For Brisbane and Australian technology founders, this guide helps prepare a focused adviser brief.
An AI product review needs a clear description of the system. Counsel cannot assess customer promises or rights questions from “we use AI” alone. Explain what enters the system, what the system does and how people use the output.
This is general preparation guidance. The rules applicable to an AI product depend on its markets, use case, users and sector.
Draw the product flow
List data sources, prompts, retrieval systems, model providers, storage and outputs. Identify which components your company controls and which it obtains from suppliers.
Record whether customer information is sent to another service, retained, used for evaluation or used for training. Confirm the facts with engineering and current supplier terms. Do not assume all API, enterprise and consumer products have identical conditions.
Review rights and permitted use
Identify the source of datasets, code, content and model components. Keep relevant licences and supplier terms with the system map. Ask counsel to assess whether the intended collection, use and distribution fit the rights available.
Describe how outputs reach users and whether users can publish, edit or act on them. Do not promise ownership or non-infringement of every output without specific review.
Connect risks to controls
NIST's Generative AI Profile is a voluntary risk-management resource, not a legal compliance certificate. It can help structure a discussion about risks and mitigations. NIST Generative AI Profile.
Create a record of intended use, foreseeable misuse, evaluation methods and human review. Identify who investigates failures and whether the product can be paused or changed. Ask sector specialists to review sensitive uses where appropriate.
Check product and sales promises
Compare website claims, demos and contract language with tested capabilities. If the product assists rather than independently decides, describe that clearly. Avoid unsupported claims of perfect accuracy, automatic compliance or elimination of human review.
For a customer asking to automate a consequential decision, record the intended use and escalation process. A general product disclaimer may not answer that customer's specific deployment question.
Assemble the review pack
Give advisers the system diagram, data map, supplier terms, evaluations, customer terms and market list. Ask for a prioritised issue list with owners and decisions.
Use privacy data mapping for data flows and SaaS contracts to align contractual promises with the service.
General information for planning a conversation with qualified advisers. It is not legal advice for your circumstances. Scope, jurisdiction and fees are agreed before any engagement.