AI skills · Legal & compliance

AI skills for
legal and compliance

These 10 skills help legal and compliance teams — and founders without one — read faster and miss less: contract risk summaries, clause comparisons, NDA checks, plain-English privacy notices, DPDP and EU AI Act readiness checklists and policy gap reviews. They prepare work for a lawyer; they do not replace one.

  • In-house counsel
  • Paralegal
  • Compliance officer
  • Privacy / data protection officer
  • Contract manager
  • Founder
10 skills

Which legal & compliance skill should I install first?

Start with Contract risk summary. Long contracts get signed without anyone spotting the clauses that cause trouble later. After you paste it in and send the contract text and which side you're on (customer, vendor, employer…), you get a one-page summary of key terms and a red/amber/green list of risky clauses with suggested edits. Jump to Contract risk summary ↓

In-house counsel / founder

Contract risk summary

ProblemLong contracts get signed without anyone spotting the clauses that cause trouble later.

You paste

SaaS vendor agreement, 18 pages · we are the customer

You get

Red — 11.2: liability capped at fees paid in the last month → ask for 12 months.

Amber — 3.4: auto-renews for 12 months unless cancelled 90 days before.

Green — 8.1: you own your data and can export it on termination.

Immediate resultA one-page summary of key terms and a red/amber/green list of risky clauses with suggested edits.

Install instructions
  1. Copy the skill below.
  2. Paste it into ChatGPT, Claude, Gemini or Copilot as your first message.
  3. Send the contract text and which side you're on (customer, vendor, employer…).
# Skill: Contract risk summary

You are running the "Contract risk summary" skill for me. I work as: In-house counsel / founder. What I need from you: a one-page summary of key terms and a red/amber/green list of risky clauses with suggested edits.

## When I send you the contract text and which side I'm on (customer, vendor, employer…)
1. Summarise parties, term, fees, renewal, termination and governing law.
2. Flag risky clauses: liability caps, indemnities, auto-renewal, IP, exclusivity, data, payment terms.
3. Rate each red, amber or green from your side.
4. Suggest a fallback edit for each red clause.

## Reply in this format
- Key terms table
- Risk table: clause, quote, rating, why, suggested edit
- Questions for the other side

## Rules
- Quote clause numbers and text exactly.
- Not legal advice: end every reply with a reminder that a qualified lawyer should review before anything is signed, sent or filed.
- Use only the facts I give you; mark anything you had to assume with [ASSUMPTION].
- If something essential is missing, ask me one short question, then continue.
- No preamble or filler: start with the result.

Confirm you're ready in one line, then wait for me to send the contract text and which side I'm on (customer, vendor, employer…).
Contract manager / lawyer

Clause comparison

ProblemComparing the other side's redline with your standard terms clause by clause is slow and error-prone.

You paste

Our indemnity clause vs the client's redlined version

You get

Theirs adds 'and any indirect or consequential losses' → widens your exposure significantly.

Response: reject; counter with direct losses only, capped at fees paid.

Formatting-only changes: 3 (listed).

Immediate resultA side-by-side table of each changed clause, what changed, why it matters and a response.

Install instructions
  1. Copy the skill below.
  2. Paste it into ChatGPT, Claude, Gemini or Copilot as your first message.
  3. Send your standard clause (or contract) and their version.
# Skill: Clause comparison

You are running the "Clause comparison" skill for me. I work as: Contract manager / lawyer. What I need from you: a side-by-side table of each changed clause, what changed, why it matters and a response.

## When I send you my standard clause (or contract) and their version
1. Align clauses between the two versions.
2. Describe each substantive change in plain words.
3. Assess the impact on your position.
4. Suggest accept, reject or counter wording.

## Reply in this format
- Comparison table: clause, ours, theirs, what changed, impact, response

## Rules
- Ignore formatting-only changes but list them at the end.
- Not legal advice: end every reply with a reminder that a qualified lawyer should review before anything is signed, sent or filed.
- Use only the facts I give you; mark anything you had to assume with [ASSUMPTION].
- If something essential is missing, ask me one short question, then continue.
- No preamble or filler: start with the result.

Confirm you're ready in one line, then wait for me to send my standard clause (or contract) and their version.
Founder / business development

NDA checker

ProblemTeams sign NDAs without reading them, including one-way terms and very long durations.

You paste

One-way NDA from a large company, 7-year term, includes a 2-year non-solicit

You get

One-way: only protects them — ask for mutual if you share anything.

Non-solicit (clause 9) doesn't belong in an NDA — ask to remove.

Verdict: negotiate.

Immediate resultA quick check of an NDA against a standard checklist, with issues and suggested edits.

Install instructions
  1. Copy the skill below.
  2. Paste it into ChatGPT, Claude, Gemini or Copilot as your first message.
  3. Send the NDA text and whether you're disclosing, receiving or both.
# Skill: NDA checker

You are running the "NDA checker" skill for me. I work as: Founder / business development. What I need from you: a quick check of an NDA against a standard checklist, with issues and suggested edits.

## When I send you the NDA text and whether I'm disclosing, receiving or both
1. Check: mutual or one-way, definition of confidential information, exclusions, duration, permitted use, return or destruction, non-solicit, governing law.
2. Flag unusual or one-sided terms.
3. Suggest standard wording for issues.
4. Give a sign / negotiate verdict.

## Reply in this format
- Checklist table: item, found, OK?
- Issues and suggested edits
- Verdict

## Rules
- Not legal advice: end every reply with a reminder that a qualified lawyer should review before anything is signed, sent or filed.
- Use only the facts I give you; mark anything you had to assume with [ASSUMPTION].
- If something essential is missing, ask me one short question, then continue.
- No preamble or filler: start with the result.

Confirm you're ready in one line, then wait for me to send the NDA text and whether I'm disclosing, receiving or both.
Founder / privacy officerRising demand

Privacy notice drafter

ProblemPrivacy notices are copied from other sites and don't describe what the product actually does with data.

You paste

Fitness app: email, phone, workouts, heart rate from wearables; analytics via PostHog; servers in Mumbai

You get

What we collect: your email and phone number, the workouts you log, and heart-rate data if you connect a wearable.

Gap: how long do you keep heart-rate data after someone deletes their account?

Rights (India): access, correction, erasure, grievance redressal — name a contact.

Immediate resultA plain-English privacy notice draft based on your real data practices, with gaps flagged.

Install instructions
  1. Copy the skill below.
  2. Paste it into ChatGPT, Claude, Gemini or Copilot as your first message.
  3. Send what personal data you collect, why, who you share it with, where it's stored, how long you keep it, and your countries.
# Skill: Privacy notice drafter

You are running the "Privacy notice drafter" skill for me. I work as: Founder / privacy officer. What I need from you: a plain-English privacy notice draft based on my real data practices, with gaps flagged.

## When I send you what personal data I collect, why, who I share it with, where it's stored, how long I keep it, and my countries
1. Structure the notice: who we are, data collected, purposes, legal basis, sharing, retention, rights, contact.
2. Write it in plain language at a reading age of about 12–14.
3. Add country-specific sections where you name them (India DPDP, EU GDPR).
4. List practices you need to confirm or fix.

## Reply in this format
- Privacy notice draft
- Data inventory table
- Gaps and questions

## Rules
- Describe only practices the user states.
- Not legal advice: end every reply with a reminder that a qualified lawyer should review before anything is signed, sent or filed.
- Use only the facts I give you; mark anything you had to assume with [ASSUMPTION].
- If something essential is missing, ask me one short question, then continue.
- No preamble or filler: start with the result.

Confirm you're ready in one line, then wait for me to send what personal data I collect, why, who I share it with, where it's stored, how long I keep it, and my countries.
Compliance / privacy officer (India)Rising demand

DPDP Act readiness check

ProblemIndian companies must comply with the DPDP Act and Rules by May 2027 and don't know where they stand.

You paste

Edtech app for students aged 10–18, consent via a checkbox at sign-up, no breach process

You get

Children's data: missing — verifiable parental consent is required for under-18s.

Breach notification: missing — you need a process to inform the Board and affected users.

Priority 1: parental consent flow.

Immediate resultA gap assessment against the main DPDP Act and Rules duties, with priorities and owners.

Install instructions
  1. Copy the skill below.
  2. Paste it into ChatGPT, Claude, Gemini or Copilot as your first message.
  3. Send a description of what personal data you process, how you collect consent, and your current privacy practices.
# Skill: DPDP Act readiness check

You are running the "DPDP Act readiness check" skill for me. I work as: Compliance / privacy officer (India). What I need from you: a gap assessment against the main DPDP Act and Rules duties, with priorities and owners.

## When I send you a description of what personal data I process, how I collect consent, and my current privacy practices
1. Check notice, consent, purpose limitation, children's data, security safeguards, breach notification, retention and rights handling.
2. Mark each as in place, partial or missing.
3. Prioritise gaps by risk and deadline.
4. Suggest an owner and first action for each.

## Reply in this format
- Gap table: duty, status, evidence, action, owner
- Priorities
- Questions for counsel

## Rules
- Refer to the DPDP Act 2023 and DPDP Rules 2025 by section or rule where possible and say when you're unsure.
- Not legal advice: end every reply with a reminder that a qualified lawyer should review before anything is signed, sent or filed.
- Use only the facts I give you; mark anything you had to assume with [ASSUMPTION].
- If something essential is missing, ask me one short question, then continue.
- No preamble or filler: start with the result.

Confirm you're ready in one line, then wait for me to send a description of what personal data I process, how I collect consent, and my current privacy practices.
Compliance / AI product leadRising demand

EU AI Act risk check

ProblemTeams building AI features don't know whether the EU AI Act treats them as prohibited, high-risk or low-risk.

You paste

AI that ranks job applicants' CVs for EU employers

You get

Likely high-risk: Annex III, employment — recruitment and selection.

Duties: risk management, data governance, human oversight, logging, transparency to candidates.

Date: stand-alone high-risk duties from 2 December 2027 (per the provisional Omnibus deal).

Immediate resultA first-pass classification of your AI system under the EU AI Act with the duties that follow and dates.

Install instructions
  1. Copy the skill below.
  2. Paste it into ChatGPT, Claude, Gemini or Copilot as your first message.
  3. Send what your AI system does, who uses it, where (EU users?) and what decisions it influences.
# Skill: EU AI Act risk check

You are running the "EU AI Act risk check" skill for me. I work as: Compliance / AI product lead. What I need from you: a first-pass classification of my AI system under the EU AI Act with the duties that follow and dates.

## When I send you what my AI system does, who uses it, where (EU users?) and what decisions it influences
1. Check against prohibited practices.
2. Check whether it falls in an Annex III high-risk area (employment, credit, education, essential services…).
3. Check transparency duties (chatbots, AI-generated content).
4. List the duties that apply and their current dates.

## Reply in this format
- Classification and reasoning
- Duties that apply
- Key dates
- What to do now
- Questions for counsel

## Rules
- Note that dates may change (the Digital Omnibus moved high-risk duties to December 2027).
- Not legal advice: end every reply with a reminder that a qualified lawyer should review before anything is signed, sent or filed.
- Use only the facts I give you; mark anything you had to assume with [ASSUMPTION].
- If something essential is missing, ask me one short question, then continue.
- No preamble or filler: start with the result.

Confirm you're ready in one line, then wait for me to send what my AI system does, who uses it, where (EU users?) and what decisions it influences.
Consumer or small business owner

Terms explainer

ProblemNobody reads terms of service, so people agree to things they'd object to.

You paste

Terms of a photo-editing app (pasted)

You get

You give them a licence to use your uploads to train their AI (clause 6.2) — unusual; check for an opt-out.

Subscriptions renew automatically; cancel at least 24 hours before.

Disputes go to arbitration in Singapore.

Immediate resultA plain-English summary of the terms with the five things you should know before agreeing.

Install instructions
  1. Copy the skill below.
  2. Paste it into ChatGPT, Claude, Gemini or Copilot as your first message.
  3. Send the terms of service or user agreement text.
# Skill: Terms explainer

You are running the "Terms explainer" skill for me. I work as: Consumer or small business owner. What I need from you: a plain-English summary of the terms with the five things I should know before agreeing.

## When I send you the terms of service or user agreement text
1. Summarise what you're agreeing to in five bullets.
2. Flag data use, auto-renewal, cancellation, liability and dispute terms.
3. Rate each flag as normal or unusual.
4. List questions to ask or settings to change.

## Reply in this format
- In five bullets
- Watch-outs table: term, quote, normal or unusual
- What you can do

## Rules
- Not legal advice: end every reply with a reminder that a qualified lawyer should review before anything is signed, sent or filed.
- Use only the facts I give you; mark anything you had to assume with [ASSUMPTION].
- If something essential is missing, ask me one short question, then continue.
- No preamble or filler: start with the result.

Confirm you're ready in one line, then wait for me to send the terms of service or user agreement text.
Compliance officer

Policy gap review

ProblemInternal policies drift out of date with laws and actual practice.

You paste

Our POSH policy vs the Sexual Harassment of Women at Workplace Act, 2013

You get

Missing: Internal Committee composition — the Act requires an external member.

Partial: inquiry timeline — the Act sets 90 days for completion.

Suggested wording for section 5 …

Immediate resultA review of your policy against a named standard or law, with gaps, outdated sections and fixes.

Install instructions
  1. Copy the skill below.
  2. Paste it into ChatGPT, Claude, Gemini or Copilot as your first message.
  3. Send the policy text and the standard or law to check it against (e.g. ISO 27001 control, POSH Act, GDPR article).
# Skill: Policy gap review

You are running the "Policy gap review" skill for me. I work as: Compliance officer. What I need from you: a review of my policy against a named standard or law, with gaps, outdated sections and fixes.

## When I send you the policy text and the standard or law to check it against (e.g. ISO 27001 control, POSH Act, GDPR article)
1. Map policy sections to the requirements.
2. Flag missing, partial and outdated items.
3. Flag statements that don't match described practice.
4. Suggest wording for each gap.

## Reply in this format
- Mapping table
- Gaps
- Suggested wording
- Review date

## Rules
- Say if you lack the full text of the standard and need it pasted.
- Not legal advice: end every reply with a reminder that a qualified lawyer should review before anything is signed, sent or filed.
- Use only the facts I give you; mark anything you had to assume with [ASSUMPTION].
- If something essential is missing, ask me one short question, then continue.
- No preamble or filler: start with the result.

Confirm you're ready in one line, then wait for me to send the policy text and the standard or law to check it against (e.g. ISO 27001 control, POSH Act, GDPR article).
Consumer (India)

Consumer complaint writer

ProblemConsumers give up on refunds and faulty products because escalation feels complicated.

You paste

Laptop bought 2 months ago, motherboard failed, service centre refusing warranty repair

You get

Email subject: Warranty repair refused — order #A1234, bought 12 Aug 2026

Steps: 1) grievance officer (15 days) 2) National Consumer Helpline 1915 3) e-Daakhil

Keep: invoice, warranty card, service centre job sheet.

Immediate resultA complaint for the company's grievance officer and a draft for the National Consumer Helpline or e-Daakhil.

Install instructions
  1. Copy the skill below.
  2. Paste it into ChatGPT, Claude, Gemini or Copilot as your first message.
  3. Send what you bought, when, the problem, what the company said and what you want.
# Skill: Consumer complaint writer

You are running the "Consumer complaint writer" skill for me. I work as: Consumer (India). What I need from you: a complaint for the company's grievance officer and a draft for the National Consumer Helpline or e-Daakhil.

## When I send you what I bought, when, the problem, what the company said and what I want
1. Write a complaint to the company's grievance officer with facts and a deadline.
2. Prepare a summary for the National Consumer Helpline (1915) or the e-Daakhil portal.
3. List documents to keep.
4. Explain the steps in order.

## Reply in this format
- Grievance officer email
- Helpline / e-Daakhil summary
- Documents
- Steps

## Rules
- Not legal advice: end every reply with a reminder that a qualified lawyer should review before anything is signed, sent or filed.
- Use only the facts I give you; mark anything you had to assume with [ASSUMPTION].
- If something essential is missing, ask me one short question, then continue.
- No preamble or filler: start with the result.

Confirm you're ready in one line, then wait for me to send what I bought, when, the problem, what the company said and what I want.
Why these skills

Why legal & compliance is in demand

India's DPDP Rules phase in through May 2027 and the EU AI Act's high-risk duties now start in December 2027, so most companies need compliance reading and drafting they don't have staff for — and weak risk controls are one of the main reasons AI projects get cancelled.

Prove it with the free Contract Review and Document Management Basics Certification test, or read all 10 as a guide: AI skills for legal and compliance teams.

10 free AI skills for legal & compliance, with an example from Contract risk summary
10 AI skills for legal & compliance, starting with Contract risk summary.
FAQs

AI skills for legal & compliance: questions

What can AI skills do for legal & compliance?

These 10 skills help legal and compliance teams — and founders without one — read faster and miss less: contract risk summaries, clause comparisons, NDA checks, plain-English privacy notices, DPDP and EU AI Act readiness checklists and policy gap reviews. They prepare work for a lawyer; they do not replace one.

Which legal & compliance skill should I install first?

Start with Contract risk summary. Long contracts get signed without anyone spotting the clauses that cause trouble later. After you paste it in and send the contract text and which side you're on (customer, vendor, employer…), you get a one-page summary of key terms and a red/amber/green list of risky clauses with suggested edits.

What should I not paste into an AI assistant for legal & compliance work?

Not legal advice. Laws change and differ by country; a qualified lawyer must review anything you sign, file or publish. Remove names of parties if your firm requires it.

Why is legal & compliance a high-demand area for AI skills?

India's DPDP Rules phase in through May 2027 and the EU AI Act's high-risk duties now start in December 2027, so most companies need compliance reading and drafting they don't have staff for — and weak risk controls are one of the main reasons AI projects get cancelled.

More job profiles

Next: Education & training →

Free PDF · 74 pages · 2 editions

The Laws of UX, in one field guide

60 research-backed principles in 6 categories — what each one means, why it works on the human brain and how to use it on your own screens. Written by Sushant Singh, founder of Science of Apps, who has scaled consumer apps to lacs of users and spent 10+ years leading product across startups and digital businesses in the US, EU & India.

Pick your edition
Free. No card, no paywall — just your email.
Free PDF · 74 pages

Get Laws of UX by email

Choose your edition

You’ll also get occasional UX psychology tips. Unsubscribe anytime. Privacy policy

Free PDF · 90 pages · 2 editions

100+ Subscription Paywalls, decoded

110 real paywalls from top apps, taken apart, rated out of 5 and decoded with the Laws of UX — plus the frameworks, copy and checklists to ship your own. By Sushant Singh, founder of Science of Apps.

  • 110 paywalls rated
  • 34 Laws of UX
  • 12 frameworks

Which paywall scored 4.8 out of 5, and which scored 2.6? It’s all inside.

Pick your edition
Free. No card, no paywall — just your email.
Free PDF · 90 pages

Get 100+ Paywalls, Decoded by email

Choose your edition

You’ll also get occasional UX psychology tips. Unsubscribe anytime. Privacy policy