Lawgix AI

Home › Blog

Confidentiality, Ethics

Can an Indian Advocate Put Client Documents into an AI Tool? Confidentiality and Privilege (2026)

By Akshit Agrawal, Founder, Lawgix AI · Published 19 October 2026 · Figures as at 2026-10-19

An Indian advocate may not disclose client communications without the client's consent (Section 132, Bharatiya Sakshya Adhiniyam, 2023), and that duty continues after the engagement ends. As of 19 October 2026 we found no Indian statute, judgment or Bar Council guidance on whether uploading client material to an AI tool waives privilege.

Lawgix AI is a legal AI vendor, so read this as a buyer's guide from a vendor. Each legal point is tied to a source, and what we could not verify is marked "not found". This piece covers confidentiality and privilege. For data-protection duties see our DPDP Act guide for law firms.

What are the key facts as of 19 October 2026?

QuestionPositionSource
Who owns the privilege?The client; the advocate can invoke it for the client, even if the client is absentSupreme Court, In Re: Summoning Advocates, 31 Oct 2025
Does the duty end with the engagement?No. "The obligation stated in this section continues after the professional service has ceased"Section 132 BSA, Explanation
Who else is covered?Interpreters, and advocates' clerks and employeesSection 132(3) BSA
Are in-house counsel covered?Not by Section 132, according to AZB & Partners' reading of the same judgmentAZB & Partners, 17 Jul 2026
Does using an AI tool waive privilege in India?Not found. Commentators call it unsettledAZB & Partners; Esya Centre
Has the Bar Council of India issued AI rules?Not found; see what already binds advocatesOur check, updated 9 Oct 2026

What does Section 132 of the BSA actually protect?

It protects what a client tells an advocate in the course of the engagement, the contents of documents the advocate has seen because of it, and the advice given. The advocate cannot disclose these unless the client expressly consents.

Two exceptions are in the section itself. The protection does not cover communications made to further an illegal purpose, or facts the advocate observes that show a crime or fraud has been committed since the engagement began.

Section 132 replaced Section 126 of the Indian Evidence Act, 1872. The Bar Council of India Rules, in the part on an advocate's duty to the client, still say an advocate must not directly or indirectly disclose a client's communications, and must not misuse the client's confidence. Secondary sources number these rules differently, and we could not read a primary copy, so we cite them by wording rather than by rule number.

Are the documents themselves privileged?

Not in the way many people assume. In Summoning Advocates who give legal opinion or represent parties during investigation of cases and related issues, In Re (2025 SCC OnLine SC 2320, decided 31 October 2025 by a three-judge bench), the Supreme Court held that documents in the possession of an advocate or client are not protected by Section 132 privilege, in civil or criminal matters. They can be ordered to be produced before the court, which hears objections first.

The same judgment limits how investigators can reach an advocate's devices. A digital device can be directed to be produced only before the jurisdictional court, which must hear the affected party. If objections fail, the device is opened in the presence of the party and the advocate, who may bring a digital expert, and the court must protect the confidentiality of the advocate's other clients.

For a firm using AI tools, the practical point is that the privilege covers the communication, not every file. Where client material is stored and who can reach it matters.

Does uploading client material to an AI tool waive privilege in India?

We found no Indian ruling on this. AZB & Partners (17 July 2026) describes the position as unsettled, with no statute, judicial guidance or Bar Council guidance. Its reasoning is that risk depends on the tool's terms: free consumer tools that allow retention, training or disclosure are the most exposed; enterprise tools with contractual confidentiality, limited retention and no training use are closer to vendors such as translators and e-discovery platforms. It adds that an AI tool used for a client, under confidentiality and for the client's purpose only, could plausibly be treated like a clerk, but that this is an argument, not a settled rule.

Courts abroad have started to answer the question, and not uniformly. As reported by AZB & Partners and by the Esya Centre in LiveLaw (27 July 2026):

Both commentators warn against importing these results directly. Warner and Assini rest on the US work-product doctrine, and the Esya Centre notes that India does not recognise litigation privilege and has no exception for third parties who help deliver legal advice. We found no Indian case citing any of these decisions.

What do the Bar Council or the courts say about AI and client data?

The Bar Council of India has no AI-specific rule that we could find. The court-side documents we read deal with courts' own use of AI. Kerala High Court's policy for the district judiciary, as summarised by AZB & Partners, warns against cloud-based tools other than approved ones because of confidentiality. The Supreme Court's draft AI regulations, as summarised by Legal 500, cover use by courts, not by advocates. Our tracker of AI rules in Indian courts records each document with its date and link.

What should a firm check before client material goes into an AI tool?

None of this is a legal standard. It is a working checklist built from the points above, and a partner or advocate should adapt it.

  1. Classify the matter. Decide which matters may use which tools. Client-identifiable material in a consumer account is the highest-risk case.
  2. Read the terms for training and retention. Does the vendor train on your inputs? How long does it keep them, and can you delete them? This is the factor commentators say matters most.
  3. Get confidentiality in the contract. The vendor should be bound to keep your data confidential, use it only to serve you, and tell you of a breach.
  4. Find out where the data is processed and who can see it. Staff access and sub-processors matter as much as the storage region.
  5. Tell the client, and record consent where the matter is sensitive. Section 132 protects the client's communications, and the client's consent is the one thing that always permits disclosure.
  6. Keep the advocate in the loop. Nothing the tool produces is filed without an advocate checking it. See how to check AI legal research against official sources.

What do we say about our own tool?

We are a vendor, so test us on the six points above rather than taking our word. We have not published a privilege opinion and do not claim that using any AI tool preserves privilege. Ask every vendor, including Lawgix AI, for its training, retention, sub-processor and breach-notice terms in writing. Our comparison of Harvey alternatives lists data regions where vendors state them, and the Lawgix AI homepage has our contact details.

Sources

Related

This is general information, not legal advice. Status as of 19 October 2026.

Keep reading

Lawgix AI builds legal AI for Indian law firms and in-house teams — research, document review and drafting grounded in Indian Acts and judgments, with citations you can check.

See how it works

← All articles