Small law firms: what an AI agent can and can't do with your software

• Last verified October 28, 2026
• Updated Oct 28, 2026Published Oct 28, 2026

A solo practice or a firm with a few lawyers usually pays for a small set of subscriptions: practice management for matters, time and billing, an intake or CRM tool, document management, e-signature, a payment processor that knows the difference between trust and operating money, QuickBooks, and sometimes a marketing platform. This guide asks how much of that Meta's Muse assistant, or any agent that works through connectors, can reach right now, which office chores make sense to give it, and why client confidences, trust money and lawyer advertising call for a lawyer's eyes on every step. It's written for firms of one to roughly ten lawyers. Large firms, legal aid programs, in-house legal teams and the question of which practice management system to buy aren't covered.

Each claim has a badge showing its backing:

How this page was put together: our sources were the API and help documentation of every practice management, intake, payments, document and e-signature product in the table, the Meta and partner pages for the connectors Meta lists, the Muse terms of service and privacy policy from Meta, the ABA Model Rules on competence, confidentiality, nonlawyer assistance, safekeeping property and lawyer advertising together with ABA Formal Opinion 512, the current Arkansas Rules of Professional Conduct as the Arkansas Supreme Court posts them, two December 2025 orders of that court, the FCC robocall rule and its latest amendment, and the CAN-SPAM Act and rule. The date we read each one is beside it in the source list. No assistant, Muse or otherwise, was linked to a client matter, document store, trust account or ledger, and we sent nothing to any client. What a vendor documents is how its product is designed to behave, which isn't the same as your bar rules allowing that use.

Short version

• Of the products here, only HighLevel, Stripe and Intuit QuickBooks appear as Muse connectors in Meta's launch post; no legal product does. (Confirmed by vendor 1)
• MyCase, Filevine, NetDocuments and iManage each describe an MCP connection, and Clio offers one for its Vincent research tool inside OpenAI's Codex. The client lists their makers give are Claude, ChatGPT, Microsoft Copilot or Codex; Muse isn't named by any of them. (Confirmed by vendor 9 10 13 16 19)
• By default, Meta's privacy policy lets it train its AI on your Muse interactions, which can include what a connector pulls in, and the terms rule out unlicensed legal work and relying on Muse to substantially decide someone's legal rights unless a person meaningfully reviews it. (Confirmed by vendor 8)
• Since Dec 11, 2025, the Arkansas Rules of Professional Conduct have said AI help is allowed but never excuses or lessens a rule violation, and Rule 5.3 now covers technological tools such as generative AI. (Confirmed by the Arkansas Supreme Court 26)
• The FCC's changes to how people revoke consent for robocalls and robotexts take effect Nov 25, 2026, so firms that text should check their stop-request process before that date arrives. (Confirmed by the FCC 30)

Stack map

Swipe the table sideways to see every column →

If you want a custom connector

Anything Meta doesn't list would need a go-between: an MCP server the vendor runs, like those from NetDocuments, iManage or Docusign, an app built through the vendor's API program, or Zapier. Before building anything, list every company that would handle client information along the way, because each is a service provider whose safeguards you have to check under the confidentiality and supervision rules below. Meta's help center says custom connectors and their data handling get no review from Meta, and that Muse's memory and chat history may hold on to information after a connector is removed. (Confirmed by vendor 2) Under Meta's rules for people building connectors, every sensitive write gets its own approval and blanket, ongoing permission is forbidden. (Confirmed by vendor 3) The Muse terms make you alone responsible for the services you connect. (Confirmed by vendor 8)

Jobs you could hand off today

None of these needs client matter data.

Swipe the table sideways to see every column →

None of these has been tested by us. Your plan, user roles and connector settings change what happens, so try a small batch first and review every output.

Keep these out

• Client files, matters, documents and intake answers. Don't connect practice management, document management, intake or e-signature accounts to an assistant, or paste client facts into a chat, until you've done the vendor diligence and, where needed, gotten the client's informed consent described below.
• Legal advice and decisions about a client's rights. Muse's terms say it gives no legal or other professional advice, prohibit using it for unlicensed regulated activity including legal services, and prohibit relying on it as a substantial factor in whether someone receives a legal right or benefit unless a person meaningfully reviews the outcome. (Confirmed by vendor 8)
• Trust account money. No agent should move, refund or disburse client funds. Meta's terms say Muse isn't acting as a fiduciary, a money transmitter or a financial institution, and expect a person to review actions that change something, such as sending communications, before they happen. (Confirmed by vendor 8)
• Mass texts and emails. The terms forbid bulk messages lacking the consent required by the TCPA, CAN-SPAM or state telemarketing rules, and forbid passing off Muse responses as written by a person where disclosure is required. (Confirmed by vendor 8)
• Court e-filing and portal logins. Muse's terms prohibit evading another service's terms, access controls or CAPTCHAs, or signing in with credentials you're not authorized to use. (Confirmed by vendor 8) Keep court and agency credentials away from any agent, Muse included.

Risks to keep a person on

Competence and confidentiality

The ABA Model Rules aren't law by themselves; each state supreme court adopts its own version, so read your state's text. Where Arkansas's rule matches the ABA's, we cite the Arkansas text from the Arkansas Supreme Court's site, and we point out where the two differ. Anything marked Published by the ABA is national guidance read on americanbar.org; it binds a lawyer only where that lawyer's state has adopted it.

In Arkansas, comment 8 to Rule 1.1 says staying competent includes keeping up with the benefits and risks of relevant technology. Arkansas's Rule 1.6(a) bars revealing information relating to a representation without informed consent, implied authorization or an exception, and 1.6(c) requires reasonable efforts to prevent inadvertent or unauthorized disclosure of, or access to, that information; comment 18 lists what goes into judging those efforts. (Confirmed by the Arkansas Supreme Court 28) The ABA's model text says the same in comment 8 to Rule 1.1 and in Rules 1.6(a) and 1.6(c). (Published by the ABA 20 21) The exceptions in Arkansas's Rule 1.6(b) aren't the ABA's list; its first one, for instance, covers preventing a criminal act. (Confirmed by the Arkansas Supreme Court 28)

In Formal Opinion 512 of July 29, 2024, the ABA's ethics committee says lawyers using generative AI need a reasonable grasp of what the tools can and can't do, should get a client's informed consent before putting that client's information into a self-learning tool, and can't rely on generic consent language in an engagement letter for that. It also tells lawyers to read a tool's terms of use and privacy policy before using it. (Published by the ABA 23) Muse is exactly that case to check: training on interactions is on unless you switch it off under Data Controls, and Meta can look at and store records of what Muse does. (Confirmed by vendor 8)

Supervising the assistant and its vendors

ABA Model Rule 5.3 makes lawyers with managerial authority put measures in place that give reasonable assurance nonlawyer assistance fits the lawyer's duties, and makes a lawyer answerable for conduct they order, ratify or fail to fix in time. The comment names a document management company and an internet-based service storing client information as examples of outside assistance, and says the right steps depend partly on the contract terms protecting client information. (Published by the ABA 22) Opinion 512 applies those duties to generative AI and calls for firm policies and training on its use. (Published by the ABA 23)

Arkansas, Tennessee and Mississippi

Arkansas. In a per curiam order of Dec 11, 2025, effective immediately, the Arkansas Supreme Court added a preamble paragraph saying nothing in its professional conduct rules bars non-human help, artificial intelligence included, but that using it doesn't excuse or reduce any violation. The same order renamed Rule 5.3 to cover nonlawyer assistance and added a comment that this assistance includes technological tools such as generative AI platforms. (Confirmed by the Arkansas Supreme Court 26) Its Administrative Order No. 25, issued the same day, warns everyone working in the court system that some generative AI tools keep what users submit to build their models, so anyone entering confidential or sealed information should first find out whether the tool retains it, since that disclosure may break the Rules of Professional Conduct. (Confirmed by the Arkansas Supreme Court 27)

Tennessee. We found no Tennessee Supreme Court rule or Board of Professional Responsibility formal ethics opinion on lawyers using AI. A Tennessee Bar Association blog post reports an Oct 9, 2026 Supreme Court policy on AI for CLE providers, which we didn't confirm on the court's site and which doesn't address client work. (Unverified)

Mississippi. Secondary sources report a Mississippi Bar ethics opinion on generative AI, numbered 267 and dated Nov 14, 2024, but the Bar keeps its formal opinions behind a member login, so we couldn't read the text. (Unverified) Mississippi lawyers should pull it from the Bar directly.

Trust money and card payments

ABA Model Rule 1.15 has a lawyer hold client and third-party property apart from the lawyer's own, keep client money in a separate trust account, put advance fees and expenses into trust until earned or incurred, and add the lawyer's own funds only to cover bank service charges; the comment says commingling is otherwise impermissible. (Published by the ABA 24) Arkansas's Rule 1.15, titled Safekeeping Property and Trust Accounts, goes further than the ABA's and numbers it differently. Lawyer funds in trust may cover bank charges or a minimum balance but never more than $500. Each trust account must be set up so overdrafts are reported to the Executive Director of the Office of Professional Conduct. Nominal or short-term client money goes in a pooled IOLTA account whose interest is paid monthly to the IOLTA Program of the Arkansas Access to Justice Foundation, records are kept five years, and lawyers certify compliance every year when they renew their license. (Confirmed by the Arkansas Supreme Court 28) Interest on Lawyers' Trust Accounts (IOLTA) programs and trust account recordkeeping are set state by state; we didn't read the Tennessee or Mississippi rules for this page. (Unverified)

LawPay says firms connect both trust and operating accounts so earned and unearned money don't get commingled, that it deposits the whole payment and takes its fees monthly from the operating account and never from trust, and that it won't debit a trust account for any reason, chargebacks and disputes included. (Confirmed by vendor 15) Those are LawPay's own claims. Whatever processor you use, confirm in writing where fees and chargebacks come from before a payment link can touch unearned money, and never let an agent pick the deposit account.

Advertising and solicitation

Under ABA Model Rules 7.1 and 7.2, nothing a lawyer communicates about their services may be false or misleading, which includes leaving out a fact needed to keep it from misleading, and any communication under Rule 7.2 has to give the name and contact details of at least one lawyer or firm responsible for it. The comment to Rule 7.3 says live person-to-person solicitation doesn't include text messages or other written messages that are easy to ignore, but still forbids solicitation that involves coercion, duress or harassment or that targets someone who has said they don't want contact. (Published by the ABA 25) Arkansas still uses the ABA's older structure, and its versions are stricter. Its Rule 7.1 bans false or misleading communications too but also counts any testimonial or endorsement as one, and its Rule 7.2 requires keeping a copy of each ad for five years, naming at least one Arkansas-licensed lawyer responsible for it and stating where the lawyers who will do the work practice. Its Rule 7.3 bars soliciting by in-person, live telephone or real-time electronic contact when a significant motive is the lawyer's pecuniary gain, and a written solicitation to someone known to need help in a particular matter must go by regular mail, with "Advertisement" on the envelope and on every page. (Confirmed by the Arkansas Supreme Court 28) We found no ruling on whether a real-time AI voice agent calling prospects counts as live person-to-person contact under ABA Rule 7.3, or as real-time electronic contact under Arkansas's, so don't use one for outreach. (Unverified) A lawyer should approve every AI-drafted ad, post and email before it goes out.

Calls and texts

Beginning Nov 25, 2026, callers can designate one of the revocation methods the rule allows as the exclusive way to opt out, provided its calls and texts say so, and may limit a stop request about one type of informational message to that type. (Confirmed by the FCC 30) Keep an agent from editing stop keywords, folding appointment or case-status texts into marketing, or adding contacts to a promotional list.

Email

The CAN-SPAM Act requires a commercial email to identify itself as an ad unless the recipient gave prior consent, to offer an unsubscribe option that remains usable for a minimum of 30 days after the send, and to show a valid physical postal address; once someone opts out, mail to them must stop within 10 business days. (Confirmed by Congress 32) The FTC's rule forbids charging a fee or asking for more than an email address and opt-out preferences to unsubscribe, and counts a mixed message as commercial when its subject line would make a recipient think it's an ad or when the transactional or relationship part isn't mainly at the top of the message. (Confirmed by the FTC 31)

Treat this page as a summary of published sources, not as legal or ethics advice. Your state's rules of professional conduct, its ethics opinions, your malpractice carrier and your software contracts may ask more of you than this page does, so talk to your state bar's ethics counsel or an ethics lawyer before an assistant touches anything that holds client information.

FAQ

Does Clio have an MCP server I can plug into Muse?

Clio's MCP offering, announced Sept 17, 2026, connects its Vincent research and docket tools to OpenAI's Codex for Vincent and Clio Work customers; it isn't described as a Muse connector. (Confirmed by vendor 9) For other uses Clio points developers to its Manage and Grow APIs.

Is the MyCase MCP connector safe to use with client data?

MyCase says the connector only reads data, follows each user's existing permissions and is limited to Claude Team and Enterprise accounts. (Confirmed by vendor 10) Read-only still means client information leaves MyCase for the AI provider, so the confidentiality and consent questions above still apply.

Can I take card payments with Stripe for retainers?

We didn't review Stripe's terms for trust money. (Unverified) Unearned retainers belong in trust under your state's version of Rule 1.15, so get your processor's fee and chargeback handling in writing and check it with your state bar before you do.

How does Zapier charge for this?

Each MCP tool call that succeeds counts as two Zapier tasks. (Confirmed by vendor 5) Plan your task budget around that before an agent starts creating Lawmatics or PracticePanther records.

Changes to this page

Swipe the table sideways to see every column →

Found a mistake or a newer source? Send it through Corrections, with a link to the source, and we'll recheck the claim and record the change here.