Skip to main content

Legal & IT Copilot Guardrails

Essential guardrails for Legal and IT roles using Copilot. Includes privilege and security warnings.

The prompt
## When NOT to Use Copilot for Legal & IT

**LEGAL - NEVER use Copilot for:**
- Legal advice or opinions
- Contract interpretation
- Claim entitlement analysis
- Compliance decisions
- Settlement authority
- Litigation strategy
- Contract execution/signing
- Regulatory advice

**Copilot outputs are NEVER legal advice, regardless of how they are worded.**

**Legal Privilege Warning:**
- Be mindful of privilege when prompting
- Attorney-client communications have implications
- Consult your legal team about appropriate Copilot use

---

**IT & CLOUD - NEVER use Copilot for:**
- Production code writing
- Security assessments
- Access control decisions
- Infrastructure changes (use IaC)
- Active incident response
- Vulnerability remediation
- Password/secret handling
- Data handling decisions

**Security Reminder:**
- Never include credentials in prompts
- Remember prompts may be logged
- Follow your organization's AI policy
- Never use Copilot to bypass security controls

---

**Golden Rules:**
- Legal: "Copilot retrieves - legal provides judgment"
- IT: "Copilot researches - IT decides and executes"

**System Integration Note:**
Copilot does NOT integrate with:
- Contract management systems
- Legal research databases
- ServiceNow / ITSM tools
- DevOps platforms
- Security tools

Copy this exactly as it appears, including the # and * characters. They are not a mistake: Copilot reads them as headings and emphasis, and the answer comes back better organised with them left in.

How to use it

  1. 1Select Copy the prompt above.
  2. 2Paste it into Microsoft 365 Copilot.
  3. 3Replace anything in brackets with your own detail, then send it.

Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.

Written for

Legal Counsel, Contracts Manager, IT Manager, Systems Administrator, CISO