Blocking a leak is one job. Proving how the firm used AI is another.
Data-loss prevention tools for AI, from vendors such as Nightfall, Harmonic Security and Microsoft Purview, watch what people type into ChatGPT and stop sensitive data leaving. They're built for companies with a security team. Candor catches client details too, and then does the part a law firm is actually asked about: the matter log, the attorney's sign-off, and the record.
| Feature | AI data-loss tools | Candor |
|---|---|---|
| Who it's built for | Companies with an IT or security team | Law firms without an IT department |
| Catching sensitive data before it reaches an AI tool | Yes: broad detection of personal, health, payment and secret data, often with blocking | Yes: client names, Social Security, policy and account numbers, dates of birth, medical terms and dollar figures, flagged in the browser with a redacted copy |
| How it's installed | Usually managed devices, endpoint agents or a managed browser, set up by IT | Sign up online; staff pair the browser panel in one click, or IT installs it for everyone |
| Matter-by-matter log of AI use | Not its job | Every use filed to its matter: tool, task, who, when |
| Attorney sign-off | Not its job | A sign-off queue, with the attorney's verification statement recorded |
| Citations that may need a second look | Not its job | Flags cited cases that may need a second look (CourtListener) |
| A report for the malpractice carrier | Not its job | A renewal questionnaire and firm summary built from the record |
| Pricing | Varies by vendor; mostly sold to enterprise security teams | Published: $3,000–$20,000 a year by attorney count, staff free |
This compares the general category, not any one product; each vendor's features differ. If you have a security team and need company-wide data controls, an AI data-loss tool fits, and it can run alongside Candor. If you need to show a carrier or a court how your firm used AI on client matters, that's Candor.
“Blocked” isn't an answer a carrier can use.
A carrier's renewal questions are about process: which tools, on which matters, who reviewed the output, and whether citations were checked. A blocked paste leaves no answer to any of them. Candor screens first, then keeps the answers as the work happens.