AISL Certification Explained
Last updated: 10 October 2026
On 8 October 2026 the IAPP announced the AI Specialist, Legal (AISL) certification. It is a credential for people who use and oversee AI in legal work. According to the IAPP’s AI in legal services page, training and certification open in January 2027. Until then, all anyone has on the AISL certification is an announcement and a draft. This page sets out what the draft says, what it leaves open and who should care about the AISL certification. We will update it as the IAPP publishes more.
What the AISL certification is
The IAPP’s press release names three groups as the audience: lawyers, paralegals and legal operations professionals. Its subject is evaluating, deploying and overseeing AI tools in legal work without losing sight of professional duties.
Two more things came with it. First, an advisory board drawn from law firms, legal departments and technology providers will steer the initiative. Second, a launch supporter programme gives organisations early access and lower prices for teams of five or more.
The four domains of the AISL certification
The IAPP writes every exam from a Body of Knowledge. That is the published list of what a candidate must know and be able to do, grouped into domains. The draft AISL Body of Knowledge has four domains. In our own words:
- AI in the legal profession. How legal AI tools work and how they differ from general-purpose models. Then the risks to professional duties: invented case law, confidentiality and privilege, bias and over-reliance on the machine.
- AI in legal workflows. Research and document review, the contracting lifecycle, e-discovery, litigation support and predictive analysis, plus the ways judges themselves use AI.
- Oversight. Governance structures and user roles, data sovereignty, vendor assessment, monitoring and prompting with an eye on cost.
- Ethics and regulation. Professional conduct and the statutes and regulations that apply, plus the effect of AI on fees, billing and insurance.
The third domain reads like a law firm’s operating manual. It asks for an AI inventory, acceptable use policies, audit trails and even a grasp of token pricing.
What is not yet known about the AISL certification
The draft’s effective date is still to be determined. The minimum and maximum questions per domain are still open too. So nobody outside the IAPP can say which domain will weigh heaviest. Neither the draft nor the IAPP’s AISL page states the number of questions, the exam length, the passing score or the fee. Finally, the document is marked as a draft on every page, so the domains themselves may still change before January.
Who should take the AISL certification
Does the world need another set of letters after your name? That depends on the work you do.
Who it is for
The AISL certification fits people whose daily work is legal. That means lawyers and paralegals who use AI for research, drafting or review. It also means legal operations staff who choose and govern the tools. The draft names legal engineers as well, and its oversight domain reads like their job description.
Who can skip it
Privacy professionals outside legal practice can skip it, because the AISL certification asks about billing, privilege and court filings rather than data protection programmes. Likewise, AI governance professionals in companies already have the AIGP, which covers governance in any sector. And if the attraction is mainly the badge, wait at least until the blueprint is final.
The European angle
The fourth domain says it covers professional responsibility across the English-speaking legal world. The conduct rules it names come from the United States, the United Kingdom, Australia, New Zealand and Canada. For example, the US material rests on the American Bar Association’s Formal Opinion 512 and several ABA rules. Meanwhile, the evidence rule it names is also American: Rule 702 of the Federal Rules of Evidence.
The EU appears once, through the AI Act’s requirements for high-risk systems, in the same line as US state laws. No continental European bar or law society is named, and neither is Ireland. As drafted, then, a lawyer in Paris or Dublin would study conduct rules that do not bind them. Our suggestion: read the draft as a map of the questions to ask about AI, then answer them under your own bar’s rules.
How the AISL certification relates to the AIGP
This is an open question, and we treat it as one. The IAPP’s announcement does not mention the AIGP. Equally, the draft sets out no exemption, overlap credit or pathway between the two credentials.
On paper they meet at several points. The AIGP tests the governance of AI deployment, including vendor agreements and monitoring. It also names the EU AI Act among the laws it covers. The AISL certification asks about vendor assessment and monitoring too, but inside a legal practice, with privilege and court duties on top. Whether holding one will count towards the other is for the IAPP to say. Meanwhile, our AIGP study guide covers the established credential in full.
Follow the AISL with us
We have opened two study groups for the AISL certification, one on Facebook and one on LinkedIn. Join to compare notes on the draft and to see what the IAPP publishes next. Joining costs nothing, and we post every update there too.
Privacy Study Group is independent, not affiliated with the IAPP.
