IT Policies & Compliance Library

Welcome to the O'Melveny IT Compliance repository. Compliance with all firm policies listed below is mandatory for employees, contractors, partners, and any authorized personnel granted access to O'Melveny information systems, devices, and networks.

NEW / COMPLIANCE REQUIRED

Document ID: OMM-IT-AUP-AI-001 • Version 1.0 • Effective: August 31, 2026

AI Acceptable Use Policy

Defines rules, permissions, and confidentiality safeguards for utilizing Artificial Intelligence and Generative AI platforms (including LLMs and legal drafting tools) on firm networks and client work products.

Review & Sign Policy

Document ID: OMM-IT-SEC-004 • Version 4.2 • Effective: August 27, 2026

Information Security Policy

Establishes access control, authentication rules (MFA), password complexity requirements, endpoint laptop BitLocker encryption, patching policies, and security incident response reporting.

Read Policy

Document ID: OMM-IT-AUP-001 • Version 5.0 • Effective: August 27, 2026

Acceptable Use Policy

Defines standard expectations and rules for utilizing firm computers, phones, remote systems, network bandwidth, and communication channels safely, legally, and professionally.

Read Policy

Document ID: OMM-IT-PRV-002 • Version 3.1 • Effective: August 27, 2026

IT Privacy Statement

Explains user telemetry and technical information gathered on O'Melveny networks, how session logs and identity data are secured, and GDPR/CCPA data retention controls.

Read Statement

IT Policy and Compliance Board

For clarifications on specific sections of any policy, software vetting applications, or exceptions approvals, contact the Policy Group at itcompliance@omm.com.