US Litigation Law Firm

About the Customer

The firm’s management was highly enthusiastic about AI and eager to invest in a range of AI tools, actively encouraging employees to make use of everything on offer.

The customer — referred to here as “the firm” — is a US-based law firm that specializes in complex litigation and class action cases, representing individuals in matters involving consumer protection, privacy, technology, and corporate accountability. As the firm increasingly leveraged modern digital tools and cloud-based platforms to support collaboration and case management, protecting sensitive client and case data became a top priority. The firm partnered with Darktrace to gain deeper visibility across its digital environment, strengthening its ability to detect emerging threats, safeguard confidential information, and support secure business operations in an evolving cyber risk landscape.

Customer Challenge

Keen to make the most of AI, the firm decided to roll out specific sets of tools to subsets of users in order to trial how useful the products were. These decisions were based on how advanced the firm perceived each group of users to be in their use of AI.

Because this approach relied on assumptions about who was using AI and how, the firm risked investing in the wrong tools and shaping policy around an inaccurate picture of real usage.

Partner Solution

The firm deployed Darktrace / SECURE AI to see how AI was actually being used across the firm in real time. The tool provided visibility into AI adoption - including Shadow AI - revealing where usage differed from the firm’s expectations.

Darktrace / SECURE AI is a SaaS platform, hosted on AWS and running as containerized workloads on Kubernetes, that gives enterprises unified monitoring and detection across the enterprise AI services used throughout their business. The platform ingests generative-AI telemetry from a wide range of enterprise AI tools — including Amazon Bedrock, Microsoft Copilot, Claude Enterprise, ChatGPT Enterprise, and SASE platform logs — and applies Darktrace’s Adaptive AI to detect behavioral anomalies across AI interactions. For AWS, / SECURE AI integrates natively with Amazon Bedrock in the customer’s tenant, analyzing model-invocation logs from the foundation models available through it (such as Amazon Nova and Anthropic Claude). The SECURE AI policy-compliance engine calls the Amazon Nova Lite model via the Bedrock Converse API to summarize uploaded policy documents into compliance criteria and evaluate whether prompts comply — with those documents stored in Amazon S3. The platform is secured with standard best-practice AWS-native controls.

Results and Benefits

After running / SECURE AI, the firm found that real-time AI usage was different from what it had predicted. The firm had previously chosen to invest in one AI tool over another on the expectation that it would be more popular; the visibility provided by / SECURE AI, including insight into Shadow AI, has since shaped discussions about where to spend.

The firm also discovered that employees’ attitudes toward AI usage appeared to differ from those of management. Overall, the visibility from / SECURE AI has given the security team greater confidence in how tools are being used and provided data to inform the firm’s AI policy and its decisions about where to invest in order to streamline broader AI adoption.