L-S

VEN-05

Legal AI Technology Map

Maps the legal AI vendor landscape across 19 categories, providing quarterly intelligence, Risk Taxonomy 2026 vendor classification, and Agentic Tier governance for technology stack decisions.

ModuleoperationalQuarterlyAdoption lensDefensibility lens

Audience

GC / CLOLegal Operations

1–2 days per quarterly refresh; 3–5 days for annual full-scope review

Executive Summary

The Legal AI Technology Map is the central module for tracking, evaluating, and governing your legal AI technology stack. It structures a rapidly changing market of 650+ solutions across 19 categories, from Tier 1 GPAI providers to specialist legal tools, and connects directly into AI BoM maintenance, GOV-03 Risk Register entries, and STR-07 oversight. The module introduces Risk Taxonomy 2026 vendor classification, a four-pillar evaluation framework (technical performance, legal compliance, business value, vendor viability), and a dedicated Agentic Tier Evaluation Protocol for Level 4 “AI as Executor” tools. It embeds Class 6 Shadow AI screening into every vendor assessment and uses Metric 0 pre-check gates to ensure that AI BoM, risk registers, and policies are current before each quarterly refresh. Outputs include a governed technology map, risk-classified vendor shortlist, and DPS-grade evidence for regulators and clients. Used quarterly with an annual deep-dive, it enables legal leaders to align AI investments with Protect, Comply, Grow, and Transform objectives while maintaining defensible, well-documented control over vendor risk and agentic capabilities.

Metric 0 Pre-Check

Before initiating or updating the technology map, confirm all five gates are satisfied. Do not proceed if any gate fails.

| Gate | Check | Status |

|—|—|—|

| M0.1 — STR-07 Authorisation | AI Task Force has approved the quarterly map refresh cycle | Confirm |

| M0.2 — AI BoM Currency | Organisation AI Bill of Materials is current; all deployed tools are registered | Confirm |

| M0.3 — GOV-03 Alignment | Vendor risk entries in Risk Register are current before landscape assessment begins | Confirm |

| M0.4 — SUS-03 Currency | Latest AI Market Scan Radar (SUS-03) quarterly report is available as input | Confirm |

| M0.5 — GOV-02 Currency | AI Use Policy (GOV-02) is current and reflects latest vendor compliance requirements | Confirm |

All five gates must show Confirmed before the technology map refresh proceeds.

---

Data Currency Notice

Baseline: September 2025. Vendor counts, pricing, and market statistics in this Module reflect data verified through September 2025. Market conditions evolve rapidly — solution counts (650+ at baseline) and vendor positions may have shifted materially. Before board-level reporting or material procurement decisions, verify key statistics against the current SUS-03 AI Market Scan Radar quarterly report and direct vendor sources.

Quantitative claims were validated at baseline against Legal Technology Hub’s June 2025 directory (638 solutions) with Q3 2025 extrapolation; final Q3 counts may vary by 5–10% pending full verification.

---

Purpose

The Legal AI Technology Map gives legal departments a structured framework for tracking, evaluating, and managing the rapidly evolving landscape of AI technologies. It enables organisations to make informed technology decisions, maintain portfolio coherence, and ensure stack alignment with business objectives, regulatory requirements, and AI governance standards.

The modernised version adds:

Risk Taxonomy 2026 Vendor Classification Framework — every technology category assessed against all 9 risk classes; aggregate exposure thresholds and escalation rules.
Agentic Tier Evaluation Protocol — 5-provision governance checklist required for all Level 4 (AI as Executor) tools; deployment gate applies before any agentic tool enters the technology map.
Class 6 Shadow AI screening criterion — whether adopting or not adopting a vendor drives off-channel AI use is assessed for every category.
AI BoM integration — technology map entries are the source record for AI BoM additions; Metric 0 pre-check gates all map refreshes.
DPS Adoption lens evidence — quarterly technology map reports retained as Defensibility Practice Standard evidence.

---

When to Use

Blueprint Stage: Pillar 6 — Vendor Benchmarking and Technology (technology selection and management).
Frequency: Quarterly technology landscape updates; annual full-scope review.
Audiences: General Counsel, Legal Operations.
Operational participants: IT Teams, Procurement, AI Task Force (STR-07), Technology Committees.
Context: Technology strategy planning, vendor selection, competitive analysis, roadmap development, AI BoM maintenance.

---

Module Guide

Defensibility Evidence

Quarterly technology map reports, Risk Taxonomy 2026 vendor assessments, Agentic Tier Evaluation Protocol records, AI BoM registration records, STR-07 technology briefing records, and VEN-04 security assessment records are DPS Adoption and Defensibility lens evidence demonstrating systematic, governed AI technology portfolio management. Retained for 3 years (quarterly map reports) and 7 years (Agentic Tier evaluation and AI BoM records).

Operational Artefacts

VEN-05 Legal AI Technology Map Workbook
xlsx · v2026.1
Gated
Risk Taxonomy 2026 Vendor Classification Template
checklist · v2026.1
Gated
Agentic Tier Evaluation Protocol Form
docx · v2026.1
Gated

Framework Crosswalk

EU AI Act

European Union

Maps vendor evaluations to high-risk system obligations, documentation, transparency, and human oversight requirements; supports evidence for compliance and audit trails.

NIST AI Risk Management Framework

NIST

Operationalises risk identification, measurement, and monitoring for AI vendors, especially across the nine Risk Taxonomy 2026 classes and continuous monitoring activities.

ISO/IEC 42001 AI Management System

ISO

Supports AI management system requirements for inventory, risk controls, monitoring, and continual improvement through structured technology mapping and governance.

ABA Formal Opinion 512 on AI in Law Practice

American Bar Association

Aligns vendor selection and use with professional responsibility duties, including competence, supervision of AI outputs, confidentiality, and client communication.

Operational Details

Inputs

· Current AI Bill of Materials (AI BoM) with all deployed tools registered
· Latest SUS-03 AI Market Scan Radar quarterly report
· GOV-03 Risk Register with up-to-date vendor risk entries
· GOV-02 AI Use Policy and related professional responsibility guidance
· Existing contracts, licences, and security assessments (VEN-04) for AI vendors
· Organisation technology architecture and integration diagrams
· MAT-05 Peer Benchmarking Dashboard outputs where available

Outputs

· Quarterly Legal AI Technology Map covering 19 vendor categories and Tier 1 GPAI providers
· Risk Taxonomy 2026 vendor classification matrix with aggregate exposure scores
· Four-Pillar Evaluation Framework scoring sheets for shortlisted vendors
· Agentic Tier Evaluation Protocol records for all Level 4 tools
· Updated AI BoM entries for evaluated and deployed tools
· Updated GOV-03 Risk Register entries linked to vendor risk classes
· DPS-grade evidence pack for regulators and clients (maps, assessments, decisions)

Owner

General Counsel + Legal Operations

Telemetry & Observability

Telemetry-ready

Key Takeaways

Map the legal AI vendor landscape across 19 categories, including Tier 1 GPAI providers and specialist tools.
Apply the Risk Taxonomy 2026 framework to classify every shortlisted vendor across nine risk classes.
Use the four-pillar evaluation model to score technical performance, legal compliance, business value, and vendor viability.
Gate all Level 4 agentic tools through the Agentic Tier Evaluation Protocol before shortlisting or deployment.
Integrate the technology map with AI BoM, GOV-03 Risk Register, and SUS-03 AI Market Scan Radar updates.
Screen every vendor for Class 6 Shadow AI risk to manage off-channel AI use and escalation to STR-07.
Retain quarterly maps and evaluations as DPS-grade evidence of governed AI technology management.

Get This Module

This module is available as part of an Advanta Advisory engagement.

Explore Advisory

Module Details

Type

Pillar

Layer

S · Strategy

Duration

1–2 days per quarterly refresh; 3–5 days for annual full-scope review

Advisory

Yes

Access

Member access

Certification

Practitioner

Maturity Bands

FoundationalOperationalIntegratedOptimisedDefensible

Risk Classes Mitigated

Available Through

Related Resources

P6 · Vendor →Module Library →Take the Free Baseline Diagnostic →

Governance

Methodology: v2026.1
Last reviewed: 23 May 2026
Verified: 23 May 2026

ADVISORY

Need help implementing this — and the 49 modules around it?

Advanta Advisory works with legal departments to deploy the full Legal AI OS framework — governance design, implementation roadmap, and team capability — structured around your maturity baseline.

Explore Advisory →Run the Diagnostic first

← Back to Module Library