OASIS Ecosystem
OASIS
Editorial cover for US virtual paralegals and attorney supervision
Guide·3 min read

US virtual paralegals and attorney supervision

A practical division of responsibilities for US attorneys using remote paralegal support: scope, confidentiality, source verification and final approval.

By OASIS Legal Operations

Last updated

  • US virtual paralegal
  • attorney supervision
  • legal outsourcing confidentiality

Jurisdiction: United States; the professional rules adopted in the relevant state control. Published: October 13, 2026. This is operational information, not legal advice.

Remote support does not transfer the attorney’s responsibility

A virtual paralegal can help with research, drafting, record organisation and review. The lawyer remains responsible for legal advice, strategy, client-facing legal judgments and the decisions that require a licensed professional. A remote arrangement should make this division explicit rather than assume that a detailed brief removes the need for supervision.

Begin with an agreed assignment

Identify the matter, jurisdiction, deliverable, authorised records, scope limits and communication channel. State who will answer questions and approve the final work. Check conflicts and access arrangements before confidential documents are shared, and ensure the support team knows what may not be accessed or disclosed.

Set boundaries for research and drafting

Ask for citations and source links, not merely confident conclusions. A research memo should distinguish binding authority, persuasive material and open questions. A draft should identify assumptions and unresolved facts. The supervising attorney evaluates the legal analysis and decides what is suitable for the matter.

Supervision and confidentiality are connected

ABA Model Rule 5.3 addresses responsibilities concerning nonlawyer assistance, including reasonable efforts to ensure conduct compatible with the lawyer’s professional obligations. Model Rule 1.6 addresses confidentiality of information. These are model provisions, not a substitute for the rules actually adopted in a particular jurisdiction.

Approved tools need approved handling rules

Agree whether a tool may receive client material, what data is retained and which people have access. Do not assume that a premium subscription permits confidential uploads. Where technology assists research or drafting, original-source verification and human review remain necessary. A detector score does not establish legal accuracy.

Make the handover useful

  • Deliver the requested work together with source references and an exhibit or file index where relevant.
  • List unresolved questions and missing records separately.
  • Record which version was reviewed and who is responsible for the next step.
  • Agree retention and return or deletion arrangements with the client.

OASIS’s support model

The delivery path is Client → Assigned person → Approved tools → Authorised QA → Delivery. A named paralegal prepares the work under instructions; an authorised reviewer checks it against the scope. OASIS is not a law firm. Attorney review and professional responsibility are not replaced by outsourced QA.

Sources

Explore virtual paralegal support and read the confidentiality approach.

Share

AI-assisted scoping

Bring us the question. We will help shape the brief.

Start with a short guided questionnaire. Our assistant organises your requirements; an OASIS specialist reviews every proposal before responding.

OASIS Ecosystem

Quality, confidentiality & accountability

Quality review

Assigned reviewers check work against your instructions before delivery.

Controlled access

Matter access stays limited to the assigned team and authorised reviewer.

Confidentiality

Confidentiality terms and approved file channels are agreed before work starts.

Accountability

Named people, agreed scope and a clear handover for every accepted matter.

These are our working safeguards, not certifications. OASIS does not currently hold ISO 9001:2015 or ISO 27001:2022 certification or a SOC 2 Type II attestation, and does not claim GDPR compliance.