How the gate works
This tool grades each AI meeting notetaker in an advisory firm on six controls, two of them fatal, before an exam. It scores 6 weighted controls into a 0–100 number — then a gate that can only make the verdict worse.
The 6 weighted controls
Two of the six controls are fatal: client consent before the tool captures a meeting, and a human review before AI notes enter the client record. If either is absent, the tool is NOT DEFENSIBLE regardless of the score — no paperwork offsets a meeting captured without consent or a summary filed with no one checking it. Turn the missing control on and the wire releases.
Why: This Copilot deployment is cleanly documented — consent captured, retention, vendor diligence, supervisory procedures, and inventory all in place — for a score of 80 that on points alone reads DEFENSIBLE. But its AI notes are filed with no human review, the second fatal control. The tripwire fires: a strong process can't rescue a missing fatal control, so the verdict is NOT DEFENSIBLE, not DEFENSIBLE.
A high score didn’t save it. The score is context; the gate is the answer — and it names the one thing to fix first. Not legal advice. A deterministic readiness aid that grades your process from your own marks — it renders no legal ruling, makes no reportability or books-and-records determination, and scores no person. Regulatory specifics move; confirm consent law, recordkeeping, and supervisory duties with your compliance counsel before relying on any tool.