Legal Tech Rewind: September 2026, When the Law Around AI Got Real

Legal Tech Rewind is our month-by-month look back at 2026 for in-house legal teams: what happened, why it mattered, and what it looks like with the benefit of hindsight. Published October 2026.

September in one sentence

OpenAI entered legal research, the specialist vendors raised money and bought guardrails, and courts and legislators turned AI best practices into binding rules.

1. OpenAI launched Astra for Law

On September 17, OpenAI launched Astra for Law. It isn't a new model. It wraps OpenAI's GPT-6 Astra in a legal search index of more than 230 million URLs covering US case law, statutes, regulations and court rules. On a 200-question legal research benchmark from Vals AI, OpenAI reported 54% correctness, compared with 38.7% for the same model using plain web search. It launched with 26 partner plugins, including Thomson Reuters, iManage, Relativity and Clio. Harvey and Legora were named as API customers, and Latham & Watkins helped design governance for ethical walls and permissions.

Why it mattered: with Anthropic in May, Google in August and OpenAI in September, three of the biggest AI model companies built legal products within five months. Microsoft followed in October. 54% is a big improvement and also a reminder that legal research AI still needs a lawyer checking the work.

2. Harvey raised $550 million and bought a guardrails company

On September 9, Harvey raised $550 million at a $15.5 billion valuation, up from $11 billion in March, co-led by Diffusion and Lightspeed. The same day it acquired Guardrails AI, an agent reliability company whose framework tests and monitors how AI agents behave. Harvey CEO Winston Weinberg framed the deal around a question clients keep asking: "how do you know what it will do?"

Why it mattered: the top legal AI vendors now have years of runway, while many smaller vendors don't. And agent testing is becoming a selling point. Ask every agent vendor how it tests behavior before the agent touches your matters.

3. The first appellate ruling on AI training

On September 29 and 30, the Third Circuit affirmed Thomson Reuters' win over ROSS Intelligence. It held that 2,243 Westlaw headnotes are copyrightable and that copying them to train ROSS's AI research tool was not fair use, calling the use "minimally transformative, at best." The court recognized a developing market for licensing content as AI training data, but a footnote limits the ruling to ROSS's non-generative tool. ROSS said it will ask the Supreme Court to review the case.

Why it mattered: it's the first federal appellate word on AI training and fair use. It strengthens licensing arguments for proprietary content, including yours, and raises the stakes on vendor IP indemnities. We broke down what it means for your vendor contracts in our TR v. ROSS post.

4. California wrote the rules for lawyers' AI use

On September 30, Gov. Gavin Newsom signed SB 574, the first state law governing how lawyers and arbitrators use AI. Lawyers must verify citations, including AI-generated ones, disclose generative AI use in court filings, and keep confidential information out of open AI tools, and they may not delegate the practice of law to AI. Arbitrators may not delegate decisions to AI.

He also signed a 13-bill AI package that included the "No Robo Bosses Act," which bars employers from relying solely on automated systems to fire or discipline workers.

Why it mattered: citation checks and AI disclosure moved from "good outside counsel guidelines" to state law in the biggest legal market in the US. And employers using automated tools to discipline or fire California workers will need human review in the loop.

5. Privilege and data security bit back

• Privilege: in the social media addiction litigation, a federal judge ordered Meta to re-review privilege designations on 300 documents after plaintiffs pointed to Instagram swag hats embroidered "a/c priv." In October, the court sent the rest of the dispute to a special master at Meta's expense. (See our privilege labeling post.)
• Data security: Seyfarth Shaw disclosed a data breach exposing names and Social Security numbers of at least 300 people, with notices filed with the Texas and California attorneys general. (See our outside counsel security questionnaire.)

Why it mattered: neither story is about AI, and both are about the basics: privilege discipline and data handling by the firms that hold your most sensitive information.

6. The services market consolidated

Repario acquired UnitedLex, combining two private equity-owned legal services providers. Epiq bought Canopy, whose software works out what data was exposed in a breach and who was affected. Consilio bought Australian e-discovery provider Icourts, and Clio bought Learned Hand, an AI workspace for judges.

Why it mattered: if one of these providers runs work for you, expect account and pricing changes. Use our 30-day vendor acquisition checklist.

7. The data kept coming

• Thomson Reuters Institute (Sept 22): the share of GCs naming technology a strategic priority doubled from 2025 to 2026. And the perception gap is stark: 86% of GCs say legal contributes significantly to the business, but only 17% of other C-suite executives agree.
• Everlaw, ACEDS and ILTA (Sept 24): 49% of legal professionals surveyed actively use generative AI, up 15 points from 2024. One-third still have no formal AI policy, and half say AI has changed or will change billing within a year.
• ACC (published Sept 30): 85% of in-house legal departments now use AI, up from 52% in 2025 and 23% in 2024. But 41% have never audited for unauthorized "shadow AI."

Why it mattered: adoption is nearly universal. Governance and value measurement are not. That 86% vs. 17% gap is the slide to put in front of your CFO.

What to do with September's lessons now

• Update your AI policy and outside counsel guidelines for SB 574: verification, disclosure and confidentiality.
• Check your vendors' IP indemnities in light of TR v. ROSS, especially for generative AI legal assistants and contract intelligence tools.
• Review HR AI tools for California human-review requirements.
• Retrain the business on privilege. Copying legal isn't a privilege strategy. Strong eDiscovery and early case assessment processes help you catch problems before opposing counsel does.
• Run a shadow AI audit. If you're in the 41%, start there.

September's lesson: the AI rules are no longer suggestions. Build your policy as if a judge will read it, because one might.

More from the 2026 Legal Tech Rewind: ← August 2026 · The full 2026 Rewind: 9 lessons

Sources

• SiliconANGLE, "OpenAI launches Astra for Law" (Sept 17, 2026): siliconangle.com
• Legal Cheek, "Top US law firms back OpenAI's new legal platform" (Sept 18, 2026): legalcheek.com
• LawSites, Microsoft launches Copilot for Legal (Oct 15, 2026): lawnext.com
• TechCrunch, Harvey raises $550M (Sept 9, 2026): techcrunch.com
• Legal Business, "Harvey hits $15.5bn valuation in largest fundraising round yet" (Sept 2026): legalbusiness.co.uk
• Harvey, "Guardrails AI joins Harvey" (Sept 9, 2026): harvey.ai
• IPWatchdog, Third Circuit affirms fair use ruling against ROSS (Sept 30, 2026): ipwatchdog.com
• LawSites, Third Circuit unseals its opinion in Thomson Reuters v. ROSS (Oct 2026): lawnext.com
• LawSites, ROSS says it will ask Supreme Court to review (Oct 2, 2026): lawnext.com
• Haynes Boone, "Third Circuit Rejects Fair Use for ROSS's Copying of Westlaw Headnotes" (Oct 2, 2026): haynesboone.com
• Bloomberg Law, "Newsom Signs First-of-Its-Kind Bill on Lawyer, Arbitrator AI Use" (Sept 30, 2026): news.bgov.com
• Gizmodo, Newsom signs bill banning "robo bosses" (Oct 1, 2026): gizmodo.com
• Law360 Pulse via MLex, Meta privilege re-review (Sept 22, 2026): mlex.com
• MLex, Meta document dispute to be decided by special master (Oct 16, 2026): mlex.com
• Law360 Pulse via MLex, Seyfarth Shaw data breach (Sept 22, 2026): mlex.com
• LawSites, Repario acquires UnitedLex (Sept 28, 2026): lawnext.com
• Legal IT Insider, "Epiq acquires data breach response tech company Canopy" (Sept 25, 2026): legaltechnology.com
• Legal Tech Monitor, Consilio acquires Icourts (Sept 1, 2026): legaltechmonitor.com
• Clio, "Clio acquires Learned Hand" (Sept 30, 2026): clio.com
• Thomson Reuters Institute, 2026 Legal Department Operations Report (Sept 22, 2026): thomsonreuters.com
• Everlaw, Legal AI Adoption & Impact Report (Sept 24, 2026): everlaw.com
• In-House Community EU, "AI use reaches 85% of in-house legal departments, ACC survey finds" (Oct 2026): inhousecommunityeu.com
• Lexpert, ACC report on AI adoption and governance (Oct 2026): lexpert.ca

This article is general information, not legal advice.