoption. Our work includes: - **DPA and AVV review** for AI tool procurement - **Section 43e BRAO compliance analysis** for AI vendor relationships - **GDPR DPIA support** for law firm AI deployments - **AI Act classification** for legal technology use cases - **Internal AI policy drafting** for law firms deploying LLMs in practice If your firm is evaluating AI tools or building an internal compliance framework for AI in legal practice, [get in touch with Compound Law](https://compound.law/en-DE/#booking). *** ### Frequently Asked Questions #### Can German lawyers use ChatGPT or Claude for client work? Yes, in principle — but not without safeguards. Consumer versions of ChatGPT or Claude are not suitable for confidential client data. Enterprise or API versions with DPAs, EU data residency configurations, and training opt-outs are the appropriate path. Even then, lawyers remain professionally responsible for all outputs. #### What does BRAO say about using AI in legal practice? BRAO does not prohibit AI use in German legal practice. **Section 43a** requires protection of confidential information. **Section 43e** governs outsourcing arrangements with external providers who access confidential data, requiring a specific written contract. The **BRAK December 2024 guidance** confirmed that these obligations apply to AI tool adoption. #### Do German law firms need an AVV (DPA) with their AI providers? Yes, where personal data is processed. An AVV under **Article 28 GDPR** is required. But a DPA alone is not sufficient — law firms also need the **Section 43e BRAO contract layer**, cross-border transfer safeguards, and a verified sub-processor chain. #### Is there a GDPR-compliant AI tool for legal research? Several enterprise-grade tools can be configured to meet GDPR requirements. **Perplexity Enterprise**, **Claude Enterprise**, and **Azure OpenAI with European data residency** are among those commonly assessed by German law firms. Compliance depends on the specific configuration and use case, not just the vendor’s general terms. #### What are the risks of AI use in Kanzleien under German law? The primary risks are: professional liability for unchecked AI errors; confidentiality breaches under **Section 43a BRAO**; GDPR violations if client personal data crosses borders without adequate safeguards; and potential scrutiny from the **Rechtsanwaltskammer** if AI-assisted work is identified and not properly supervised. A documented operating model is the best protection against all four. ## You might also like [![Marc Schuba and Philipp Brandt, new partners at Compound Law](https://compound.law/assets/images/news/two_partners_editorial.webp)](https://compound.law/en-DE/news/two-new-partners/) [Team](https://compound.law/en-DE/news/two-new-partners/) ### [AI-native law firm Compound Law appoints Marc Schuba and Philipp Brandt as partners](https://compound.law/en-DE/news/two-new-partners/) [White & Case alumnus Marc Schuba joins as founding partner and Philipp Brandt as partner, launching a restructuring and insolvency practice and expanding IT and AI law, data protection and IP.](https://compound.law/en-DE/news/two-new-partners/) [![Dr. Markus Dreißigacker Joins Compound Law](https://compound.law/assets/images/news/markus_dreissigacker_editorial.webp)](https://compound.law/en-DE/news/markus-dreissigacker-joins/) [Team](https://compound.law/en-DE/news/markus-dreissigacker-joins/) ### [Dr. Markus Dreißigacker Joins Compound Law as Of Counsel](https://compound.law/en-DE/news/markus-dreissigacker-joins/) [Dr. Markus Dreißigacker joins Compound Law as Of Counsel: two decades of in-house M\&A and compliance leadership at Bruker, JDE Peet's, and Kellogg's meet the AI law firm.](https://compound.law/en-DE/news/markus-dreissigacker-joins/) [![Employment law in Germany for employers reviewing contracts and workplace rules](https://compound.law/assets/images/news/employment-desk.webp)](https://compound.law/en-DE/news/employment-law-germany/) [Guides](https://compound.law/en-DE/news/employment-law-germany/) ### [Employment Law in Germany: Contracts, Termination, and Works Councils](https://compound.law/en-DE/news/employment-law-germany/) [Employment law in Germany explained for employers: contracts, working time, leave, dismissal protection, works councils, and data rules for business operations.](https://compound.law/en-DE/news/employment-law-germany/) [![Commercial contracts in Germany for B2B companies](https://compound.law/assets/images/news/commercial-folder.webp)](https://compound.law/en-DE/news/commercial-contracts-germany/) [Guides](https://compound.law/en-DE/news/commercial-contracts-germany/) ### [Commercial Contracts in Germany: Key Clauses, Risks, and Review Triggers](https://compound.law/en-DE/news/commercial-contracts-germany/) [Commercial contracts in Germany need more than a template. Businesses should review liability, termination, data protection, and mandatory German contract rules before signing.](https://compound.law/en-DE/news/commercial-contracts-germany/) [![Intellectual property law in Germany for businesses](https://compound.law/assets/images/news/ip-protection.webp)](https://compound.law/en-DE/news/intellectual-property-law-germany/) [Guides](https://compound.law/en-DE/news/intellectual-property-law-germany/) ### [Intellectual Property Law in Germany: What Businesses Should Protect](https://compound.law/en-DE/news/intellectual-property-law-germany/) [Intellectual property law in Germany covers trademarks, copyright, patents, designs, trade secrets, ownership, licensing, and enforcement for businesses.](https://compound.law/en-DE/news/intellectual-property-law-germany/) [![AI recruitment in Germany with GDPR, AI Act and works council compliance](https://compound.law/assets/images/news/ai-recruiting.webp)](https://compound.law/en-DE/news/ai-recruitment-germany/) [Guides](https://compound.law/en-DE/news/ai-recruitment-germany/) ### [AI Recruitment in Germany: GDPR, AI Act and Works Council Rules (2026)](https://compound.law/en-DE/news/ai-recruitment-germany/) [AI recruitment in Germany is legal only with human review, clear GDPR notices, and HR governance before the AI Act high-risk rules apply on August 2, 2026.](https://compound.law/en-DE/news/ai-recruitment-germany/) ## Frequently asked questions In principle yes, but only with strict safeguards. Confidential client data should not be entered into consumer AI tools. Enterprise APIs with DPAs, EU data residency, and opt-out from training provide a defensible path. BRAO does not prohibit AI but imposes obligations. Section 43a requires confidentiality protection. Section 43e governs contracts with external service providers who access confidential information. The BRAK issued guidance in December 2024 clarifying these obligations. Yes, if personal data is processed. A DPA is necessary but not sufficient — firms also need cross-border transfer safeguards, sub-processor review, and data deletion terms. Several tools offer compliant configurations. Perplexity Enterprise, Claude Enterprise, and Azure OpenAI with European data residency are commonly considered. Compliance depends on how the tool is configured, not just the vendor's general offering. Professional liability for AI-generated errors, confidentiality breaches under BRAO, GDPR violations if client data leaves the EEA without safeguards, and regulatory scrutiny from bar associations reviewing AI-assisted legal work. ## Ready to get started? Tell us what you need and we’ll send a fixed-price quote by email. 1h response. Prefer to talk? Book a call on the calendar. [Get a quote](https://compound.law/en-DE/quote/) ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "Organization", "LegalService" ], "@id": "https://compound.law/#organization", "name": "Compound Law", "alternateName": "Compound Law — AI Law Firm", "url": "https://compound.law/", "logo": { "@type": "ImageObject", "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png", "width": 1024, "height": 1024 }, "image": "https://compound.law/assets/images/og-image.webp", "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.", "foundingDate": "2026", "founder": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] } ], "employee": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] }, { "@type": "Person", "name": "Marc Schuba", "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)", "url": "https://compound.law/en-DE/lawyers/marc-schuba/", "sameAs": [ "https://www.linkedin.com/in/marcschuba/" ], "knowsAbout": [ "IP and IT law", "SaaS and IT contracts, IT outsourcing", "Software and open-source licensing", "Data protection law (GDPR)", "AI law and the EU AI Act" ] }, { "@type": "Person", "name": "Dr. Markus Dreißigacker", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/", "sameAs": [ "https://www.linkedin.com/in/markusdreissigacker" ], "knowsAbout": [ "M&A (Due diligence, post-merger integration, IPO readiness)", "Corporate Law (Governance, board work, restructuring)", "Commercial Law (Customer contracts, supplier agreements, NDAs)", "IP (Trademark management, IP transfer agreements)", "Compliance & ESG (Global compliance programs, human rights, sustainability)", "Data Protection (GDPR strategy, DPO experience, privacy programs)" ] }, { "@type": "Person", "name": "Philipp Brandt", "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law", "url": "https://compound.law/en-DE/lawyers/philipp-brandt/", "sameAs": [ "https://www.linkedin.com/in/philipp-brandt-81b446a/" ], "knowsAbout": [ "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)", "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)", "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)", "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Berlin", "addressCountry": "DE" }, "areaServed": [ "Germany", "Austria", "Switzerland", "European Union", "United Kingdom", "United States", "Singapore" ], "availableLanguage": [ "de", "en" ], "serviceType": [ "AI law firm", "AI-native legal services", "legal counsel for start-ups and growth companies", "legal counsel for mid-sized companies and corporates", "Commercial Law", "Corporate Law", "Employment Law", "Regulatory & Compliance", "Intellectual Property", "Insolvency & Restructuring" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Compound Law services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Commercial Contracts", "description": "Battle-tested contracts for your sales process", "serviceType": [ "enterprise contracts", "MSA", "DPA", "sales contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "International Employment", "description": "Compliant hiring across borders", "serviceType": [ "international employment", "hiring abroad", "employment contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "VSOP/ESOP Setup", "description": "Employee participation that actually works", "serviceType": [ "VSOP", "ESOP", "employee stock options", "equity incentives" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Funding Round Support", "description": "Clean legal for your next raise", "serviceType": [ "funding round", "term sheet", "SHA", "due diligence", "cap table" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate Housekeeping", "description": "Get your legal house in order", "serviceType": [ "corporate governance", "board resolutions", "shareholder register" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Data Protection & Privacy", "description": "GDPR compliance that doesn't slow you down", "serviceType": [ "GDPR", "data protection", "privacy", "DPA", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Act Compliance", "description": "Navigate EU AI regulation", "serviceType": [ "AI Act", "AI compliance", "AI governance", "EU AI regulation" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "IP & Competition", "description": "Protect and enforce what you've built", "serviceType": [ "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Fractional General Counsel", "description": "In-house legal without the full-time cost", "serviceType": [ "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "FinTech Compliance", "description": "Navigate financial regulation", "serviceType": [ "fintech compliance", "BaFin", "banking regulation", "AML", "KYC" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Legal Retainer", "description": "Predictable legal support when you need it", "serviceType": [ "legal retainer", "legal subscription", "ongoing legal support" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "M&A Preparation", "description": "Get ready for acquisition interest", "serviceType": [ "M&A preparation", "acquisition", "due diligence", "exit" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Restructuring & Insolvency", "description": "From the first liquidity check to the restructuring itself", "serviceType": [ "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } } ] }, "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "email": "contact@compound.law", "availableLanguage": [ "English", "German" ], "areaServed": [ "DE", "AT", "CH", "EU", "GB", "US", "SG" ] }, "email": "contact@compound.law", "sameAs": [ "https://www.linkedin.com/company/compoundlawfirm", "https://x.com/CompoundLawFirm" ], "knowsAbout": [ "Commercial Contracts", "enterprise contracts", "MSA", "DPA", "sales contracts", "International Employment", "international employment", "hiring abroad", "employment contracts", "VSOP/ESOP Setup", "VSOP", "ESOP", "employee stock options", "equity incentives", "Funding Round Support", "funding round", "term sheet", "SHA", "due diligence", "cap table", "Corporate Housekeeping", "corporate governance", "board resolutions", "shareholder register", "Data Protection & Privacy", "GDPR", "data protection", "privacy", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR", "AI Act Compliance", "AI Act", "AI compliance", "AI governance", "EU AI regulation", "IP & Competition", "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance", "Fractional General Counsel", "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer", "FinTech Compliance", "fintech compliance", "BaFin", "banking regulation", "AML", "KYC", "Legal Retainer", "legal subscription", "ongoing legal support", "M&A Preparation", "M&A preparation", "acquisition", "exit", "Restructuring & Insolvency", "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "AI for Law Firms in Germany: Tools, Compliance, and BRAO", "description": "A practical guide for German law firms and lawyers on using AI tools legally — BRAO, GDPR, confidentiality rules, and which AI tools work in practice.", "image": "https://compound.law/assets/images/news/ai-law-firms.webp", "datePublished": "2026-04-05T00:00:00.000Z", "dateModified": "2026-04-05T00:00:00.000Z", "author": { "@type": "Person", "name": "Dr. Markus Dreißigacker", "image": "https://compound.law/assets/images/team/markusdreissigacker.webp" }, "publisher": { "@type": "Organization", "@id": "https://compound.law/#organization", "name": "Compound Law" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://compound.law/en-DE/news/ai-for-law-firms-germany/" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://compound.law/en-DE/" }, { "@type": "ListItem", "position": 2, "name": "News", "item": "https://compound.law/en-DE/news/" }, { "@type": "ListItem", "position": 3, "name": "AI for Law Firms in Germany: Tools, Compliance, and BRAO", "item": "https://compound.law/en-DE/news/ai-for-law-firms-germany/" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Can German lawyers use ChatGPT or Claude for client work?", "acceptedAnswer": { "@type": "Answer", "text": "In principle yes, but only with strict safeguards. Confidential client data should not be entered into consumer AI tools. Enterprise APIs with DPAs, EU data residency, and opt-out from training provide a defensible path." } }, { "@type": "Question", "name": "What does BRAO say about using AI in legal practice?", "acceptedAnswer": { "@type": "Answer", "text": "BRAO does not prohibit AI but imposes obligations. Section 43a requires confidentiality protection. Section 43e governs contracts with external service providers who access confidential information. The BRAK issued guidance in December 2024 clarifying these obligations." } }, { "@type": "Question", "name": "Do German law firms need an AVV (DPA) with their AI providers?", "acceptedAnswer": { "@type": "Answer", "text": "Yes, if personal data is processed. A DPA is necessary but not sufficient — firms also need cross-border transfer safeguards, sub-processor review, and data deletion terms." } }, { "@type": "Question", "name": "Is there a GDPR-compliant AI tool for legal research?", "acceptedAnswer": { "@type": "Answer", "text": "Several tools offer compliant configurations. Perplexity Enterprise, Claude Enterprise, and Azure OpenAI with European data residency are commonly considered. Compliance depends on how the tool is configured, not just the vendor's general offering." } }, { "@type": "Question", "name": "What are the risks of AI use in Kanzleien under German law?", "acceptedAnswer": { "@type": "Answer", "text": "Professional liability for AI-generated errors, confidentiality breaches under BRAO, GDPR violations if client data leaves the EEA without safeguards, and regulatory scrutiny from bar associations reviewing AI-assisted legal work." } } ] } ] ```