Shadow AI isn’t going away. Your legal policy needs to follow it.

Recent LexisNexis research found that 94% of lawyers now use AI for legal work, with 74% using it at least once a week. Yet adoption is moving faster than governance. In a separate 2026 LexisNexis study of legal professionals across Asia-Pacific, only 58% said their organisation had an AI policy in place.

The tools are not necessarily being chosen by Legal either. Axiom’s 2026 In-House Legal AI Report found that two-thirds of legal teams are using general-purpose AI in its default configuration.

AI is already part of the way people work, which means the challenge for Legal is no longer simply whether to allow it, but how to maintain control as the number of tools and ways of using them continues to grow.

Blocking AI isn’t the answer

One person might use ChatGPT to help draft a clause, another might review an agreement with Claude, while someone else works with Copilot inside an existing workflow. As AI becomes embedded in more of the software people already use, trying to control every individual tool becomes increasingly difficult.

Approving a particular AI tool does not solve the underlying problem either, because the tool does not automatically know your organisation’s legal policy. It does not know which liability caps are acceptable, which governing laws Legal has approved, which clauses are mandatory, what can be negotiated or which issues need to be escalated.

These are decisions that should be governed by your organisation’s approved legal policy, rather than determined by whichever AI tool happens to be used.

The rule should follow the work

The choice of AI tool still matters. Security, confidentiality and data handling all need to be considered, but your legal standards should not change depending on which interface someone happens to use.

Whether a contract is being drafted with ChatGPT, reviewed with Claude or worked on in Word, the same approved legal policy should determine what is acceptable.

Rather than recreating Legal’s rules inside every new tool, those rules can sit above the tool layer and be applied consistently wherever contract work takes place.

This is what Lexnus is built for

Lexnus turns your organisation’s approved legal positions into a policy layer that can be applied consistently across contract workflows.

Through Lexnus’s MCP integration, MCP-compatible AI tools can access the same approved playbooks, clauses and policy rules. AI can still help people draft, review and work with contracts, while the organisation’s approved policy determines what is acceptable, what requires attention and what needs to be escalated.

This means Legal does not have to recreate its standards every time the business adopts a new AI tool or changes the way it works. The tools can continue to evolve while the organisation’s legal policy remains consistent.

Shadow AI isn’t going away. Rather than trying to chase every new AI tool, Legal needs a way to make sure its approved policy follows the work, wherever that work happens.