Costs agreements and AI confidentiality: what the fee terms of a matter give away in ChatGPT or Claude.

Every client of a law firm signs a costs agreement, and the firm has a statutory duty to disclose its costs as soon as practicable after it is first instructed. The document is long, repetitive and full of legal wording, which is why staff paste it into ChatGPT or Claude to adapt the template for a new client. What goes with it is more than the clauses: the client’s name and matter, what she can afford, who is paying her bills and what the firm charges. This page marks every item in a costs agreement that rule 9 and the Legal Profession Uniform Law bear on, and shows how the same agreement is prepared on Ermos inside the firm.

The costs agreement and disclosure

Signed at the start of a matter, and revisited if the scope or the estimate changes. It is the document the firm relies on to recover its fees.

Costs agreement and disclosure
Carrick Doyle Lawyers · 14 September 2026

1. Client.

2. Scope.

3. How we charge.

4. Estimate.

5. Who is paying.

6. Deposit.

7. Your rights.

8. Outcome.

9. Camila.

10. Signed.

An invented agreement. Hover or tap any highlighted item for the analysis; the full list is below.

What leaves the firm

  1. 1
    The client and her address

    A named individual at a residential address, with a matter. Personal information, and confidential to the client under rule 9. Rule 9 confidentiality guide.

  2. 2
    The scope and the employer

    That a named person is bringing a claim against a named employer, and what the firm will and will not do. A client confidence before the application is lodged. Rule 9 confidentiality guide.

  3. 3
    The firm’s rates

    Three hourly rates by seniority. Disclosed to each client, but the firm’s full pricing is its own commercial information.

  4. 4
    The estimate and counsel’s fees

    What the client is prepared to spend. An estimate of the total legal costs, which the Uniform Law requires the firm to give and to update after a significant change, also tells a reader how the firm values the case. Law Society AI guidance.

  5. 5
    A third person who pays

    A sister liable for the fees and given the same disclosure. Under the Uniform Law a person other than the client who owes the firm a legal obligation to pay the costs is an associated third party payer and is owed the disclosure that relates to the costs they must pay. Her details are personal information of a person who is not the client. Privacy Act guide.

  6. 6
    The deposit

    An amount and who paid it. Financial information about the client and her sister. Rule 9 confidentiality guide.

  7. 7
    The client’s rights

    The statutory statement of rights: to negotiate the agreement and the billing method, to ask for a bill and an itemised bill, and to seek the Legal Services Commissioner’s help. Standard wording with no client in it.

  8. 8
    No percentage fee and the settlement estimate

    The firm does not charge by reference to the amount recovered, and gives a costs estimate before a settlement is signed. Standard wording with no client in it.

  9. 9
    The limit on what the sister may be told

    The client’s authority to discuss costs with her sister and nothing else. A record of how far her consent goes under rule 9, which a pasted copy disregards. Rule 9 confidentiality guide.

  10. 10
    Signatures and dates

    Three names and a date, repeated from elsewhere in the document.

What happens in Frontier Models (ChatGPT, Claude)

  • The whole document is transmitted to the provider’s servers. On personal plans the user cannot choose where it is stored or processed, and for the major providers that has generally meant outside Australia, under that country’s legal process. Some business plans offer storage in Australia, but the provider still receives the content.
  • On consumer tiers, prompts can be retained and used to train future models.
  • The provider’s staff and systems can reach the content under the provider’s own policies.
  • Once sent, the firm no longer controls it. Retention and deletion happen on the provider’s terms.

The same document on Ermos

Ermos Dominion

The document is drafted on a unit in your office, from your own templates and the matter file. Every marked item stays on the unit, which keeps working with the internet switched off. Nothing in it is transmitted to an AI provider, so there is no disclosure to analyse: the confidentiality work is the same as for your file server.

Ermos Edge

Your documents, the index and your access boundaries stay on your own instance in an Australian data centre. When a staff member asks for this draft, only their question and the excerpts they are permitted to see go to a named Australian provider, who is contractually barred from keeping the content or training any model on it. Nothing is processed outside Australia.

Frontier Models (ChatGPT, Claude)Ermos EdgeErmos Dominion
Where the document is processedProvider servers, generally offshore on personal plansYour instance in an Australian data centre; answers generated in AustraliaThe unit in your office
Who can read itProvider staff and systems, under policyYour staff, within the boundaries you set. The named Australian provider processes only permitted excerpts, under contract, and keeps nothingYour staff only
Is it keptOn the provider’s termsKept on your instance; the provider is barred from retaining itStays on the unit
Can it train a modelOn consumer tiers, yesNo, by contractOnly your own unit learns from it, on your hardware

Part of AI data leakage in law firms. See how this works in practice: Contract drafting on Ermos.

Common questions

Do ChatGPT and Claude use the information in a costs agreement?
Yes, a pasted agreement is sent to the AI company's servers and processed there to produce a reply. As at October 2026, whether a conversation on a personal plan (ChatGPT Free, Plus or Pro; Claude Free, Pro or Max) can be used to train the models depends on a setting each user controls. Business plans (ChatGPT Business and Enterprise, Claude Team and Enterprise) and the developer APIs sit under commercial terms, and OpenAI and Anthropic each say they do not train on that content by default (OpenAI, Anthropic). On either product, the thumbs up and thumbs down buttons can send a whole conversation back for training. This agreement names the client and her home address, a claim against a named employer before it is lodged, and the sister who pays the fees and the $6,000 deposit.
Is it safe to paste a costs agreement into ChatGPT or Claude to adapt it for a new client?
No, because an agreement filled in for one client holds that client's confidential details. The Office of the Australian Information Commissioner (OAIC) recommends in its guidance on commercially available AI products that organisations do not enter personal information, and particularly sensitive information, into publicly available generative AI tools, because of the significant and complex privacy risks. This one has Ms Soto's address, the scope of her claim against Greystone Property Group Pty Ltd and the $14,000 estimate. Rule 9 of the Australian Solicitors' Conduct Rules restricts disclosing information confidential to a client except in limited cases, such as where the client authorises it or the law requires it.
What if staff use their own ChatGPT or Claude account for a costs agreement?
The firm cannot see or manage what was sent from a personal account. On a personal plan the user cannot choose where conversations are stored or processed. Some business plans let an organisation choose to store data at rest in Australia (OpenAI), which still leaves the content with the AI company. Both companies can also review content that is flagged for safety or policy reasons. For a costs agreement, nobody at the firm could say where the scope of work, the $14,000 estimate or the sister's role as a person liable to pay had gone.
How can a law firm use AI for a costs agreement without sending it to ChatGPT or Claude?
Ermos is built so the document stays under your control. On the Dominion AI unit it is drafted inside your office and none of it is sent to an AI provider. On Ermos Edge your documents and index stay on your own instance in an Australian data centre, and only the question and the excerpts the user is permitted to see go to a named Australian provider that is contractually barred from keeping them or training any model on them. The agreement is drafted from the matter file and the firm's own costs agreement template, and a solicitor checks the scope, the rates and the disclosure and signs it.
What must a law practice tell a client about costs at the start of a matter?
Under section 174 of the Legal Profession Uniform Law, which applies in NSW, it must give the basis on which costs will be calculated and an estimate of the total, tell the client of significant changes, and set out the client's rights to negotiate a costs agreement and the billing method, to receive a bill and ask for an itemised bill, and to seek help from the Office of the Legal Services Commissioner.
What happens if a law practice does not give costs disclosure?
Section 178 provides that the costs agreement is void. The client is not required to pay until the costs are assessed or a dispute is determined, the practice cannot start recovery proceedings until then, and the failure may be unsatisfactory professional conduct or professional misconduct. Disclosure is not required where costs are unlikely to exceed $750 excluding GST and disbursements, or for the commercial clients the Law lists.
Can a law practice charge a percentage of what the client recovers?
Generally not. Section 183 prohibits costs agreements under which any part of the amount payable is calculated by reference to the amount of an award or settlement. A conditional costs agreement may include an uplift of up to 25 per cent of the legal costs excluding disbursements, but not in family law or criminal matters, and the uplift must be disclosed and estimated.

See Dominion answering from your own documents.

A demonstration takes 30 minutes, uses no client data, and comes with no obligation.

Book a demo