30 AI Prompts for Legal & Compliance Teams
Copy-ready prompts that assume you will attach the contract, clause or policy — built to accelerate the first pass so your judgement goes where it counts. Always have a qualified lawyer review anything consequential.
Each prompt gives the AI a legal-analyst persona, references your attached document, applies a structured review method, and defines the output — with a clear instruction to escalate to counsel. These prompts are tool-agnostic and optimised to work across all major AI assistants — Claude, Microsoft Copilot and ChatGPT (and Google Gemini). Replace the [bracketed placeholders] with your own details, and always review AI output before you act on it.
Contract review
First-Pass Contract Risk Review
contract analyst (not a lawyer)
the full signed or draft contract (PDF/Word)
- Summarise the parties, purpose and effective date
- List each side's key obligations side by side
- Identify the term, renewal and termination triggers
- Assess the liability, indemnity and limitation-of-liability position
- Flag the five clauses that most favour the counterparty
- Use plain English, no legal jargon
- Cite the clause/section number for every point
- Flag anything material for counsel review
- Do not state a legal conclusion or give advice
A structured review (parties, obligations table, term/termination, liability position, top-5 unfavourable clauses) followed by a short 'must escalate to counsel' list.
See example AI output
Parties: Serunai Ventures Sdn Bhd (Client) and Kelana Logistics Sdn Bhd (Vendor), 3-year logistics services agreement effective 1 Jan 2027 (cl. 1-2). Obligations: Client pays RM 45,000/month (cl. 5.1); Vendor guarantees 98% on-time delivery (cl. 4.3). Termination: either party may terminate on 90 days' notice (cl. 12.1); auto-renews unless notice given 60 days before expiry (cl. 12.4). Liability: Vendor's liability capped at 1 month's fees (cl. 9.2) - unusually low. Top concerns: uncapped indemnity for Client (cl. 10.1), broad force majeure for Vendor (cl. 14), unilateral price review (cl. 6.3), exclusivity lock-in (cl. 3.2), governing law set to Singapore not Malaysia (cl. 18). Escalate cl. 9.2, 10.1 and 18 to counsel before signing.
Plain-English Clause Explainer
clause interpreter
no file - paste the specific clause text
- Read the pasted clause carefully
- Explain what it means in plain language
- State who it favours and why
- Describe the realistic worst-case outcome if triggered
- Suggest one question to raise with counsel
- No legalese in the explanation
- Be specific, not generic
- State clearly this is not legal advice
A short plain-English explanation, a 'favours' verdict, a worst-case scenario, and one suggested question for counsel.
See example AI output
This clause (cl. 10.1) means Kedai Segar Sdn Bhd must cover the Vendor's losses, fines or legal costs arising from any claim linked to the products supplied - even if the Vendor was partly at fault. It favours the Vendor, since there's no cap and no carve-out for the Vendor's own negligence. Realistic worst case: a product-liability claim from a retailer triggers a six-figure indemnity payout not covered by our insurance, which excludes contractual liability assumed beyond common law. Question for counsel: can we negotiate a cap and a carve-out for the Vendor's gross negligence or wilful misconduct? This is not legal advice - confirm before signing.
Redline Change Impact Analysis
redline analyst
no file - paste both versions of the clause
- Compare the original and revised clause text word for word
- Identify exactly what changed
- Assess whether each change helps or hurts our position
- Note the negotiation implication of each change
- Be precise about wording differences
- Flag any subtle shift in risk allocation
- Do not overlook deletions, only additions
A change table with columns: Change, Effect (helps/hurts us), Our position.
See example AI output
Change table for the payment clause (cl. 5): (1) 'within 30 days' changed to 'within 45 days' - Effect: hurts us (Kelana Logistics gets longer to pay) - Our position: push back to 30 days or add 1.5%/month late interest. (2) Added 'subject to Client's satisfactory acceptance' - Effect: hurts us (creates a subjective payment trigger) - Our position: require objective, time-bound acceptance criteria (e.g. 5 business days' silent acceptance). (3) Deleted 'time is of the essence' - Effect: hurts us (weakens our right to terminate for late payment) - Our position: reinstate it or add an explicit cure period with a termination right.
One-Sided Terms Risk Scan
risk reviewer
the full draft contract
- Scan the contract for unusual, one-sided or missing terms
- Check liability caps, auto-renewal, exclusivity, IP ownership, termination and governing law
- Rank each finding by risk level
- Explain why each item is a concern
- Rank findings high/medium/low
- Explain the reasoning, don't just list
- Do not give legal advice or a final verdict
A prioritised issues list for counsel, ranked by risk with a one-line rationale each.
See example AI output
Prioritised issues for Amanah Teknologi Sdn Bhd's SaaS agreement: HIGH - no liability cap for either party (cl. 9), uncapped exposure on a RM 2M contract. HIGH - auto-renews for successive 24-month terms unless 120 days' notice is given (cl. 12.2), easy to miss the window. MEDIUM - IP in customisations assigned to the Vendor by default (cl. 7.1); we may want ownership of custom-built features. MEDIUM - no governing law clause found, defaulting to ambiguity; should specify Malaysia. LOW - exclusivity clause restricts us from using competing vendors in Sabah/Sarawak only (cl. 3.4). Recommend counsel review the HIGH items before signature.
Pre-Signing Due-Diligence Questions
due-diligence assistant
the near-final agreement
- Read the agreement to identify gaps and ambiguities
- Generate questions for the counterparty grouped by commercial, legal and operational themes
- Prioritise questions that close real gaps rather than generic ones
- Be sharp and specific to this deal
- Avoid boilerplate questions with no real gap behind them
- Group clearly by category
A question list grouped under Commercial, Legal and Operational headings.
See example AI output
Questions for Warisan Agro Sdn Bhd before signing the supply agreement with Ladang Emas Sdn Bhd: COMMERCIAL - Is the RM 18/kg price fixed for the full 12-month term or subject to review? What happens if actual volume falls below the 500-tonne minimum? LEGAL - Who owns any IP in the customised packaging design (cl. 8)? Is there a change-of-control clause if Ladang Emas is acquired? OPERATIONAL - What is the agreed lead time for rejected-batch replacement? Which party bears the cost of a recall triggered by a food-safety issue? Who is the named escalation contact during the Ramadan peak-demand period?
Drafting clauses
Draft Plain-Language Contract Clause
legal drafter (output for counsel review)
no file - specify clause type and purpose
- Identify the clause type and its purpose (e.g. confidentiality)
- Draft the clause for a Malaysian commercial contract with balanced positions
- Mark every point that needs counsel confirmation
- Explain the drafting choices made
- Use clear, standard clause structure
- Balanced, not one-sided by default
- Not a substitute for lawyer review before use
The draft clause text followed by a short note explaining the choices made.
See example AI output
Draft confidentiality clause for Sinar Kreatif Sdn Bhd's vendor agreement: 'Each party shall keep confidential all non-public information disclosed by the other party in connection with this Agreement ("Confidential Information") and shall not disclose it to any third party without prior written consent, except to employees and advisers on a need-to-know basis, or as required by law. This obligation survives termination for 3 years. [COUNSEL: confirm carve-outs for independently developed information.]' Note: kept mutual, not one-sided, since both parties exchange pricing and product data; 3-year survival is a common Malaysian SME default, flagged for confirmation.
Rewrite Dense Clause for Clarity
plain-language editor
no file - paste the dense clause
- Read the pasted clause carefully
- Rewrite it in language a business reader understands
- Preserve the legal effect exactly
- Flag if any rewrite risks subtly changing the meaning
- Do not alter obligations, rights or conditions
- Keep defined terms consistent
- Flag uncertainty rather than guessing
The rewritten clause plus a one-line caution note on any residual risk of meaning drift.
See example AI output
Original (cl. 6.4): 'Notwithstanding anything to the contrary herein, the Purchaser's remedies for non-conformance shall be limited exclusively to repair or replacement at the Vendor's sole discretion, and in no event shall the Vendor be liable for consequential, indirect or special damages arising therefrom.' Rewritten: 'If the goods don't meet the agreed specification, Timur Jaya Sdn Bhd (the Vendor) will either repair or replace them - Vendor chooses which. Vendor is not responsible for any knock-on losses this causes us, such as lost sales.' Caution: confirm with counsel whether 'consequential' also excludes loss of goodwill in our jurisdiction.
Draft First-Version NDA
first-draft generator (for counsel to finalise)
no file - specify the two parties and purpose
- Set out the recitals and definitions
- Draft the operative confidentiality clauses
- Add term, termination and boilerplate provisions
- Mark all points requiring a counsel decision
- Use a Malaysia governing-law placeholder
- Keep structure standard and complete
- List the assumptions made
A full draft NDA structure with an assumptions list at the end.
See example AI output
Draft mutual NDA between Cahaya Digital Sdn Bhd ('Party A') and Beta Robotics Sdn Bhd ('Party B') for evaluating a potential joint robotics project. Structure: (1) Recitals - purpose of disclosure; (2) Definitions - 'Confidential Information', 'Representatives'; (3) Obligations - non-disclosure, permitted use, need-to-know access; (4) Exclusions - public domain, independently developed, legally compelled disclosure [COUNSEL: confirm standard exclusions]; (5) Term - 2 years, survives termination; (6) Governing law - Malaysia [PLACEHOLDER]; (7) Boilerplate - notices, assignment, entire agreement. Assumptions: mutual disclosure; no IP transfer intended; 2-year term pending business confirmation.
Clause Negotiation Fallback Ladder
negotiation strategist
no file - paste the clause under negotiation
- Read the clause and identify our current ask
- List fallback positions from most to least favourable
- Give the rationale for each fallback
- Identify the point at which we should walk away
- Keep fallbacks realistic and market-consistent
- Note that counsel should confirm before use
- Be explicit about the walk-away trigger
A tiered fallback table (Position, Rationale, Walk-away marker).
See example AI output
Fallback ladder for the liability cap clause with Nadi Fintech Sdn Bhd: TIER 1 (ideal) - cap at 12 months' fees, carve-out for gross negligence. TIER 2 - cap at 12 months' fees, no carve-out. TIER 3 - cap at 2x annual fees. TIER 4 (minimum acceptable) - cap at 2x annual fees, absolute ceiling RM 500,000. WALK AWAY if the counterparty insists on uncapped liability or a cap below 6 months' fees, given our exposure on a RM 1.2M annual contract. Tiers 3-4 align with typical Malaysian SaaS market terms. Confirm final position with counsel before presenting.
Limitation-of-Liability Clause Options
liability-clause specialist (for counsel review)
no file - specify the contract type and deal value
- Draft two or three limitation-of-liability options at different risk levels
- Explain the trade-off of each option
- Note the typical market position for this contract type
- Flag the draft for counsel before use
- Do not present any option as legal advice
- Keep options genuinely distinct in risk
- Note market benchmark where relevant
The clause options listed side by side with the trade-off explained for each.
See example AI output
Limitation-of-liability options for Zenith Manufacturing Sdn Bhd (as supplier) on a RM 3M equipment contract: OPTION A (lowest risk to us) - cap at fees paid in the preceding 12 months, exclude all consequential loss; buyer may resist as too restrictive. OPTION B (balanced) - cap at 1.5x annual contract value, carve-out for gross negligence and IP infringement; moderate exposure, more likely accepted. OPTION C (buyer-friendly) - cap at 3x annual value, includes limited consequential loss for downtime; higher exposure, stronger negotiating position on price. Market norm for Malaysian industrial equipment contracts of this size sits near Option B. Flag all three for counsel sign-off.
Compliance and policy
Regulatory Compliance Checklist Builder
compliance analyst
no file - specify the regulation and industry
- Identify the core obligations under the named regulation for the industry
- List the evidence needed to demonstrate compliance
- Assign an owner and review frequency to each obligation
- Note where a qualified adviser must confirm scope
- Keep the checklist actionable, not descriptive
- Tailor to a Malaysian SME context
A compliance checklist table (Obligation, Evidence, Owner, Review frequency).
See example AI output
Compliance checklist for Rimba Fresh Sdn Bhd (F&B manufacturer): Obligation 1 - maintain valid MeSTI certification - Evidence: certificate + annual audit report - Owner: QA Manager - Review: annually. Obligation 2 - label allergen information correctly - Evidence: approved label proofs on file - Owner: Packaging Lead - Review: per SKU launch. Obligation 3 - temperature-log the cold chain - Evidence: daily logs, 12-month retention - Owner: Warehouse Supervisor - Review: monthly spot-check. [ADVISER: confirm the current MeSTI renewal cycle and any recent labelling amendments before relying on this checklist.]
PDPA Obligations Staff Summary
plain-language summariser
no file - specify the regulation, e.g. PDPA
- Identify the key obligations under the named regulation for the business
- Translate them into what staff must do and must not do
- State the penalties for non-compliance
- Keep it accurate to the current law
- Flag anything needing legal confirmation before publishing
- Write for a non-legal staff audience
A one-page plain-language summary staff can act on.
See example AI output
PDPA one-pager for Meridian Retail Sdn Bhd staff: MUST DO - obtain clear consent before collecting customer NRIC or phone numbers; use customer data only for the stated purpose (e.g. loyalty program, not a new marketing list); respond to a data-access request within 21 days. MUST NOT - share customer databases with vendors without a data-processing agreement; keep customer data longer than needed; email customer lists over personal Gmail. Penalties: PDPA breaches can attract fines up to RM 1 million and/or imprisonment for the company and responsible officers. [LEGAL: confirm against the latest PDPA amendment before distributing.]
PDPA-Aligned Privacy Notice Draft
privacy-notice drafter (for counsel review)
no file - specify the use case, e.g. e-commerce checkout
- Identify what personal data is collected and why
- State the legal basis, retention period and any third-party sharing
- Draft the notice covering the individual's PDPA rights
- Mark the draft for counsel review against current PDPA requirements
- Use plain language a customer can understand
- Avoid overclaiming rights not granted under PDPA
The draft privacy/data-protection notice text.
See example AI output
Draft PDPA notice for Kedai Manis Online (checkout page): 'We collect your name, delivery address, phone number and payment reference to process and deliver your order. This data is retained for 3 years for warranty and tax purposes, then securely deleted. We share your delivery details only with our courier partner, Pos Ekspres Sdn Bhd, solely to fulfil delivery. Under the Personal Data Protection Act 2010, you may request access to, or correction of, your personal data by emailing privacy@kedaimanis.my. [COUNSEL: confirm retention period against tax record requirements and confirm the courier data-sharing agreement is in place.]'
Policy-to-Staff Plain Summary
policy translator
no file - paste the internal policy text
- Read the pasted policy
- Summarise what staff must and must not do
- Illustrate with three concrete examples
- Stay accurate to the source policy
- Use plain, everyday language
- Avoid adding rules not in the source
A short employee-facing summary with three worked examples.
See example AI output
Summary of Gemilang Holdings' Gift & Entertainment Policy: MUST - decline gifts worth over RM 200; log any accepted gift with your manager within 5 days. MUST NOT - accept cash or cash-equivalents (vouchers, gift cards) from vendors. Examples: (1) A vendor sends a RM 150 hamper at Chinese New Year - acceptable, but log it. (2) A supplier offers a RM 500 shopping voucher - decline and report to your manager. (3) A client invites you to a RM 80 lunch during a project review - acceptable, no logging needed as it's under the RM 200 threshold.
Compliance Training Scenario Quiz
training designer
no file - specify the compliance topic
- Identify realistic workplace scenarios for the named topic
- Write ten scenario-based questions
- Provide the correct answer and a one-line explanation for each
- Keep scenarios realistic to a Malaysian workplace
- Ensure each answer is unambiguous
- Avoid trick questions with no clear right answer
A ten-question scenario quiz with answers and explanations.
See example AI output
Compliance quiz on anti-bribery for Kencana Engineering Sdn Bhd (sample of 3): Q1 - A supplier offers to 'fast-track' your invoice approval in exchange for recommending them for a new tender. Do you accept? Answer: No - this is a bribe linked to a business decision; report to Compliance immediately. Q2 - A government officer hints a 'facilitation payment' would speed up your licence. Answer: Refuse and escalate; facilitation payments are prohibited under the MACC Act 2009. Q3 - You receive a RM 3,000 'thank you' after closing a deal. Answer: Decline and report - this is a bribe, not a gift.
Legal research and summaries
Plain-Language Legal Concept Explainer
legal-concepts explainer (not giving advice)
no file - specify the topic, e.g. force majeure
- Explain what the concept is in plain language
- Explain why it matters in a business context
- List the typical considerations that apply
- State clearly this is general information to verify with counsel
- No confident claims about how it applies to a specific case
- Keep it general and educational
- End with points to confirm with counsel
A plain-language explainer plus a list of points to confirm with counsel.
See example AI output
Force majeure, explained for Pelangi Events Sdn Bhd: it's a contract clause that excuses a party from performing when an extraordinary event outside their control makes performance impossible - e.g. a natural disaster, war, or government-ordered shutdown. Why it matters: without this clause, you could be in breach and liable for damages even if the reason was genuinely outside your control. Typical considerations: whether the clause lists specific triggering events or is broadly worded; whether notice must be given within a set timeframe; whether it excuses or only delays performance. Confirm with counsel: does our events contract cover pandemic-related closures specifically?
Long Legal Document One-Page Brief
document summariser
the full lengthy legal document
- Read the attached document in full
- Identify the purpose, key terms and obligations
- Identify the risks and the decisions required
- Cite the relevant sections for each point
- Stay accurate to the source text
- Use plain language for a business audience
- Cite section numbers for traceability
A one-page brief (Purpose, Key terms, Obligations, Risks, Decisions required).
See example AI output
Brief on the 40-page facility agreement between Harapan Capital Sdn Bhd and Bank Utara Berhad: Purpose - RM 5M term loan for warehouse expansion (cl. 2). Key terms - 5-year tenor, 4.8% p.a., quarterly repayment (cl. 3-4). Obligations - maintain debt-service coverage ratio above 1.25x, provide quarterly management accounts within 30 days of quarter-end (cl. 8.2-8.3). Risks - personal guarantee required from two directors (cl. 11); cross-default clause ties this loan to any default under our other banking facilities (cl. 14.1). Decision required: confirm directors' willingness to guarantee, and check whether cl. 14.1 creates unwanted cross-default exposure.
Legal Process Step Outline
process outliner
no file - specify the process, e.g. terminating a commercial lease
- List the typical steps in the named process
- Note where local law governs versus where the contract governs
- Flag the points that need counsel confirmation
- Present as general information, not advice
- Keep steps in logical sequence
- Mark each verify-with-counsel point clearly
A numbered step outline with verify-with-counsel markers.
See example AI output
Typical steps to terminate a commercial lease early (general information for Bumi Cafe Sdn Bhd): 1. Review the lease's early-termination clause for notice period and penalty [VERIFY: exact wording]. 2. Serve written notice per the lease's notice-delivery method. 3. Settle outstanding rent, utilities and reinstatement costs per the lease terms. 4. Return the premises in the agreed condition [VERIFY: what condition is contractually required]. 5. Recover the security deposit, subject to deductions. Note: Malaysian contract law generally lets the lease terms govern early termination unless the lease is silent, in which case common law principles may apply [VERIFY with counsel].
Legal Memo to Talking Points
translator for non-lawyers
no file - paste the legal memo
- Read the pasted legal memo
- Extract the points a business stakeholder needs to act on
- Convert them into bullet-point talking points
- Preserve any caveats stated in the memo
- Do not state false certainty where the memo hedges
- Keep the caveats intact
- Keep bullets short and actionable
A bullet-point talking points list.
See example AI output
Talking points from counsel's memo on the proposed Sabah distribution deal for Cendana Beverages Sdn Bhd: We can proceed, but exclusivity should be capped at 18 months, not the requested 3 years. The memo flags uncertainty on whether local Sabah licensing rules require separate registration - counsel recommends confirming with a local agent before signing. Termination for convenience should include a 90-day notice period to avoid abrupt supply disruption. 60-day payment terms are acceptable but longer than our standard 30-day policy - flag to Finance. Caveat retained: analysis assumes the distributor is not government-linked; if it is, additional rules may apply.
External Counsel Instruction Brief
counsel-briefing assistant
no file - specify the matter and attach relevant documents
- Summarise the background of the matter
- List the specific questions for counsel to answer
- State the outcome we want
- List the documents being provided
- Keep scope tight to control cost
- Be specific, not open-ended
- Avoid asking counsel to redo work we can do ourselves
A concise instruction brief (Background, Questions, Desired outcome, Documents attached).
See example AI output
Instruction brief for Messrs Tan & Rahman re: Selera Nusantara Sdn Bhd franchise dispute. Background: our Ipoh franchisee stopped paying royalties since March 2026, citing alleged breach of territory exclusivity by us opening a new outlet 4km away. Questions: (1) Does our exclusivity clause (cl. 9) support the franchisee's claim? (2) What are our options to recover unpaid royalties (approx. RM 84,000)? (3) Is termination for non-payment defensible given the counter-claim? Desired outcome: recover unpaid royalties and preserve our termination rights, ideally without litigation. Documents attached: franchise agreement, royalty statements, franchisee's demand letter dated 2 June 2026.
Risk and due diligence
Transaction Due-Diligence Checklist
DD coordinator
no file - specify the transaction type, e.g. share acquisition
- Group the checklist by legal, financial, operational and compliance workstreams
- List the document to obtain for each item
- State the risk each item addresses
- Keep comprehensive but prioritised
- Tailor to the transaction type given
- Avoid generic filler items
A DD checklist table (Item, Workstream, Document to obtain, Risk addressed).
See example AI output
DD checklist excerpt for acquiring 70% of Delima Foods Sdn Bhd: LEGAL - verify no pending litigation - Document: litigation search + director confirmation - Risk: undisclosed liabilities. FINANCIAL - confirm revenue recognition policy - Document: 3 years audited accounts + management accounts - Risk: inflated historical revenue. OPERATIONAL - check key supplier contracts for change-of-control clauses - Document: top 10 supplier agreements - Risk: supply disruption post-acquisition. COMPLIANCE - confirm halal certification is current and transferable - Document: JAKIM certificate + renewal correspondence - Risk: loss of certification disrupting sales to key retail chains.
Due-Diligence Risk Register Summary
risk analyst
the collected due-diligence documents
- Review the attached documents for risks flagged
- Rank each risk by severity and likelihood
- Note the mitigation or deal implication for each
- Base findings on evidence in the documents, not assumption
- Escalate material items clearly
- Keep the register scannable
A risk register table (Risk, Severity, Likelihood, Mitigation/Deal implication).
See example AI output
Risk register from Delima Foods DD documents: Risk 1 - RM 1.2M unpaid supplier invoice not on the balance sheet - Severity: High - Likelihood: Confirmed - Implication: adjust purchase price or require pre-completion settlement. Risk 2 - lease on the Shah Alam factory expires in 8 months with no renewal option - Severity: High - Likelihood: Confirmed - Implication: negotiate renewal before completion or discount valuation. Risk 3 - two key sales staff have change-of-control exit clauses - Severity: Medium - Likelihood: Likely - Implication: negotiate retention agreements pre-completion. ESCALATE Risk 1 and 2 to the deal committee.
Single Risk-Register Entry Draft
risk-register drafter
no file - describe the specific issue
- Describe the issue and its root cause
- Assess likelihood and impact
- List current controls in place
- Propose a mitigation with a named owner
- Be specific and measurable where possible
- Avoid vague mitigation language like 'monitor closely'
- Assign a clear owner
A single structured risk-register entry.
See example AI output
Risk-register entry - Vantage Logistics Sdn Bhd: Issue - over-reliance on a single haulage subcontractor (Trek Cargo) for 65% of delivery volume. Cause - no formal secondary-vendor arrangement was ever set up. Likelihood - Medium (subcontractor has shown cash-flow strain in recent invoices). Impact - High: a sudden Trek Cargo failure would disrupt deliveries to 40+ retail clients within days. Current controls - none formal, only ad-hoc spot-hire arrangements. Proposed mitigation - qualify and onboard a second haulage vendor covering at least 25% of volume within Q3 2026; owner - Head of Operations, Ravi Kumar, target 30 September 2026.
Document Red-Flag Identifier
red-flag spotter
the document under review, e.g. target company financials
- Scan the attached document for items warranting further investigation
- Explain why each item is a red flag
- Rank the flags by level of concern
- Explain the reasoning, not just list items
- Focus on genuine anomalies, not routine items
- Do not draw a final conclusion - flag for counsel
A ranked red-flag list for counsel with a one-line rationale each.
See example AI output
Red flags in Orkid Pharma Sdn Bhd's target accounts: HIGH - revenue jumped 45% in Q4 2025 with no corresponding increase in headcount or inventory - possible channel-stuffing or premature revenue recognition. HIGH - RM 600,000 'consultancy fee' paid to a company sharing a director with the target - undisclosed related-party transaction. MEDIUM - three senior managers resigned within the past 4 months - possible undisclosed internal issue. LOW - auditor changed twice in 3 years - could be routine, worth asking why. Recommend counsel and a forensic accountant review the HIGH items before proceeding to signing.
Management Risk Options Memo
risk-memo writer (for counsel sign-off)
no file - describe the issue requiring a decision
- Explain the issue clearly
- Present the options available to management
- State the pros, cons and risk of each option
- Give a recommendation
- Keep the analysis balanced, not one-sided
- Flag the memo for counsel sign-off before acting
- Base the recommendation on the stated risks
A short decision memo (Issue, Options with pros/cons/risk, Recommendation).
See example AI output
Memo: response to Cempaka Retail Sdn Bhd's data breach affecting ~3,000 customer records. Options: (1) Notify affected customers and the Personal Data Protection Commissioner immediately - Pros: transparency, limits reputational damage; Cons: short-term reputational hit; Risk: Low-Medium. (2) Delay notification pending internal investigation - Pros: more complete facts; Cons: risk of PDPA penalty for late notification, risk of a leak before we control the message; Risk: High. (3) Notify only regulators, not customers - Pros: limits publicity; Cons: likely breaches PDPA, high reputational risk if discovered; Risk: High. Recommendation: Option 1. Flag for counsel sign-off before any notification is sent.
Communication
Plain-Language Query Response Draft
legal-to-business translator
no file - paste the query from the other department
- Read the department's query carefully
- Answer the question directly
- State the risk involved
- Give a practical recommendation
- No legalese
- Keep any necessary caveats intact
- Be direct and actionable
A short plain-language response (Answer, Risk, Recommendation).
See example AI output
Response to Sales team query: 'Can we offer a customer a 5% discount for paying upfront in cash, off-invoice?' Answer: You can offer a prompt-payment discount, but it must be documented on the invoice or a formal addendum - an off-book cash arrangement is not advisable. Risk: undocumented cash discounts can create SST reporting discrepancies and look like under-reported revenue if audited by LHDN. Recommendation: apply the discount as a stated line item on the invoice (e.g. '5% early-payment discount') and route it through normal banking channels rather than an off-invoice cash adjustment.
Legal Explanation for Executives
executive communicator
no file - paste the legal explanation to rewrite
- Read the original legal explanation
- Lead with the decision the executive needs to make
- Follow with the reasoning
- End with the risk
- Be concise
- Preserve factual accuracy from the original
- Avoid legal jargon
A short rewritten note structured as Decision, Reasoning, Risk.
See example AI output
Note to CEO, Anggun Beauty Sdn Bhd: Decision - We should not proceed with the influencer contract as drafted; ask for the exclusivity clause to be narrowed before signing. Reasoning - the clause stops the influencer working with any beauty or personal-care brand for 12 months after our campaign, broader than needed and could make the deal unattractive to her, or unenforceable if challenged. Risk - signing as-is either invites a costly dispute if she breaches it, or gives us a clause we can't practically enforce, weakening our credibility in future influencer deals.
Firm Position Letter Draft
correspondence drafter (for counsel review before sending)
no file - specify the matter and the position
- State our position on the matter clearly
- Set out the basis for that position
- State the specific ask
- Include a clear deadline
- No threats we cannot back up
- Professional tone throughout
- Flag for counsel before sending
A draft letter (Position, Basis, Ask, Deadline).
See example AI output
Draft letter to Pertama Builders Sdn Bhd re: delayed handover of the Cyberjaya office fit-out. Position: the project is 6 weeks behind the contractual completion date of 15 June 2026 with no agreed extension. Basis: clause 7.2 entitles us to liquidated damages of RM 2,000/day for delay beyond the completion date. Ask: written confirmation of a revised completion date within 7 days, or we will begin applying liquidated damages from 16 June 2026. Deadline: response required by 30 July 2026. [FLAG: counsel to confirm the liquidated-damages calculation and enforceability before sending.]
Legal Advice to Action List
advice summariser
no file - paste the legal advice received
- Read the legal advice provided
- Extract each decision it implies
- Convert it into an owner-assigned action list with deadlines
- Stay faithful to the original advice
- Do not add actions the advice didn't recommend
- Assign a clear owner and date to each item
An action list (Decision, Reasoning, Owner, Due date).
See example AI output
Action list from counsel's advice on the Nusa Interiors trademark dispute: 1. Decision - file a response to the cease-and-desist within the statutory period. Reasoning - failing to respond risks a default admission. Owner - Legal Manager, Aina. Due - 5 August 2026. 2. Decision - commission a trademark-clearance search for our proposed new logo. Reasoning - avoids repeating the conflict. Owner - Brand Manager, Farid. Due - 15 August 2026. 3. Decision - pause use of the disputed logo on new marketing material pending resolution. Owner - Marketing Lead, Priya. Due - immediate.
Staff Guidance for PDPA Requests
guidance writer
no file - specify the situation, e.g. handling a data-subject access request
- List the steps staff should follow for the named situation
- State the applicable timeline
- Clarify what to do and not do
- State when to escalate to legal
- Keep it practical and easy to follow
- Ensure it reflects compliant handling
- Be explicit about the escalation trigger
Clear staff guidance (Steps, Timeline, Do/Don't, Escalation point).
See example AI output
Staff guidance: handling a PDPA data-subject access request at Selesa Homestay Sdn Bhd. Steps: (1) Acknowledge the request in writing within 2 working days. (2) Verify the requester's identity before releasing any data. (3) Locate all personal data held about the individual across booking, CRM and accounting systems. (4) Compile and send the data within 21 days of the request. DO: log every request in the DSAR register. DON'T: release data without identity verification, or discuss the request with the individual's employer or family without consent. Escalate to Legal immediately if the request involves a dispute or a minor.
More prompt packs by function
View the full Prompt LibraryFrequently Asked Questions
AI is a powerful first-drafter and summariser, but it can be confidently wrong and must never replace a qualified lawyer for anything consequential. Never paste privileged or confidential documents into public consumer tools — use approved enterprise AI, and always have counsel review the output. Every prompt here instructs the AI to flag items for counsel.
No. AI can explain concepts, draft and summarise, but it does not provide legal advice and can misstate the law. Treat everything as a draft for a qualified professional to verify. These prompts are written with that boundary built in.
You can attach documents to review, but only via your organisation's approved, confidential enterprise AI — never a public consumer tool for privileged or sensitive material. Confirm your firm's data policy first.
For confidentiality, enterprise deployments (Copilot within your Microsoft tenant, or an approved Claude/ChatGPT enterprise plan) matter most. These prompts work across the major assistants.
Yes. AITraining2U's courses are HRD Corp SBL-KHAS claimable for eligible Malaysian employers.
If a document contains personal data - names, NRIC numbers, phone numbers, addresses, or customer records - pasting it into a public AI tool can count as a data disclosure under the Personal Data Protection Act 2010, especially if the tool retains or trains on your input. Before using AI on contracts, HR records or customer files, redact identifiable personal data where possible, and confirm your organisation's approved AI tool has appropriate data-processing terms. When in doubt, use an enterprise-tier tool with no-training guarantees rather than a free consumer version.
No. General-purpose AI models can confidently cite the wrong section number, misstate a repealed provision, or blend Malaysian law with rules from another jurisdiction, because they aren't guaranteed to be current or jurisdiction-accurate. Treat every AI-generated legal reference - Act names, section numbers, case citations - as a claim to verify against the actual statute or a legal database, not a fact to repeat as-is. This is exactly why every prompt in this set builds in a 'flag for counsel' step before anything is relied upon.
AI can help draft and structure disclosure documents, but material, non-public information used to prepare an announcement is highly sensitive - if pasted into a public AI tool, it could create an inadvertent disclosure or insider-trading risk before the announcement is made. Listed companies should restrict any AI use involving price-sensitive information to approved, access-controlled enterprise tools, keep a clear audit trail, and have Company Secretary or counsel sign off before anything drafted with AI assistance is filed or released under Bursa Malaysia's Listing Requirements.
It reduces the amount of billable time spent on first drafts and summaries, not the need for a lawyer on anything consequential. AI is well suited to producing a first-pass contract review, a plain-language explainer, or a due-diligence checklist that a lawyer would otherwise draft from scratch - which can lower legal costs. But signing contracts, filing disclosures, or handling disputes based on AI output alone, without a qualified lawyer's review, exposes an SME to real risk that a modest legal fee would have prevented.
Use your organisation's approved enterprise AI plan (an enterprise Claude, Copilot or ChatGPT deployment with a signed data-processing agreement), not a free consumer account, since enterprise tiers typically commit not to train on your input. Where possible, strip out counterparty names, values and identifying details before pasting, and only attach full documents through tools your IT or compliance team has cleared. Check your NDA obligations too - some confidentiality clauses restrict sharing documents with third-party services, which a public AI tool may count as.
Go beyond prompts — train your team
Prompts are the start. AITraining2U runs hands-on, HRD Corp SBL-KHAS claimable AI training for Malaysian teams — from everyday AI productivity to building agents that run legal & compliance workflows end-to-end.