Warren
Client video
Legal AI · Security · Product engineering
AI workflows for legal teams,built and security-tested.
I build them inside the systems your firm already uses and test them for weaknesses before launch.
WorkflowsSix legal workflows, intake to filingSecurityPen tests: web, API and AIProductLegal-tech SaaS, built or improved
No legal advice. A person approves every consequential step.
What I build and test
Channels
Voice · Email · Documents
Context
Case file and firm playbook
AI draft
Follow-up prepared for review
Human review
Intake team approves or edits
Permitted action
Sent through approved tools
Proof
Teams that shipped with me
Brenda Syson
Client video
Evan
Client video
Client videos do not yet have reviewed captions.
01 / Services
Start with the problem in front of you
Workflow · intake
01
New inquiry
Received02
Gather context
Scoped03
Draft follow-up
Draft ready04
Attorney approves
In review- Workflow design and working functionality
- Agreed integrations and review controls
- A documented handover
02 / Legal workflows
Six workflows from first contact to filing
- 3 channels
- Voice, email and documents
- Every action
- Approved before it runs
- Full trail
- Action-level audit log
03 / Built for sensitive work
Connected to your tools. Tested before launch.
Sources
- Firm knowledgeInternal
- Matter recordsPrivate
- DocumentsPrivate
- Public researchPublic
Working context
Only the sources this task may use
Human review
Review · Edit · Approve
- Matter brief
- Editable draft
- Next steps & owners
- Connects to
- Microsoft Graph
SharePoint
Outlook
Teams
Word add-ins (Office.js)- Entra ID
OpenAI (GPT / ChatGPT models)- Anthropic Claude
Google Gemini- Twilio voice and SMS
Stripe
All integrationsIllustrated view
Tested before launch
- OWASP Top 10 for LLM Applications
- OWASP Top 10 for Agentic Applications (2026)
- OWASP API Security Top 10 2023
Audit-ready builds
I've helped client teams through ISO 27001, SOC 2 and HIPAA audits by building the access controls, audit logs, encryption and evidence their auditors examined..
Clear limits
- No legal advice.
- No consequential AI action without approval.
- I'm not your auditor.
04 / Capabilities
One engineer across the whole stack
- 01
Organizational knowledge and firm playbooks
- 02
Case and client intelligence
- 03
Contextual drafting and explained recommendations
- 04
Governed AI decisions and actions
05 / Who you work with
Work directly with the engineer who builds it
I connect legal operations and firm knowledge with AI workflows, application security and full-stack product engineering.
I can own a defined workstream or work alongside your existing team, from understanding the process through implementation, verification and handover.
Connect on LinkedIn(opens in new tab)06 / Next step
Tell me what you need to build, assess or fix
30-minute intro call · or email hkhantanoli@gmail.com(opens in new tab)
Questions
Who do you work with?
Law firms, legal-tech founders and in-house legal teams are my main focus. I also work with AI and B2B software teams whose applications handle sensitive information.
Do you give legal advice?
No. I build and test software. Your attorneys make every legal decision, and the workflows I build route legal questions to them.
Can you work with our existing case-management system?
Often the starting point is an existing system. I first assess its available APIs, access permissions, data quality and workflow constraints, then define what can be connected or extended.
Can we hire you just for security testing?
Yes. An assessment can stand on its own with documented findings and remediation guidance. Implementation and retesting can be scoped separately or included in an agreed engagement.