AI and technology USE Policy

Johnson IP Law, A Professional Corporation

AI and Technology Use Policy

Effective Date: March 18, 2026 Last Updated: March 18, 2026

1. Overview

Johnson IP Law is committed to leveraging technology to provide efficient, high-quality legal services while maintaining the highest standards of client confidentiality and data protection. This policy describes how we use artificial intelligence (AI) and other advanced technology tools in our practice, the safeguards we implement, and your rights as a client.

This policy supplements our general Website Privacy Policy, which governs data collection through johnsonljlaw.com.

2. How We Use AI Tools

We may use AI-assisted technology for the following purposes:

• Legal      Research: Identifying relevant case law, statutes, regulations, and      prior art
• Document      Drafting: Generating initial drafts of correspondence, patent      applications, contracts, and other legal documents
• Administrative      Tasks: Scheduling, document organization, and workflow management
• Technical      Analysis: Assisting with understanding complex technologies in AI/ML,      semiconductors, networking, SaaS, and optical systems matters

Important: AI tools assist our work but do not replace attorney judgment. All AI-generated or AI-assisted work product is reviewed, edited, verified, and approved by a licensed attorney before delivery to any client.

3. Attorney-Client Privilege

Our use of AI tools does not diminish or waive attorney-client privilege protections. We configure AI tools to maintain confidentiality consistent with our professional obligations under the California Rules of Professional Conduct.

Note: As with all communications, an attorney-client relationship is not established until we formally agree to represent you and you agree to our engagement terms. General inquiries submitted through AI-assisted intake processes are not privileged until a formal representation relationship exists.

4. Data Safeguards

We implement the following safeguards when using AI and technology tools:

Vendor Selection & Due Diligence

• We      evaluate AI tool providers for their data handling practices, security      certifications (e.g., SOC 2), and legal compliance
• We      require or confirm the existence of Data Processing Agreements (DPAs) with      AI tool vendors and their underlying model providers
• We      prioritize tools that offer enterprise-grade security, API-level access      with no-training guarantees, and attorney-client privilege protections

No Training on Your Data

• We      configure AI tools to prevent your data from being used for model      training, fine-tuning, or improvement
• Where      available, we use API access with explicit no-training agreements rather      than consumer-facing products

Data Encryption & Transmission

• Client      data transmitted to AI tools is encrypted in transit using      industry-standard protocols (TLS 1.2+)
• Data      is encrypted at rest where supported by the tool provider
• We do      not upload client documents to AI tools that lack adequate encryption or      data protection

Data Retention

• We do      not permit AI tool providers to retain your data beyond the immediate      processing session unless required for our legitimate business purposes
• Conversation      histories and uploaded documents are managed in accordance with vendor      retention policies and our records management practices
• Client      files are retained in accordance with professional rules of conduct,      typically 4-5 years after the matter concludes unless longer retention is      required by law

Access Controls

• AI      tools are accessed only by authorized personnel at our firm
• We      maintain separate accounts for personal and professional use

5. Attorney Oversight and Responsibility

AI tools are assistive technologies, not decision-makers. Our attorneys:

• Review      all AI-generated content for accuracy, completeness, and legal soundness
• Verify      citations, case law, and factual claims independently
• Apply      professional judgment to all legal analysis and recommendations
• Take      full responsibility for all work product delivered to clients, regardless      of AI assistance

We are cognizant that AI tools may produce errors, omissions, outdated information, or "hallucinations" (plausible but incorrect outputs). Our review processes are designed to identify and correct such issues before any work reaches you.

6. Prohibited Uses

We do not use AI tools to:

• Share      your confidential information with other clients or third parties
• Generate      insights, analytics, or datasets for purposes outside your representation
• Make      autonomous legal decisions without attorney review
• Process      highly sensitive information (e.g., trade secrets, privileged      communications) through tools that lack adequate safeguards
• Bypass      attorney-client privilege protections
• Sell,      trade, or rent your personal information

7. Your Rights

Opt-Out: If you prefer that we not use AI tools in connection with your matter, please notify us in writing. We will accommodate such requests to the extent practicable, though it may affect turnaround times or fees.

Inquiries: You may request information about:

• The      categories of AI tools used on your matter
• The      safeguards in place for a specific tool
• Our      vendor due diligence practices

California Residents (CCPA/CPRA): You have the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the "sale" or "sharing" of your personal information (as defined under California law). Our use of AI tools does not constitute a sale of your data. To exercise your rights, contact us using the information below.

Concerns: If you have concerns about our technology use, please contact us directly. We take all client concerns seriously and will address them promptly.

8. Breach Notification

In the event we discover or are notified that a technology vendor has experienced a data breach that may have compromised your confidential information, we will:

• Notify      you promptly upon confirmation of the breach
• Provide      information about the nature and scope of the incident
• Describe      the steps we are taking in response
• Cooperate      with any investigation or remediation efforts
• Comply      with California's data breach notification requirements

9. Third-Party Services

Our AI tools may rely on third-party infrastructure and model providers, including:

• Cloud      hosting providers (e.g., AWS, Google Cloud, Microsoft Azure)
• AI      model providers (e.g., OpenAI, Anthropic, Google)
• Productivity      platforms (e.g., Microsoft 365, Google Workspace)

We evaluate these providers for adequate data protection and, where available, maintain contractual safeguards prohibiting use of client data for training or unauthorized purposes.

10. Policy Updates

We review this policy periodically and update it as our technology practices evolve or as legal and regulatory requirements change. The "Last Updated" date at the top of this page reflects the most recent revision.

Material changes to this policy will be communicated to active clients. We encourage you to review this page periodically.

11. Contact Us

If you have questions about this policy or our technology practices, please contact:

Johnson IP Law 1875 S Bascom Ave, Suite 2400 #55 Campbell, CA 95008 Phone: (408) 772-7987 Email: patents-intake@johnsonljlaw.comWebsite: johnsonljlaw.com

This policy is for informational purposes and supplements, but does not replace, the terms of your engagement letter with Johnson IP Law.