Go Back

Governing AI in Legal Teams: Balancing Growth, Cost and Control

Webinar recap featuring Dr. Matthias Artzt, Senior Legal Counsel at Deutsche Bank, hosted by Dylan Viljoen, Head of Delivery Growth at Radiant Law.

‍

As AI adoption accelerates across legal functions, many organisations have moved beyond experimentation and pilot programmes. Legal teams now need to scale AI while keeping governance, cost and accountability firmly under control and the emergence of agentic AI has introduced a new layer of complexity.

‍

Unlike traditional AI assistants that provide information or recommendations, AI agents can increasingly make decisions, interact with systems, trigger actions and operate with varying degrees of autonomy.

‍

As legal and compliance teams evaluate where these technologies fit within their operating models, several critical questions are emerging:

  • How should legal teams distinguish between AI assistants and AI agents?
  • Where can agentic AI genuinely create value?
  • How much autonomy is appropriate for different legal use cases?
  • What governance controls are needed to manage risk effectively?
  • How can organisations balance innovation with accountability?
  • How should legal teams prepare for emerging regulatory and liability frameworks?

These were some of the themes explored in Radiant Law's recent webinar. Drawing on his experience advising on AI governance, legal risk and emerging regulatory frameworks, Matthias shared practical insights into how organisations can govern AI systems responsibly while enabling innovation.

‍

Here are the key takeaways….

‍

‍

1. AI Agents Are Fundamentally Different From AI Assistants

‍

One of the session's most important distinctions was the difference between AI assistants and AI agents.

‍

Matthias proposed a simple three-part test:

  • Can the system act?
  • Can it decide how to act?
  • Can it continue acting without approval at each step?

Traditional AI tools primarily provide information. AI agents act on information.

‍

This distinction matters because governance requirements change significantly once systems move beyond generating outputs and begin taking actions. Agents may trigger workflows, interact with business systems, instruct other agents or execute tasks with limited human intervention. As Matthias explained, AI getting an answer wrong is only the start of the problem. The bigger worry is what happens when an autonomous system acts on that wrong answer.

‍

When one agent's output becomes another agent's input, errors can compound quickly. Governance therefore becomes less about managing individual model outputs and more about managing entire agentic ecosystems.

‍

‍

2. Agentic AI Creates Value in Three Key Areas

‍

While much of the market discussion focuses on automation, Matthias highlighted three practical areas where AI agents are already demonstrating value.

‍

Information and Analysis

‍

Legal teams are increasingly using AI to:

  • Review contracts
  • Analyse regulations
  • Compare policies
  • Conduct legal research
  • Identify inconsistencies across large data sets

These use cases remain some of the most mature and accessible applications for legal teams.

‍

Workflow Orchestration

‍

Agentic AI becomes particularly powerful when managing end-to-end processes. An agent can:

  • Gather information
  • Analyse inputs
  • Generate recommendations
  • Interact with internal systems
  • Escalate exceptions when necessary

‍

At Deutsche Bank, Matthias discussed how future agentic solutions could help manage data subject requests by identifying and extracting relevant personal data across multiple systems and repositories.

‍

‍Continuous Monitoring

‍

Regulatory requirements, contracts, policies and risks are not static. AI agents can (for example) continuously monitor the following and alert organisations when action is required:

  • Regulatory developments
  • Policy changes
  • Compliance obligations
  • Emerging risks

‍

This ability to monitor at scale may prove one of the most valuable long-term applications of agentic AI within legal and compliance functions. 

‍

‍

3. Start With the Business Case, Not the Technology

‍

A recurring theme throughout the discussion was the importance of evaluating business value before introducing AI.

‍

Matthias cautioned against deploying agentic solutions simply because the technology exists. Instead, organisations should start by asking:

  • What problem are we solving?
  • How often does this task occur?
  • What costs currently exist?
  • What risks are associated with the process?
  • Is automation economically justified?

‍

A task that takes five minutes once per month may not justify a sophisticated autonomous solution. However, a process performed thousands of times across multiple systems could present a compelling business case.

‍

The lesson is simple: identify the business problem first and then determine whether AI is the appropriate solution. 

‍

‍

4. More Autonomy Does Not Automatically Create More Value

‍

One of the webinar's most thought-provoking insights challenged a common assumption: that greater autonomy always delivers greater value.

‍

According to Matthias, this is often one of the biggest misconceptions surrounding AI implementation. For example:

  • An agent that assists with contract review may create meaningful efficiency gains.
  • An agent that negotiates and signs contracts introduces an entirely different risk profile.

As autonomy increases, so does the need for:

  • Governance controls
  • Monitoring
  • Testing
  • Human oversight
  • Accountability mechanisms

‍

Autonomy has a price. Past a certain point, the cost of managing the risk outweighs what the extra autonomy delivers. The aim is the sweet spot where value, risk exposure and governance cost balance out.

‍

‍

5. Governance Must Be Risk-Based

‍

Just as organisations should avoid over-automating, they should also avoid over-governing.

‍

Matthias argued that governance frameworks should match risk. A low-risk internal research tool should not require the same controls as an agent capable of:

  • Approving payments
  • Negotiating contracts
  • Making decisions affecting customers
  • Triggering external actions

‍

Governance costs money too. If a framework costs more than the risk it manages, nobody will stick with it.

‍

The same goes for human oversight. Putting a person in the loop on everything wastes their time, so match the level of involvement to the risk. Higher-risk decisions get more human attention, and lower-risk tasks can run with more autonomy.

‍

‍

6. Effective AI Governance Requires Six Layers of Guardrails

‍

One of the most practical parts of the discussion focused on guardrails that organisations should implement before deploying agentic systems.

‍

Matthias outlined six governance layers:

‍

Identity and Authority

‍

Clearly define:

  • What the agent can do
  • What the agent cannot do
  • The scope of its delegated authority

‍

Data Boundaries

‍

Establish clear rules governing:

  • Data access
  • Data processing
  • Data transfer

‍

Decision Boundaries

‍

Define escalation thresholds requiring human review and intervention.

‍

‍Technical Controls

‍

Implement safeguards covering:

  • Prompt injection attacks
  • Cybersecurity risks
  • Model failures
  • Unexpected behaviour

‍

Monitoring and Auditability

‍

Organisations should record:

  • What decisions were made
  • Why they were made
  • What information informed the decision

‍

‍Accountability

‍

Link every agent to an identifiable human owner or organisational function responsible for its operation. Importantly, build these controls into the system from the start. As Matthias summarised:

‍

"Know your agent by design."

‍

Embed guardrails in the architecture rather than adding them later as documentation. 

‍

‍

7. Governance Evidence May Become as Important as Governance Itself

‍

A particularly interesting area discussed during the webinar was the role of evidencing governance decisions.

‍

Drawing on themes explored in his article, Agentic AI Governance: Ten Reasons Legacy Controls Are No Longer Sufficient, Matthias argued that traditional governance frameworks were largely designed for passive software systems rather than autonomous actors.

‍

As organisations delegate authority to AI agents, demonstrating that they've established appropriate controls may become increasingly important.

‍

He highlighted blockchain as one potential mechanism for evidencing governance decisions and controls through immutable records, including:

  • Agent permissions
  • Guardrails
  • Delegated authority
  • Governance controls

‍

While blockchain will not be necessary for every use case, the broader message was clear: governance must be demonstrable, not simply documented.

‍

‍

8. AI Liability Is Becoming a Major Legal Risk Area

‍

The discussion also looked ahead to emerging regulatory developments.

‍

Matthias highlighted the EU Product Liability Directive (2024/2853), which entered into force on December 8, 2024 and must be transposed into member state law by December 9, 2026. The directive extends liability concepts to software and AI systems, creating important implications for organisations developing and deploying agentic technologies.

‍

Courts have yet to test liability for AI-driven outcomes. However, legal teams should expect increasing scrutiny of:

  • Governance arrangements
  • Accountability structures
  • Testing frameworks
  • Documentation
  • Oversight mechanisms

‍

This theme aligns closely with Matthias' article, Who Is Liable When Agentic AI Causes Loss?, which explores how responsibility may be allocated when autonomous systems contribute to harmful outcomes.

‍

As agentic AI becomes more widely adopted, organisations will need to pay increasing attention to questions of accountability, responsibility and liability.

‍

9. The Lawyer's Role Is Evolving

‍

Perhaps the most forward-looking discussion centred on how legal professionals themselves may need to adapt.

‍

In Matthias's opinion, lawyers will increasingly spend less time performing routine legal analysis and more time:

  • Defining objectives
  • Setting operational boundaries
  • Managing exceptions
  • Validating outcomes
  • Designing governance frameworks

‍

The legal professionals best positioned to succeed in this environment will be those who can operate across multiple disciplines, including:

  • Law
  • Data
  • Technology
  • Cybersecurity
  • Risk management
  • Organisational governance

‍

The future lawyer may look less like a traditional legal specialist and more like a governance architect for increasingly autonomous systems. 

‍

‍AI Success Depends on Risk-Adjusted Value

‍

One of the biggest lessons from the session was about where autonomy helps most. Good AI implementation means knowing where it creates real value, where you need proper controls, and how to balance innovation with accountability.

‍

The organisations that get this right will be the ones that understand:

  • Where AI can safely create value
  • Where human judgement remains essential
  • Which governance controls are proportionate to risk
  • How to evidence accountability
  • How to measure risk-adjusted return on investment

As AI settles into legal and compliance work, these questions stop being theory and become day-to-day priorities. Legal leaders will need to govern it well as autonomy, complexity and business reliance grow.

‍

Looking to Build an AI Governance Strategy for Your Legal Team?

‍

As legal teams move beyond experimentation and begin deploying AI at scale, governance, operating models and legal service design become increasingly important.

‍

At Radiant Law, we help legal teams identify where AI can create value, structure governance frameworks, and integrate AI into legal operations in a practical, sustainable way.

‍

What if your contracting process is not truly optimised for AI?

‍

Take the Assessment
Keep the momentum going! Here's what to do next:

You might be wondering what your next steps should be. Let us guide you with three easy options:

Take the Optimised Contracting Assessment
Start Quiz
Attend a Webinar
Register
Get Expert Support
Contact Us
Previous article
There is no previous article.
Next article
There is no next article.