A few suggestions: can they install it on prem? (The LLM “server”) Can they install it in their Azure or AWS tenant? Can it gather data from popular DMS and PMS? On prem and cloud? What about geolocation? Data likely needs to reside in the country of the entity if that country has sophisticated data laws What about things like information barriers - if anything sensitive is going where your teams eyeballs are / permissions allow, how do you deal with that?
Finally as I’m not overly familiar with LLMs I wonder how reliable it is - lawyers will expect perfection and all I hear about LLMs is hallucinations