WorkflowLegal Operations & Litigation

Legal Intake & Triage

Legal intake software that answers the routine questions and sends anything risky to a lawyer first

Routine questions answered in minutes; anything risky reaches a lawyer first.

See one case, screen by screen ↓
demo1 min 12 sto a cited yesfor a sales manager's NDA in Slack: 14 of 14 clauses compared with the template, 3 of 3 sentences checked
demo38%of 4,212 requests in the sample quarter answered by self-service, in a median of 3 minutes
target100%of high-risk requests reach a lawyer before any automated answer
demo16near-missesfirst read as routine and pulled out by the risk sentinel since go-live — none reached a requester
In short

What is Legal Intake & Triage?

Legal intake software that gives the business one front door to Legal. Eight agents read every request from email, Slack, Teams, forms, Salesforce and the ethics line, classify it, answer the routine ones from the legal playbook with the passage cited, and route the rest to the right lawyer or to outside counsel. Anything risky reaches a lawyer first.

How to choose AI solutions for back-office and enterprise work →

Updated

The problem

Why Legal can't count its own demand, and why the risky request waits

Business teams ask Legal hundreds of questions a week, through the shared legal mailbox, Slack DMs, Teams chats, intranet forms and a button in Salesforce. Most are routine: can I sign this NDA, what is my signing limit, can I accept these tickets, where is the template. Lawyers answer them by hand, one at a time, and because nothing is counted, nobody can say how many arrive, of what type, from which business unit or how long each one waits. Work goes to whoever answers first, so one lawyer is overloaded while another has room.

A few requests are dangerous, and they arrive in the same channels in the same casual words. A cease-and-desist letter forwarded as “can we just tweak the colour?” looks like a marketing question. A whistleblower's report in a shared mailbox breaks confidentiality. A data leak mentioned in a chat can start the 72-hour clock to notify the authority under GDPR Art. 33 without anyone seeing it, and an internal report under the EU Whistleblowing Directive must be acknowledged within 7 days. Outside counsel gets instructed by phone call, without a brief, a budget or a conflict check.

typical83%of legal departments expect demand for legal services to rise
typical34%plan to meet rising demand by automating routine tasks
typical33%plan to implement legal intake technology in the next year
Where a routine answer's minutes goestimated
By hand45 days
With the solution2.7 days
  • Reading the message and its attachment8 → 0.5 d
  • Working out who is asking, their grade and authority5 → 0.2 d
  • Finding the policy, template or playbook passage10 → 0.5 d
  • Comparing the attachment with our template10 → 0.5 d
  • Writing and sending the answer8 → 0.5 d
  • Chasing, logging and filing4 → 0.5 d

Estimated split of the about 45 minutes a routine answer takes a lawyer by hand (the demo company's own baseline), and the minutes left with the solution, where the agents read, check and answer and legal operations reviews a weekly sample.

How it works

How a request moves

Eight agents read, classify, screen, answer, check and route every request; counsel decides everything that is not routine.

What comes in
Requests in6 channels · email, Slack, Teams, form, Salesforce, ethics line
Agents at work
Intake readerany channel
Then
Classifier24 types
Risk sentineltripwires first
Then
Playbook answererpassage cited
Answer checkersecond agent
Then
Routerexpertise + load
Referral agentbrief + budget
A person decides
In-house counselsends advice, accepts urgent work
What comes out
Cited answer
Lawyer assigned
Risk escalated
One case, step by step

One Wednesday morning at the legal front door

Kestrel & Vane Group — about 40,000 people in 30 countries, one legal team of about 40. Since 07:00 on Wednesday 14 October, 38 requests have arrived from six channels. Here is how the people who ask, the agents and the lawyers work them, screen by screen, in the working solution.

  1. 0109:31 · Slack

    He asks in his own words and gets a cited yes

    Leo Park · Sales manager

    Leo messages Legal in Slack: “Can I sign this NDA with Brightwell Analytics? It's the one they sent back from our template.” He attaches the 4-page Word file and fills in no form. At 09:32 the reply lands in the same thread: yes, it is the mutual NDA template v4.2 with all 14 clauses unchanged, and at grade M3 he may sign it — each sentence carries its playbook passage. Later he asks about supplier tickets and gets the gifts limit, cited.

    “Yes, you can sign it. It is our mutual NDA template v4.2 and all 14 clauses are unchanged. As a sales manager at grade M3 you may sign mutual NDAs on our template.”

  2. 021 min 12 s

    Five agents prove “it's our paper” before anyone says yes

    Intake reader, classifier, risk sentinel, playbook answerer, answer checker

    The intake reader takes Leo's grade and business unit from the HR directory. The classifier reads it as NDA on our paper at 0.97. The risk sentinel scans the message and all 1,912 words of the attachment against 7 tripwire families and screens Brightwell Analytics Ltd for sanctions: clear. The playbook answerer compares the document with template NDA-M v4.2 — 14 of 14 clauses match, no tracked changes, no hidden text, 2-year term, Illinois law. The answer checker confirms 3 of 3 sentences, and that grade M3 meets the M2 that SA-3 §2.1 requires.

    An answer goes out only when the type is on the self-service list, no tripwire is found, confidence is at least 0.92 and the second agent agrees.

  3. 03Meanwhile · the front door

    Every request read and sorted into four lanes

    Nadia Brennan · Head of Legal Operations

    Nadia's front door shows the morning: 14 requests by email, 8 on Slack, 8 on Teams, 5 by form, 2 from Salesforce and 1 on the ethics line. One duplicate was merged and one IT question sent to the service desk. The other 36 sit in four lanes — 15 answered by self-service, 7 drafted for a lawyer to send, 12 routed to a lawyer (4 urgent) and 2 sent to outside counsel — each with the type it was read as, its confidence and the passage it used.

    “Every legal request, read, sorted, answered or assigned.”

  4. 0409:34 · Teams

    A cease-and-desist letter, caught in casual words

    Risk sentinel

    Brand manager Jonas Lind asks whether marketing can “just tweak the colour on the next print run” and attaches a 3-page letter from Vellum Brands' lawyers. The classifier's first read is Marketing · packaging change at 0.61. The risk sentinel finds tripwire RT-1: “cease and desist” and “trade dress infringement” on page 1, the Lanham Act §43(a) on page 2, a reply demanded by 28 October on page 3. It pulls the request out of self-service, marks it urgent — counsel within the hour — and at 09:35 Jonas gets the approved holding reply.

    Holding reply HR-2: “Until she does, please don't reply to the sender, don't change the packaging, and don't discuss the letter outside your team.”

  5. 05One minute later

    Assigned to Amara Osei, with the reason shown

    Router

    The router scores the candidates on expertise, jurisdiction, load and continuity. Amara Osei — Disputes & IP, US, 74% loaded, no conflict — scores 0.91. Sienna Clarke covers the UK and EU only (0.64), Daniel Kwan is at 118% (0.38) and Rahul Mehta is out until Monday 19 October. When Jonas forwards the same letter by email at 09:36, the intake reader merges it into the same request.

    Why this lawyer: “Disputes & IP · US · 74% · no conflict · 0.91.”

  6. 0609:41 · Accepted

    She accepts and issues the preservation notice

    Amara Osei · Senior Counsel, Disputes & IP

    The risk sentinel has already said the duty to preserve has probably begun. Amara accepts, opens the recommended notice HN-2026-0431, checks the custodians — Jonas Lind, Ana Ruiz from packaging design and the Brand/AeroClean shared folder — and suspends deletion on mail and Teams for the custodians and on the print-vendor proof portal. One click, and it is logged.

    The risk sentinel never decides the legal question; counsel does.

  7. 07A brief, not a phone call

    Outside counsel briefed with a firm, rates and a budget

    Referral agent

    Amara asks for outside help. The referral agent drafts the brief: the facts from the letter, what we need, the 28 October deadline, the documents including the preservation notice, and a conflict check that is clear on our list. It proposes Harwood Lyle LLP from the panel — partner $1,150 an hour, 12 of our matters, 92% on budget — with a phase-1 cap of $40,000. Over $25,000, so it waits for Deputy GC Elena Petrova to approve with a reason code.

    The referral agent cannot instruct a firm; the Deputy GC approves anything over $25,000.

  8. 08The same morning

    Every escalation with the clock it started

    Sofia Marin · Chief Ethics & Compliance Officer

    The urgent view holds what the sentinel escalated. A safety inspector is on site at the Dayton plant. A protected ethics report is visible to Ethics & Compliance only, with acknowledgement due Wed 21 Oct (7 days) and feedback by Tue 12 Jan 2027. A field app showed one customer's technician data to another: notify the authority by Sat 17 Oct 09:12. A distributor quote for re-export to Iran is blocked until cleared. None was answered by self-service.

    “Details and reporter visible to Ethics & Compliance only.”

  9. 09Week 41 sample

    One disagreement pauses one type in one country

    Nadia Brennan · Head of Legal Operations

    The demand analyst drew 25 of the week's 388 self-service answers at random. Nadia disagrees with item 19: football tickets from a supplier at R$650 each were allowed under the global €150 limit, but the Brazil addendum to the gifts policy sets R$500 per person per event. The analyst proposes pausing gifts self-service for Brazil and drafts a fix to GH-2 for its owner, Sofia Marin. She signs off the week.

    Proposed by the demand analyst: “pause GH-2 self-service for Brazil.”

  10. 10The quarter

    Legal counts its demand for the first time

    Nadia Brennan and the General Counsel

    In Q3, the first quarter since go-live: 4,212 requests, 38% answered by self-service in a median of 3 minutes — it was 1.8 days — and a median of 4 minutes to assign the rest. 96.4% inside SLA, and 167 of 167 high-risk requests reached a lawyer first. Demand is broken down by type, business unit and source, with the estimated lawyer time released shown with its working.

Who it’s for

Built for everyone who asks Legal, and everyone who answers.

The same front door, seen by five of the people who use it — what their week looked like, and what it looks like now.

NB
Nadia BrennanHead of Legal Operations · Chicago · owns intake, the playbook and the self-service rules
Head of Legal Operations
Before
“I can't staff a team on a mailbox I can't count.” Requests land in a shared mailbox and personal chats, and nobody can say how many arrive or of what type.
Now
Sees every request by type, business unit, source and cycle time; decides which types may be answered without a lawyer, per country; reviews and signs a random sample every week.
AO
Amara OseiSenior Counsel, Disputes & IP · Chicago
Senior Counsel, Disputes & IP
Before
“Show me the threat letters first, and only those.” A cease-and-desist letter can arrive as a marketing question and wait in a shared queue.
Now
Gets the threat letter within minutes, with the words that tripped it quoted by page, the deadline, the holding reply already sent and a preservation notice ready to issue.
LP
Leo ParkSales Manager · Kestrel Industrial · signs about six NDAs a month
Sales manager
Before
“I just need to know if I can sign it.” Waits on Legal for a yes on an NDA that is already on our paper.
Now
Asks in Slack in his own words and gets a cited answer in the same thread, and follows every request he has open with its status and owner.
EP
Elena PetrovaDeputy General Counsel · approves referrals and changes to self-service
Deputy General Counsel
Before
“No one sends work to a firm without a brief and a budget.” Referrals went out by phone call, without a brief, a budget or a conflict check.
Now
Approves each referral over $25,000 from a written brief with the firm, its rates, the conflict check and a phase cap, and co-signs every type added to self-service.
SM
Sofia MarinChief Ethics & Compliance Officer · the only reader of protected reports
Chief Ethics & Compliance Officer
Before
“A whistleblower's name must never land in a shared queue.”
Now
Receives protected reports alone, with the reporter's identity hidden from everyone else and the 7-day acknowledgement and 3-month feedback clocks running.
Built on the engine

8 agents. Each with one job, and hard limits.

Eight agents read, classify, screen, answer, check and route every request; counsel decides everything that is not routine.

Intake reader

Reads every request in every channel, with attachments and forwarded threads; finds the requester in the HR directory, the business unit, counterparty, ask and deadline; merges duplicates and redirects requests that are not legal.

  • Never answers a request
  • Never drops one — redirects are logged and the requester is told
Classifier

Reads each request as one of 24 request types, with its urgency and a confidence score.

  • Below 0.92 confidence, never sends a request to self-service
Risk sentinel

Scans every message and attachment for tripwires — threat of litigation, regulator or inspector contact, ethics reports, data incidents, sanctions, competitor contact, court process — pulls the request out of self-service, sets its urgency, starts the clock it implies, takes the protected route and recommends preservation.

  • Cannot be switched off for any request type
  • Never decides the legal question
  • Never reveals a protected reporter
Playbook answerer

Answers the types allowed for self-service from the legal playbook and drafts the rest for a lawyer, citing the passage it used and comparing attachments with the template.

  • Answers only types and countries on the self-service list
  • Never invents a passage
Answer checker

Verifies every sentence of an answer against its passage and the requester's own facts: the attachment clause by clause, their grade and signature authority, the gift value against the limit for their country.

  • Can only block an answer or turn it into a draft for a lawyer
  • Never sends an answer on its own
Router

Assigns each request by expertise, jurisdiction, load, absence and conflicts, shows why this lawyer, and proposes a rebalance when someone passes 100%.

  • Paralegals prepare; only counsel sends advice
  • Rebalances need legal operations
Referral agent

Writes the outside-counsel brief, proposes a panel firm with its rates and record, asks for the conflict check and drafts the budget and the instruction.

  • Cannot instruct a firm
  • Over $25,000 needs the Deputy GC
Demand analyst

Counts and reports demand, draws the weekly random sample, and clusters the questions no playbook entry answers, drafting new entries from lawyers' past answers.

  • Drafted entries stay off self-service until the owning lawyer approves them
In-house counsel

Sends advice; legal ops sets the rules. The agents propose; a named person decides.

Ask in plain words

Ask about any request, lane, lawyer or rule

Legal operations and counsel can ask in plain words. Answers come from the records, cite them, and open the screen behind them.

Why did the Vellum Brands letter skip self-service?

Because the risk sentinel found tripwire RT-1, threat of litigation. The letter says “cease and desist” and “trade dress infringement” on page 1 and cites the Lanham Act §43(a) on page 2. A tripwire is never answered by self-service, whatever the classifier thinks; its first read was Marketing at 0.61. It went to Amara Osei, urgent, due 10:34.

Which request types could we safely add to self-service?

One looks ready: customer logos in case studies. It was asked 23 times in Q3, and lawyers gave the same answer 21 times; Hannah Weiss would own it. Two others are not legal questions: certificates of insurance (31 asks) should go to Risk & Insurance, and export classification (12) to trade compliance. Adding a type needs the owner and Elena Petrova.

Who has capacity for a sales contract review this week?

Grace Okafor is at 52% and can do first passes on playbook fallbacks, with Daniel Kwan sending. Chloe Brandt is at 71% and is cross-trained on sales terms. Daniel himself is at 118%. The router has proposed a rebalance that brings him to 96%.

Draft the Q3 demand summary for the GC

Q3: 4,212 requests; 38% answered by self-service in a median of 3 minutes; 167 high-risk requests, all with a lawyer first; NDAs (812) and contract reviews (1,059) were the biggest load. The full summary is open for you to send.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

The front doorEvery request from six channels, read on arrival and sorted into four lanes: answered by self-service, drafted for a lawyer, routed to a lawyer and sent to outside counsel.
What requesters seeA business requester asks Legal in Slack in their own words: routine questions answered in the thread with the passage cited, a data leak sent straight to privacy counsel.
A self-service answer, provenThe NDA as it arrived, compared clause by clause with the template, every fact the agents read with its source, each agent's step, and the two passages cited.
A threat letter, pulled outThe cease-and-desist letter with the tripwire words quoted by page, the deadline, the holding reply sent, and why the router chose this lawyer.
Preservation noticeThe notice the risk sentinel recommended: custodians and the systems where deletion is suspended, issued by counsel in one step.
Outside counsel briefFacts, the ask, the deadline and documents, the panel firm with its rates and record, the conflict check, a phase-1 budget and the Deputy GC's approval.
Urgent escalationsEvery escalation with its tripwire, the words that tripped it, the clock it started and its route — protected ethics reports to Ethics & Compliance only.
Team and workloadEach lawyer's load against capacity, the rebalance the router proposes, why a request went to whom, and the routing rules.
Gaps in the playbookQuestions no playbook entry answers, clustered by the demand analyst, with a drafted entry for the owning lawyer to approve.
Weekly sample review25 self-service answers drawn at random, agreed or disagreed with a reason, and the pause the demand analyst proposes when one is wrong.
DemandRequests by week, type, business unit and source, the self-service rate, cycle times and the estimated lawyer time released, with its working.
Audit trailEvery action by people and agents, in order, each entry sealed to the one before, with the evidence for any request ready to export.
Self-service rulesMinimum confidence, the second-agent check, the contract value ceiling, gift limits by country and the tripwire override.
Governance

Built for legal risk: cited, checked, signed, on the record.

Every answer cites its passageEach self-service answer cites the playbook passage it rests on, and every fact the agents read — the requester's grade, the counterparty, the deadline — names the line, page or system it came from.
Two agents must agreeThe answer checker verifies every sentence against the passage and the requester's facts. Below 0.92 confidence, outside the self-service list or without the checker's agreement, the answer becomes a draft for a lawyer, with the reason shown.
A tripwire always overrides self-serviceThreats of litigation, inspectors, ethics reports, data incidents, sanctions, competitor contact and court process go to counsel first, with the clock they imply. The tripwire rules cannot be switched off for any type.
Protected reports stay protectedEthics reports reach the Chief Ethics & Compliance Officer only, and the reporter's identity is hidden from everyone else, legal operations included.
Named people decideOnly counsel sends advice or accepts routed work. The Deputy GC approves referrals over $25,000 and every type added to self-service. The Head of Legal Operations signs off the weekly random sample, and a disagreement can pause that type in that country.
Every step on a sealed trailEvery arrival, reading, classification, tripwire, answer, approval, reassignment, referral and setting change is recorded with who, what and when, each entry sealed to the one before, and exportable as the evidence for one request.
Configuration

Your risk appetite, not ours

Legal operations sets the front door's rules. Every change is logged, and changes to self-service need the Deputy GC's co-sign.

SettingDefaultChoose from
Minimum confidence for self-service0.92Below this, a request is never answered without a lawyer
Second agent must agreeAlways onLocked: the answer checker verifies every sentence
Contract value ceilingUS$250,000Contracts above this always go to a lawyer
Gift limits by country€150 per person per event; Brazil R$500From the gifts policy and its country addenda
Any tripwireAlways onLocked: 7 tripwire families, phrases you can add, read in every message and attachment
Routing weightsExpertise 40 · load 25 · jurisdiction 20 · continuity 15Backups named per lawyer; protected routes fixed
Response targetsUrgent 1 hour · high 4 hours · standard 1 business dayContract review 3 business days; set by legal operations, logged
Types and countries allowed13 playbook entries, up to 18 countriesSwitched per entry and per country in the playbook, with co-sign
Connections

Works where the business already asks

Request channelsthe legal mailbox, Slack, Teams, an intranet form, a Salesforce button and the ethics line
HR directorygrade, manager, business unit and country for every requester
Playbook and templatesapproved answers with their owners, the template library and the entity register
Contract repository and e-signaturefiles signed NDAs and contracts, and sends signing links for self-service answers
Matter and spend systemopens matters, loads budgets and reads outside-counsel spend
Legal hold and sanctions screeningissues preservation notices and screens every counterparty named in a request
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
100%
of high-risk requests reach a lawyer before any automated answer
167 of 167 in Q3
14 first looked routine
estimated
≈ $1.5Ma year
of lawyer time released from routine answers
By hand≈ 45 min
Self-service≈ 3 min
target
38%
of requests answered in minutes, each counted by type and business unit

“demo” = seen in the working solution, on its sample data · “target” = the design goal, measured in the live solution · “estimated” = our estimate, from the demo company's own baseline of about 45 minutes a routine answer · “typical” = published figures (CLOC 2025 State of the Industry survey via Above the Law — 83% expect demand to rise, 34% plan to automate routine tasks, 33% plan legal intake technology; EU Directive 2019/1937 Art. 9 on the 7-day acknowledgement; GDPR Art. 33 on 72-hour breach notification). People, companies, letters and requests named on this page are fictional — characters and sample data in the working solution.

Questions

What general counsel and legal operations ask us.

What is Legal Intake & Triage?

Legal intake software that gives the business one front door to Legal. Eight agents read every request from email, Slack, Teams, forms, Salesforce and the ethics line, classify it, answer the routine ones from the legal playbook with the passage cited, and route the rest to the right lawyer or to outside counsel. Anything risky reaches a lawyer first.

How is it different from a legal intake form with routing rules?

People ask in their own words, in the channel they already use, and agents read the message and its attachments. A second agent checks every self-service answer against the passage and the requester's facts before it goes out, a risk agent can pull any request out of self-service, and the router explains every assignment.

How does it stop a risky request from being answered automatically?

The risk sentinel reads every message and attachment for tripwires such as a threat of litigation, an inspector on site, an ethics report, a data incident, sanctions, competitor contact or court process. A hit pulls the request out of self-service, marks its urgency, starts the clock it implies and sends it to counsel. The tripwire rule cannot be switched off for any type.

Which legal questions can be answered without a lawyer?

Only the request types legal operations puts on the self-service list, per country — in the demo, things like NDAs on our paper, signing limits, gifts and hospitality, templates, entity information and policy questions. Adding a type needs its owning lawyer and the Deputy GC, and a weekly random sample decides what stays.

How are whistleblower and ethics reports handled?

They take a protected route to Ethics & Compliance only, and the reporter's identity is hidden from everyone else, including legal operations. The acknowledgement and feedback clocks are shown on the request — 7 days and 3 months in the demo, following the EU Whistleblowing Directive.

Does it route requests to the right lawyer?

Yes. The router ranks lawyers by expertise, jurisdiction, load and continuity, skips anyone who is out, and shows why it chose each one. When a lawyer passes 100% of capacity it proposes a rebalance that respects authority, which legal operations applies.

Do lawyers stay in control?

Yes. Only counsel sends advice or accepts routed work, the Deputy GC approves referrals over $25,000 and every change to self-service, and the Head of Legal Operations signs off the weekly sample. The agents never instruct a firm, answer anything a tripwire touched or change a rule.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents — your playbook, templates, signature authority and gift limits, and a sample of past requests — and it goes live once every quality gate has passed. We will walk you through it on your own requests first.

See it on
your legal requests.

We'll run Legal Intake & Triage on a sample of your own legal mailbox and your playbook.