Chief Legal Office logo — fractional Chief Legal Office

Operations

Information & Technology Practices

Information & Technology Practices

Information & Technology Practices

Chief Legal Office, PB LLC, a legal support company, and Outside CLO, PC, a U.S. law firm, collectively operate under the trade name Chief Legal Office (“CLO”). In delivering fractional Chief Legal Office, fractional General Counsel, legal support, and related services, CLO may use a combination of internal personnel, approved independent contractors, technology platforms, and select third-party service providers to support service delivery and business operations.

Chief Legal Office, PB LLC, a legal support company, and Outside CLO, PC, a U.S. law firm, collectively operate under the trade name Chief Legal Office (“CLO”). In delivering fractional Chief Legal Office, fractional General Counsel, legal support, and related services, CLO may use a combination of internal personnel, approved independent contractors, technology platforms, and select third-party service providers to support service delivery and business operations.

Chief Legal Office, PB LLC, a legal support company, and Outside CLO, PC, a U.S. law firm, collectively operate under the trade name Chief Legal Office (“CLO”). In delivering fractional Chief Legal Office, fractional General Counsel, legal support, and related services, CLO may use a combination of internal personnel, approved independent contractors, technology platforms, and select third-party service providers to support service delivery and business operations.

This page provides a general overview of how CLO uses technology and third-party support in connection with client work and business operations. It is intended as a summary only and does not describe every element of CLO’s internal policies, technical controls, contractual arrangements, or engagement-specific practices.

This page provides a general overview of how CLO uses technology and third-party support in connection with client work and business operations. It is intended as a summary only and does not describe every element of CLO’s internal policies, technical controls, contractual arrangements, or engagement-specific practices.

This page provides a general overview of how CLO uses technology and third-party support in connection with client work and business operations. It is intended as a summary only and does not describe every element of CLO’s internal policies, technical controls, contractual arrangements, or engagement-specific practices.

Last Updated: May 16, 2026

Last Updated: May 16, 2026

Version: 1.0

Version: 1.0

Applies to: Information & technology practices

Applies to: Information & technology practices

What this page covers

  • How CLO’s remote-first, technology-enabled model supports client work.

  • Use of third-party professionals, vendors, and AI-enabled tools under supervision.

  • Confidentiality, approved systems, oversight, and accountability expectations.

At a glance

  • Remote-first, technology-enabled delivery model with supervised teams.

  • Use of third parties and AI tools under confidentiality and oversight.

  • Approved systems and vendor due diligence support information protection.

Related

Data Security Overview

Business Continuity Overview

AI Governance & Use

Legal Hub

How CLO works

How CLO works

CLO’s operating model is remote-first, technology-enabled, and designed to support flexible legal leadership and delivery. Depending on the engagement, work may be performed by attorneys, legal operations professionals, administrative personnel, and approved independent contractors working under defined responsibilities and appropriate supervision.

CLO’s operating model is remote-first, technology-enabled, and designed to support flexible legal leadership and delivery. Depending on the engagement, work may be performed by attorneys, legal operations professionals, administrative personnel, and approved independent contractors working under defined responsibilities and appropriate supervision.

CLO’s operating model is remote-first, technology-enabled, and designed to support flexible legal leadership and delivery. Depending on the engagement, work may be performed by attorneys, legal operations professionals, administrative personnel, and approved independent contractors working under defined responsibilities and appropriate supervision.

In some matters, particularly fractional General Counsel or embedded engagements, CLO personnel may work primarily within a client’s own systems, workflows, communication platforms, and technology environment. In other matters, work may be performed using CLO-approved systems, including collaboration platforms, matter-management tools, document repositories, and client-facing technology such as our client portal.

In some matters, particularly fractional General Counsel or embedded engagements, CLO personnel may work primarily within a client’s own systems, workflows, communication platforms, and technology environment. In other matters, work may be performed using CLO-approved systems, including collaboration platforms, matter-management tools, document repositories, and client-facing technology such as our client portal.

In some matters, particularly fractional General Counsel or embedded engagements, CLO personnel may work primarily within a client’s own systems, workflows, communication platforms, and technology environment. In other matters, work may be performed using CLO-approved systems, including collaboration platforms, matter-management tools, document repositories, and client-facing technology such as our client portal.

Third-party professionals and service providers

Third-party professionals and service providers

CLO may engage qualified third parties to support legal, administrative, operational, or technology functions. Depending on the engagement and the business need, those third parties may include independent-contractor paralegals, U.S.-licensed attorneys, non-U.S. legal professionals working in support capacities, and vendors providing technology, infrastructure, or other business services.

CLO may engage qualified third parties to support legal, administrative, operational, or technology functions. Depending on the engagement and the business need, those third parties may include independent-contractor paralegals, U.S.-licensed attorneys, non-U.S. legal professionals working in support capacities, and vendors providing technology, infrastructure, or other business services.

CLO may engage qualified third parties to support legal, administrative, operational, or technology functions. Depending on the engagement and the business need, those third parties may include independent-contractor paralegals, U.S.-licensed attorneys, non-U.S. legal professionals working in support capacities, and vendors providing technology, infrastructure, or other business services.

Third parties support CLO’s service delivery only under appropriate supervision, contractual controls, and role-based access limitations. Not every third party has access to client information, and access is granted only when reasonably necessary for assigned work or for the operation of approved systems and services.

Third parties support CLO’s service delivery only under appropriate supervision, contractual controls, and role-based access limitations. Not every third party has access to client information, and access is granted only when reasonably necessary for assigned work or for the operation of approved systems and services.

Third parties support CLO’s service delivery only under appropriate supervision, contractual controls, and role-based access limitations. Not every third party has access to client information, and access is granted only when reasonably necessary for assigned work or for the operation of approved systems and services.

Confidentiality, privacy, and approved systems

Confidentiality, privacy, and approved systems

CLO requires third parties and service providers with access to confidential or personal information to be bound by appropriate confidentiality, data protection, and information security obligations. Access to information is intended to be limited on a need-to-know basis and restricted to the minimum necessary for the relevant services.

CLO requires third parties and service providers with access to confidential or personal information to be bound by appropriate confidentiality, data protection, and information security obligations. Access to information is intended to be limited on a need-to-know basis and restricted to the minimum necessary for the relevant services.

CLO requires third parties and service providers with access to confidential or personal information to be bound by appropriate confidentiality, data protection, and information security obligations. Access to information is intended to be limited on a need-to-know basis and restricted to the minimum necessary for the relevant services.

Where CLO controls the environment, confidential information is expected to be handled only through approved, centrally managed systems rather than personal email, personal cloud storage, or unmanaged local storage. CLO also applies contractual, operational, and policy-based requirements intended to support appropriate handling, retention, reporting, and protection of client and firm information.

Where CLO controls the environment, confidential information is expected to be handled only through approved, centrally managed systems rather than personal email, personal cloud storage, or unmanaged local storage. CLO also applies contractual, operational, and policy-based requirements intended to support appropriate handling, retention, reporting, and protection of client and firm information.

Where CLO controls the environment, confidential information is expected to be handled only through approved, centrally managed systems rather than personal email, personal cloud storage, or unmanaged local storage. CLO also applies contractual, operational, and policy-based requirements intended to support appropriate handling, retention, reporting, and protection of client and firm information.

For matters in which CLO personnel work directly within a client’s own systems, technology, or security environment, information handling may also be governed by the client’s policies, permissions, and controls.

For matters in which CLO personnel work directly within a client’s own systems, technology, or security environment, information handling may also be governed by the client’s policies, permissions, and controls.

For matters in which CLO personnel work directly within a client’s own systems, technology, or security environment, information handling may also be governed by the client’s policies, permissions, and controls.

Vendor due diligence and oversight

Vendor due diligence and oversight

CLO maintains a framework for the selection, onboarding, oversight, and periodic review of third-party service providers. Depending on the nature of the services and the level of risk involved, that process may include review of qualifications, background screening, confidentiality commitments, data protection terms, security expectations, and ongoing performance monitoring.

CLO maintains a framework for the selection, onboarding, oversight, and periodic review of third-party service providers. Depending on the nature of the services and the level of risk involved, that process may include review of qualifications, background screening, confidentiality commitments, data protection terms, security expectations, and ongoing performance monitoring.

CLO maintains a framework for the selection, onboarding, oversight, and periodic review of third-party service providers. Depending on the nature of the services and the level of risk involved, that process may include review of qualifications, background screening, confidentiality commitments, data protection terms, security expectations, and ongoing performance monitoring.

CLO may also consider whether a third-party provider relies on subcontractors, affiliates, or downstream service providers in delivering services. Although CLO does not contract directly with those downstream providers, related risks may be addressed through vendor disclosures, contractual requirements, and review of available assurance materials.

CLO may also consider whether a third-party provider relies on subcontractors, affiliates, or downstream service providers in delivering services. Although CLO does not contract directly with those downstream providers, related risks may be addressed through vendor disclosures, contractual requirements, and review of available assurance materials.

CLO may also consider whether a third-party provider relies on subcontractors, affiliates, or downstream service providers in delivering services. Although CLO does not contract directly with those downstream providers, related risks may be addressed through vendor disclosures, contractual requirements, and review of available assurance materials.

AI-enabled tools and human oversight

AI-enabled tools and human oversight

CLO may use technology-enabled and AI-assisted tools to support internal operations and aspects of service delivery where appropriate. Any such use is expected to remain subject to professional judgment, human review, confidentiality obligations, and engagement-specific requirements.

CLO may use technology-enabled and AI-assisted tools to support internal operations and aspects of service delivery where appropriate. Any such use is expected to remain subject to professional judgment, human review, confidentiality obligations, and engagement-specific requirements.

CLO may use technology-enabled and AI-assisted tools to support internal operations and aspects of service delivery where appropriate. Any such use is expected to remain subject to professional judgment, human review, confidentiality obligations, and engagement-specific requirements.

AI or automation tools are not a substitute for legal judgment, attorney supervision, or client-specific analysis. CLO expects attorneys and other responsible professionals to review and validate work product, including where technology-assisted tools are used in drafting, research, review, or workflow support.

AI or automation tools are not a substitute for legal judgment, attorney supervision, or client-specific analysis. CLO expects attorneys and other responsible professionals to review and validate work product, including where technology-assisted tools are used in drafting, research, review, or workflow support.

AI or automation tools are not a substitute for legal judgment, attorney supervision, or client-specific analysis. CLO expects attorneys and other responsible professionals to review and validate work product, including where technology-assisted tools are used in drafting, research, review, or workflow support.

When evaluating AI-enabled tools or other technology providers, CLO may consider factors such as the tool’s function, data-handling practices, confidentiality protections, security posture, contractual terms, and suitability for the intended use case. Not every tool is appropriate for every matter, and the way a tool may be used can depend on client instructions, sensitivity of the data, jurisdiction-specific requirements, and the nature of the engagement.

When evaluating AI-enabled tools or other technology providers, CLO may consider factors such as the tool’s function, data-handling practices, confidentiality protections, security posture, contractual terms, and suitability for the intended use case. Not every tool is appropriate for every matter, and the way a tool may be used can depend on client instructions, sensitivity of the data, jurisdiction-specific requirements, and the nature of the engagement.

When evaluating AI-enabled tools or other technology providers, CLO may consider factors such as the tool’s function, data-handling practices, confidentiality protections, security posture, contractual terms, and suitability for the intended use case. Not every tool is appropriate for every matter, and the way a tool may be used can depend on client instructions, sensitivity of the data, jurisdiction-specific requirements, and the nature of the engagement.

Where client confidential information is involved, CLO’s approach is intended to reflect applicable professional obligations relating to confidentiality, supervision, competence, and reasonable technology-related safeguards. Clients may also impose their own requirements or limitations regarding the use of AI-enabled tools, particularly in embedded, in-house-style, or client-system engagements.

Where client confidential information is involved, CLO’s approach is intended to reflect applicable professional obligations relating to confidentiality, supervision, competence, and reasonable technology-related safeguards. Clients may also impose their own requirements or limitations regarding the use of AI-enabled tools, particularly in embedded, in-house-style, or client-system engagements.

Where client confidential information is involved, CLO’s approach is intended to reflect applicable professional obligations relating to confidentiality, supervision, competence, and reasonable technology-related safeguards. Clients may also impose their own requirements or limitations regarding the use of AI-enabled tools, particularly in embedded, in-house-style, or client-system engagements.

Service quality and accountability

Service quality and accountability

Third parties supporting CLO are expected to meet standards relating to confidentiality, information security, business continuity, professional conduct, and service quality consistent with the nature of their role. CLO uses supervision, periodic review, and performance management processes to help maintain quality and accountability across its service model.

Third parties supporting CLO are expected to meet standards relating to confidentiality, information security, business continuity, professional conduct, and service quality consistent with the nature of their role. CLO uses supervision, periodic review, and performance management processes to help maintain quality and accountability across its service model.

Third parties supporting CLO are expected to meet standards relating to confidentiality, information security, business continuity, professional conduct, and service quality consistent with the nature of their role. CLO uses supervision, periodic review, and performance management processes to help maintain quality and accountability across its service model.

Questions, concerns, or incidents involving third-party service providers, confidentiality, or technology use may be escalated through CLO’s internal management and response processes, including corrective action where appropriate.

Questions, concerns, or incidents involving third-party service providers, confidentiality, or technology use may be escalated through CLO’s internal management and response processes, including corrective action where appropriate.

Questions, concerns, or incidents involving third-party service providers, confidentiality, or technology use may be escalated through CLO’s internal management and response processes, including corrective action where appropriate.

Important notice

Important notice

This page is intended to provide a general overview of CLO’s information and technology practices. It does not create contractual commitments, does not modify any client agreement, privacy notice, engagement letter, or applicable terms of service, and is subject to change as CLO’s business, technology, and regulatory environment evolve.

This page is intended to provide a general overview of CLO’s information and technology practices. It does not create contractual commitments, does not modify any client agreement, privacy notice, engagement letter, or applicable terms of service, and is subject to change as CLO’s business, technology, and regulatory environment evolve.

This page is intended to provide a general overview of CLO’s information and technology practices. It does not create contractual commitments, does not modify any client agreement, privacy notice, engagement letter, or applicable terms of service, and is subject to change as CLO’s business, technology, and regulatory environment evolve.

Additional information may be made available to clients upon request, subject to confidentiality, security, and engagement-specific considerations.

Additional information may be made available to clients upon request, subject to confidentiality, security, and engagement-specific considerations.

Additional information may be made available to clients upon request, subject to confidentiality, security, and engagement-specific considerations.

Questions

Questions

If you have questions about this overview, CLO’s use of technology, third-party service providers, or AI-enabled tools, please contact us at info@chieflegaloffice.com.

If you have questions about this overview, CLO’s use of technology, third-party service providers, or AI-enabled tools, please contact us at info@chieflegaloffice.com.

If you have questions about this overview, CLO’s use of technology, third-party service providers, or AI-enabled tools, please contact us at info@chieflegaloffice.com.

At a glance

  • Remote-first, technology-enabled delivery model with supervised teams.

  • Use of third parties and AI tools under confidentiality and oversight.

  • Approved systems and vendor due diligence support information protection.

Related

Data Security Overview

Business Continuity Overview

AI Governance & Use

Legal Hub