Google Gemini for Lawyers: Which Version Is Safe, and What It Is Good For

Google wrote the warning itself. The privacy hub for the consumer Gemini app says: “Please don’t enter confidential information that you wouldn’t want a reviewer to see or Google to use to improve our services” (Google). A guide to Gemini for lawyers that does not open with that sentence is selling something.

The difficulty is that three products share the name. The consumer app on a personal account, the Gemini bundled into Google Workspace, and Gemini Enterprise for Legal run under different terms, and a lawyer who opens the wrong one with a client letter in the clipboard has, in the UK Upper Tribunal’s words about a comparable tool, placed that information “on the internet in the public domain”.

Three Geminis: consumer app, Workspace, Enterprise for Legal

The Maryland State Bar’s tier comparison adds the limits: the free app allows 120 queries a day with 15 GB of storage, Pro 100 queries an hour with Workspace integration, and Ultra and Enterprise sit above (MSBA). The account type matters more than the limits.

The consumer warning in Google’s own words

Read the consumer privacy hub as you would a vendor’s terms. Keep Activity is on by default. A portion of conversations is reviewed by humans: “Reviewed chats: Retained for up to 3 years, disconnected from your account.” Turning activity off drops retention to 72 hours but does not undo what has been reviewed.

If anyone in the firm uses the consumer app: Google Account > Gemini Apps Activity > off.

Workspace: no training, no human review, and the retention settings

Gemini inside a Workspace Business, Enterprise or Education account is the product a firm can defend. Google’s commitment: “Your content is not human reviewed or otherwise used for Generative AI model training outside your domain without permission”, under the Cloud Data Processing Addendum (Workspace privacy hub). Certifications listed include SOC 1, 2 and 3, ISO 27001, 27701 and 42001, and FedRAMP High. Three settings decide how safe it is in practice:

1. Retention. Admins choose auto-delete after 3, 18 or 36 months; the default is 18. Choose deliberately.
2. Permissions. Gemini follows document permissions: “If you don’t have permission to see a file, the AI can’t see it or use it either.” A shared drive half the firm can open is now one half the firm can query in plain English, the oversharing problem that also hits Microsoft Copilot.
3. The Notebook carve-out. Google states that Gemini Notebook and Gemini in Chrome “does not support ISO, SOC, or FedRAMP compliance and is not covered by the Google Business Associate Agreement”. Lawyers handling PHI should read that twice.

Gemini Enterprise for Legal and the MCP links to RelativityOne and Everlaw

Google’s move into the legal vertical was reported in August 2026 as Gemini Enterprise for Legal, with centralised governance for firms. The concrete evidence came in LawNext’s ILTACON round-up in September 2026: Everlaw’s integrations with CoCounsel Legal and Harvey (autumn 2026), Microsoft 365 Copilot (live) and Gemini Enterprise for Legal (private preview), and RelativityOne’s connection to Gemini via the Model Context Protocol (LawNext). Everlaw’s AJ Shankar: “Litigation data is too complex for any single silver bullet.” The evidence stays in the review platform and Gemini becomes one of several assistants that can question it, a better architecture than exporting a production into a chatbot; see AI document review and e-discovery.

Strengths: OCR, long documents, and living in Docs and Gmail

The lawyers who like Gemini like it for unglamorous reasons. The innovation-committee member who compared Harvey, Claude, Legora and CoCounsel on r/legaltech ended one post with a line the vendors will not enjoy: “Billions of dollars and can’t build a better OCR than Gemini.” Another practitioner there pre-processes everything with OCR before any AI sees it, “otherwise you get hallucinated dates, mangled drug names, and unusable citations”. The second strength is location: a Workspace firm lives in Docs, Gmail and Drive, and Gemini sits inside all three, which makes the low-risk tasks frictionless.

The attached PDF is a scanned [lease / bank statement] bundle, already anonymised. Transcribe it faithfully; mark any word you cannot read [ILLEGIBLE] rather than guessing.
Then extract into a table: Field | Value exactly as written | Page | Confidence (High / Medium / Low). Fields: [dates, parties, amounts, clause numbers].
Write NOT FOUND where a field is absent; never infer a value. List the pages where scan quality made you uncertain.

Rewrite the text below for a client with no legal training, reading on a phone, without changing its legal effect: short sentences, one idea per paragraph, each technical term defined in brackets the first time. Keep every obligation, deadline and exclusion.
Then give me a two-column table, original sentence | rewritten sentence, so I can check nothing was lost.
Text: [paste]

Weaknesses: fabricated case law and low usage among lawyers

Spellbook, a vendor with a product to sell, says Gemini “frequently fabricates case law” (Spellbook). Discount the source; the court record says the same without a sales motive:

• Lacey v. State Farm (C.D. Cal., 6 May 2025): an outline built with CoCounsel, Westlaw Precision and Google Gemini was folded into a brief unchecked; 9 of 27 citations were wrong; Ellis George and K&L Gates were ordered to pay $31,100. Special Master Wilner: “The AI use misled the Court. That’s frightening.”
• Noland v. Land of the Free (Cal. Ct. App., September 2025): 21 of 23 quotations fabricated across ChatGPT, Claude, Gemini and Grok; $10,000.

Usage is the other weakness, because playbooks, plugins and peer advice follow the crowd. In the Bayerischer AnwaltVerband survey of 558 Bavarian lawyers, 88% in firms of one to ten, Gemini was used by 4.2% of AI-using firms against 69.2% for ChatGPT, 70.7% for DeepL and 21.7% for Copilot (survey). The State Bar of Texas 2026 survey lists ChatGPT (63% of users), Copilot (44%) and Westlaw/CoCounsel (30%); Gemini does not make the table.

How Gemini scored on legal benchmarks

On exam-style reasoning Gemini is a top-three general model. On tasks that need the right authority, no benchmark shows any general model clearing the bar a filing requires; see legal AI benchmarks explained.

Gemini vs NotebookLM: when to use which

NotebookLM was renamed Gemini Notebook on 16 July 2026, which deepens the confusion, because the two behave differently. Notebook answers only from the sources you upload, with clickable citations back to them: 50 sources on the free tier, 300 on Google AI Pro. Its privacy terms differ too: content “will not be used to directly train our foundational AI models, unless you choose to provide feedback”, prompts are “not retained after session ends”, and for Workspace users uploads and queries “will not be reviewed by human reviewers even when you provide thumbs up or down feedback” (Gemini Notebook privacy). On a personal account feedback is human reviewed and kept up to three years, so submit none.

From the uploaded sources only, create a one-page case brief: parties, procedural posture, issues, key facts and relief sought. Every sentence must carry a citation to a source and page. Then build a dated timeline of events and flag any contradiction between sources and any document referred to but not uploaded. Where the sources do not answer a point, write NOT IN SOURCES.

The full litigation workflow for Notebook, from upload to spot-check, is in NotebookLM for lawyers.

Setting up Gemini for lawyers safely in a small firm

1. One account type. Work happens on Workspace Business or Enterprise under firm administration; personal accounts are for personal life. Put Google’s own warning in the policy as the reason.
2. Set retention and permissions before the first prompt.
3. Decide the Notebook question. If you handle PHI or need ISO or SOC coverage, route that material away from Gemini Notebook.
4. Anonymise by default, even on Workspace.
5. Verify every authority in a database. The Lacey outline was built with a research platform and Gemini and still cost $31,100; the checklist is in how to verify AI legal citations.
6. Test on three past matters where you already know the outcome.

Where to go next: the confidentiality table for every vendor is in is ChatGPT confidential for lawyers; the other general models are compared in ChatGPT vs Claude for lawyers; the wider ranking starts at best AI tools for lawyers in the tools hub. In AI Lab for Lawyers we put the Gemini app and NotebookLM side by side on the same anonymised bundle, so a Workspace firm leaves knowing which door to use for which task.