You’ve got Copilot drafting client emails, summarizing depositions, maybe running a first pass at a letter before an associate ever touches it. That’s the whole reason a firm pays for it. It’s faster than starting the draft yourself.
That speed is exactly what worries Gartner.
Gartner’s Friday joke has a real point buried in it
At Gartner’s Security & Risk Management Summit in Sydney in March 2026, analyst Dennis Xu half-joked that businesses should ban Microsoft Copilot on Friday afternoons. His reasoning wasn’t about the tool. It was about the person using it. By the end of the week, most people are tired, and tired people stop double-checking things that look finished.
Xu’s talk covered five security risks tied to Microsoft 365 Copilot. The one behind the Friday joke wasn’t about accuracy. It was about tone. Copilot can produce something factually correct and still come across as blunt or offensive, fine in a quick internal message and a real problem in a letter to opposing counsel or a client update. His actual recommendation wasn’t “ban Fridays.” It was to review Copilot’s output before anything leaves the building, and make that review a habit instead of an afterthought.
That distinction matters more for a firm than it does for most businesses.
For a firm, a skipped review isn’t embarrassing. It’s exposure.
An associate misjudging tone in a rushed email is an old risk. Attorneys have always sent things they later wished they’d reworded. What changes with Copilot is volume and speed. One associate can generate ten client-facing drafts in the time it used to take to write one, and every one of them can go out under the firm’s name with nobody but the AI having “written” it first.
Here’s the part that doesn’t go away just because the tool did the typing: the attorney who signs off is still responsible for what goes out. That’s not just good practice. ABA Formal Opinion 512, issued in July 2024, holds that confidentiality, competence, and supervision obligations apply to generative AI the same way they’d apply to work handed off to an associate, and the attorney of record carries that responsibility regardless of what drafted the first pass.
Now put that on a Friday afternoon, when the attorney who should be catching the tone problem is the one least likely to slow down and read it twice.
A tone-deaf email is unfortunate. A tone-deaf letter that reached opposing counsel or a client because nobody had a rule requiring a second read of AI-drafted correspondence is closer to a malpractice conversation, and it’s the kind of thing a five-minute policy prevents.
What to build instead of a Friday ban
Banning Copilot on Fridays isn’t the answer, and Gartner wasn’t seriously proposing it. The answer is a review standard that holds every day, not just the day everyone’s running on fumes.
Set the rule plainly: anything Copilot drafts that goes to a client, opposing counsel, or the court gets read by the attorney of record before it’s sent. Not skimmed, read. Treat the draft the way you’d treat a first-year associate’s first pass at a letter: a useful starting point, not something that goes out unsupervised.
Microsoft’s content filters catch some tone problems before they reach an inbox, and turning those on is worth doing. But a filter only catches what it’s tuned to catch. It won’t tell you whether the letter sounds like your firm.
Put the standard in writing: what needs attorney review before it goes external, and who signs off on it. Without that in writing, you’re relying on every associate and paralegal individually deciding to slow down on a Friday afternoon. That’s not a policy. That’s a hope.
Gartner’s joke landed because there’s a kernel of truth in it. Tired people trust polished output more than they should. But the fix isn’t picking a day to distrust Copilot. It’s building the habit of reading anything that leaves the firm under an attorney’s name, on a Tuesday morning as much as a Friday afternoon.
Back to where this started: could your firm show a client, a bar complaint, or opposing counsel today that AI-drafted work gets reviewed before it goes out? If the honest answer is closer to “we assume people check” than “here’s our process,” that’s the gap worth closing. Through our managed IT services for law firms, we help firms put a review standard in writing and build the habit around it before a bad email or an ethics complaint forces the issue.