The legal AI boom skipped criminal defense. Vendors chased BigLaw budgets, and the lawyers defending people's liberty got nothing. Look closer and the story inverts: the cloud tools they were never sold are tools the courts are now ruling they could not have safely used. The answer was never a bigger cloud. It was no cloud.
Both are being told right now. Only one survives contact with a courtroom.
Criminal defense lawyers are being left behind by the AI legal tech boom. Vendors build for large firms and corporate legal departments; defense practices are too small and too thinly funded to be worth serving.
The tools those vendors sell all share one architecture: privileged data leaves the lawyer's machine for a third-party cloud. For an estate plan, that is uncomfortable. For a defense strategy, where the adversary is the state itself, it is disqualifying. Criminal defense was not left behind by those tools. It was spared them.
When defense lawyers do reach for AI, they turn to general-purpose chatbots, because that is what they can afford.
That is the exact path courts are now closing. In February 2026, a federal judge in Manhattan ruled that a criminal defendant's conversations with a consumer AI chatbot were not privileged, and the government read them. Consumer chatbot terms of service disclaim confidentiality. The most privilege-sensitive practice in law ended up improvising with the least protective tools available. That is the actual crisis, and no cloud vendor has an incentive to solve it.
Criminal defense work is made of exactly the material that must never reach a third party: privileged conversations with frightened clients, defense strategy, and discovery produced under protective orders. Every cloud AI feature, however it is marketed, begins by transmitting some of that material to a server you do not control.
None of this is an argument against AI. It is an argument about where the AI runs. This page describes software architecture and reported court decisions, not legal advice; your professional obligations are yours to evaluate.
Two developments from the last year. Everything cloud is on the wrong side of both.
AI-generated documents a defendant created with a consumer chatbot and shared with his lawyers. A federal judge ruled that neither the documents nor the chats behind them were privileged. The government read them all.
The period in which federal courts began writing AI restrictions into protective orders: no publicly accessible AI tools, no tools that retain or train on submitted material, including criminal disclosure material.
Notice what both developments have in common: they are about disclosure to a third party. The privilege analysis broke down because the material left the client's machine for a platform whose terms disclaim confidentiality. The protective orders prohibit submission to outside tools. Neither development says anything against an AI that runs on the lawyer's own computer, because with local AI there is no submission, no platform, and no third party. The entire question never arises.
That is not a loophole. It is the difference between managing a risk and not having it.
TimeNet Law is billing and practice management with a local AI called Oasis built in. It will not review body camera footage or draft your motions. It runs the business of your defense practice, privately, on your Mac.
Criminal defense is flat-fee country: arraignment, pretrial, motions, trial. The Wayfinder analyzes what your cases actually cost you and designs stage-priced packages from your own billing history, not industry averages.
Advance-fee retainers are the lifeblood of defense billing and the fastest way to a bar complaint when mishandled. Retainer tracking, trust and IOLTA compliance, and the Harbormaster persona watching balances.
Card and eCheck payment links in emailed invoices through Slipstream. Evergreen retainers in batch billing. Delivery and open tracking on every invoice email.
Which case types actually pay. Where the unbilled work is. Who is behind on their retainer. Plain English in, straight answers out, grounded in your own data.
Drop a photo of a receipt and the expense files itself. Handwritten notes become time entries. Built for a practice that lives between the office, the courthouse, and the jail.
The model runs on your Mac, so nothing needs the internet. Courthouse basement, holding-cell interview, airplane. If a vendor's AI dies without wifi, it was never local.
Follow the data. Everything else follows from where it goes.
ABA Model Rule 1.6 requires reasonable efforts to prevent unauthorized disclosure of client information. Cloud AI turns that duty into a standing vendor-audit: read the data processing agreement, watch for terms changes, hope the subprocessors behave. For a defense practice, the stakes of getting that audit wrong are not a business dispute. They are someone's liberty.
Local AI does not make the audit easier. It makes it unnecessary. When privileged material never leaves the machine, the exposure class does not exist. No server to breach, no retention policy to parse, no third party to receive a subpoena. Not a feature on a checklist: the absence of the problem.
This describes software architecture and reported decisions, not legal advice. Your professional obligations are yours to evaluate.
Most practice management software is hourly-first, built for firms that bill in six-minute increments and collect in ninety days. Defense billing works differently, and TimeNet Law is built for how it works.
| How defense practices bill | Typical cloud suite | TimeNet Law |
|---|---|---|
| Flat fees by stage | Hourly-first, flat fees bolted on | Native flat-fee packages; the Wayfinder designs them from your own history |
| Advance-fee retainers | Generic trust ledger | Retainer deposits, trust and IOLTA compliance, evergreen retainers in batch billing |
| Getting paid by individuals | Portal logins and processor add-ons | A payment link in the invoice email: card or eCheck, one tap |
| Working away from the office | Dead without a connection | Everything, including the AI, works offline |
| The price shape | Per user, per month, forever | $479.99 once. Software you own, like the Mac it runs on |
The vendors skipped criminal defense because subscription math needs big seat counts and expansion revenue, and a two-lawyer defense firm offers neither. TimeNet Law has been independently owned for 23 years and priced one-time from the start. The economics that make your practice unattractive to them are the economics we built for.
Complete legal billing and practice management for Mac. Includes the First Mate assistant free with your license. Free trial, no credit card.
The full local AI: every persona, receipt and handwriting capture, automations, voice, and flat-fee strategy. No subscription, no account, no API key.
No metered tokens, because local inference costs nothing per question. A defense practice runs on predictable fees; so should its software.
"Privileged means it stays between you and your client.
Local means it actually does."
The privilege risk comes from the architecture, not from AI itself. When an AI tool runs in a vendor's cloud, privileged material is disclosed to a third party under that vendor's terms of service, and in United States v. Heppner (S.D.N.Y. 2026) a federal court held that a defendant's conversations with a consumer AI chatbot were not privileged and that sharing privileged information with a third-party AI platform may waive privilege. AI that runs entirely on the lawyer's own computer, like Oasis in TimeNet Law, never discloses anything to a third party, so that question never arises. This is a description of software architecture, not legal advice.
It can create serious risk. In United States v. Heppner (S.D.N.Y., February 2026), a federal judge ruled that a criminal defendant's exchanges with a consumer AI chatbot were not protected by attorney-client privilege or the work product doctrine, and that feeding privileged information into a third-party AI platform may waive privilege over the underlying attorney communications. Consumer AI terms of service typically disclaim confidentiality and may permit retention and training. Courts are still drawing the lines, and nothing on this page is legal advice, but the safe architectural answer is an AI that involves no third party at all.
Increasingly, protective orders answer this question directly. Through 2025 and 2026, federal courts have written AI restrictions into protective orders, including in criminal cases: no submitting disclosure material to publicly accessible AI tools, and no tools that retain inputs or use them for training. Always read the order. An AI that runs entirely on the lawyer's own machine submits nothing to anyone, which is why local AI is the one architecture that does not collide with these restrictions. Not legal advice; your order and your jurisdiction control.
TimeNet Law is legal billing and practice management built natively for Mac, independently owned for 23 years, and priced as a one-time purchase of $479.99 per user rather than a subscription. It fits how defense practices actually bill: flat fees, advance-fee retainers with trust and IOLTA compliance, evergreen retainers, and online card and eCheck payments. Oasis, its built-in local AI, analyzes the practice with nothing ever sent to a cloud.
Yes. Flat-fee billing is native in TimeNet Law, and criminal defense is one of the most flat-fee-shaped practices in law. The Wayfinder, part of the Oasis local AI, analyzes your own billing history and designs flat-fee packages from it, so stage pricing for arraignment, pretrial, motions, and trial is built from what your cases actually cost, not from industry averages.
Yes. Oasis runs entirely on your Mac, so it works with no internet connection at all: in a courthouse basement, at the jail, on a plane. If an AI feature stops working when the internet goes down, it was never local.
No, and this page will not pretend otherwise. TimeNet Law runs the business side of a defense practice: billing, retainers, trust compliance, payments, and private practice intelligence. Purpose-built evidence review is a different category of tool. What TimeNet Law promises is narrower and absolute: the AI inside it sees your practice data and nothing you type ever leaves your Mac.
More questions about TimeNet Law itself? See the full FAQ.
Download the free trial of TimeNet Law. No credit card, no account, and no cloud between you and your clients.
Download the Free Trial Explore Oasis →