Created: 02/09/2026
Introduction
As you will be aware the use of AI is now prevalent with employee, litigants in person and representatives. At Vista, (along with many other practices) we are making significant investments to ensure we can meet these challenges which include notably longer, complex grievances, an expansion of legal claims through the use of complex and legalistic complaints. We recognise the use of AI, issues of confidentiality and the limitations of AI assistance will be a matter of concern for your organisation.
This notice explains how Vista protects personal data in our use of Artificial Intelligence (‘AI’) tools (software applications that incorporate AI technology).
Personal data may be contained within the documents uploaded to our AI tools. We are a data controller of personal data when it is processed while using our AI Tools, and our chosen platform, Harvey AI, (hereafter ‘Harvey’) is a data processor.
This notice is supplemental to our privacy notice which you can view here.
This notice was first published and last updated in September 2026.
Our use of artificial intelligence (AI)
At Vista, we are committed to delivering high-quality legal services efficiently, securely and responsibly.
To support our legal professionals, we use Harvey, a specialist AI platform designed for use by legal professionals. Harvey helps our solicitors and legal teams carry out tasks more efficiently, allowing more time to be spent on the expert legal advice, judgement and strategic thinking that our clients expect.
Harvey may be used to assist with:
- legal research;
- reviewing and analysing documents;
- summarising case papers, evidence and correspondence;
- drafting and refining legal documents;
- comparing documents against precedents and templates; and
- organising information to support legal advice and case preparation.
Harvey is a support tool only. It does not make decisions on behalf of Vista or our clients.
All work generated or assisted by AI is reviewed by legal professionals before it is relied upon, shared with clients, filed with a court or tribunal, or otherwise used in the provision of legal services.
How we protect your information
We recognise that legal matters often involve confidential, sensitive and legally privileged information. Protecting that information remains our priority.
When using AI tools, we apply safeguards including:
- human review and professional oversight of all outputs;
- access controls and secure user accounts;
- staff training on the responsible use of AI;
- data minimisation, meaning we seek to use only the information necessary for the task being performed;
- contractual protections with our AI providers; and
- ongoing supplier due diligence and security assurance reviews.
We do not use client information to train public AI models, and our arrangements with Harvey are designed so that information processed on our behalf is not used to train underlying AI systems.
Where information is processed
Harvey operates using secure cloud infrastructure hosted through Microsoft Azure. Vista requires data to be hosted within the UK wherever possible. In limited circumstances, authorised Harvey personnel based in the United States may need to access data for technical support purposes. Appropriate contractual and legal safeguards are in place to protect personal information where this occurs.
Our AI processing principles
When using AI, Vista follows the following principles:
Human accountability
Legal advice remains the responsibility of our legal professionals. AI assists our work but does not replace professional judgement.
Accuracy and quality
AI-generated content is checked and validated before use. We do not rely on AI outputs without appropriate review.
Confidentiality
We apply the same standards of confidentiality to information processed using AI tools as we do to all other client information.
Data minimisation
We seek to limit the amount of personal information used within AI systems to what is necessary for the relevant task.
Transparency
We aim to be open about when and how AI is used in the delivery of our services.
Security
We work only with suppliers that meet appropriate security and data protection standards and maintain safeguards designed to protect client information.
Fairness
We recognise that AI systems can occasionally produce inaccurate or biased outputs. Human review helps us identify and address these risks.
Questions and opting out
If you would like further information about our use of artificial intelligence in the delivery of legal services, please contact our Data Protection Officer using the details provided in our Privacy Notice.
If you would prefer that Vista does not use Harvey in the delivery of our services to you, please notify us at your earliest convenience.
If you have any concerns or complaints about how Vista processes personal data, please refer to our Data Protection Complaints Policy.