Legal Knowledge Graphs: 5 Ways an Evidence Map Makes Legal AI Checkable

An evidence map links every legal AI answer to the laws, articles and rulings behind it. Five use cases, from DIFC to KSA data transfers to repeal alerts.

A citation list is a pile, not an argument

Legal AI tools that cite their sources still get things wrong. In May 2024, Stanford's RegLab and HAI tested the research tools lawyers pay for. They found that Lexis+ AI and Ask Practical Law AI "produced incorrect information more than 17% of the time", and that Westlaw's AI-Assisted Research "hallucinated more than 34% of the time". These tools are built on retrieval-augmented generation, which was supposed to fix the problem. The authors' verdict: "even RAG systems are not hallucination-free."

The cost now shows up in court. Damien Charlotin's database of AI hallucination cases counted 1,240 U.S. filings by 27 July 2026, according to the Maryland State Bar Association: 11 in 2023, 37 in 2024, 524 in 2025 and 668 in 2026 to that date. We keep our own record in our AI hallucination cases tracker.

Invented cases get the headlines, and we showed how one fake citation can pass every check. The more common failure is quieter: a real citation to a real law, in the wrong version or in the wrong relationship. We covered the version problem in Primary Sources Decide Whether Lawyers Trust Legal AI. This post covers the relationship problem.

Lawyers build arguments as chains. This law governs the client, it contains this article, this court read the article narrowly, and that rule replaced the old one last year. A citation list flattens the chain into a pile. To check an answer, you have to rebuild the chain yourself, which is the work you hoped the tool would save.

What is a legal evidence map?

An evidence map lays the law out in four lanes:

• Instruments: laws, regulations, treaties and their consolidated versions.
• Provisions: the articles and paragraphs inside them.
• Decisions: judgments, regulator decisions and official guidance.
• Concepts: the doctrines that tie them together, such as "adequate protection" or "appropriate safeguards".

Most of the value sits in the lines between the lanes. Each line is a typed link, and the type says what kind of legal relationship it is.

Every link carries its own evidence

A link is only as good as what supports it. On an evidence map, each link opens to a short record:

The status field is what keeps the map honest. A link that a lawyer has checked against the primary text is marked verified, with their name and the date. A link the AI inferred and no one has checked yet stays proposed, drawn as a dashed line. You can see at a glance which parts of an answer stand on checked ground and which still need a lawyer.

Evidence map vs legal knowledge graph

The two are related but not the same. A legal knowledge graph models a whole body of law: every instrument, article and decision a system knows about, and the relationships between them. It powers search and retrieval behind the scenes. An evidence map is the small part of that graph that answers one question, drawn for a lawyer to read and check.

Five ways lawyers use an evidence map

1. Checking a cross-border transfer: a DIFC firm and a Saudi cloud

The question: a law firm registered in the Dubai International Financial Centre wants to host client files with a cloud provider in Saudi Arabia. Can it?

The answer runs through at least two regimes, possibly three. Here is the path the map draws, link by link.

As a citation list, that answer is a dozen documents in no order. On the map it is one path with five links. You can see where the path is solid and where it rests on a proposed link, and the proposed link is where your billable hour should go.

2. Catching the amendment before your client does

Laws change while matters are open. The DIFC's own data protection law shows how often: the 2020 law replaced the 2007 law, a consolidated version followed the 2022 amendments, and another followed in July 2025. An AI that reads the 2022 PDF will cite the right article number from the wrong version, and the citation will look perfect.

On an evidence map, each matter pins the provisions it relies on. When a new amends or repeals link lands on one of those provisions, the matter is flagged. You see which memo cites which changed article, and you can update the advice before the client finds the change first. For why "enacted" and "in force" are different dates, see our primary sources test.

3. Seeing how a provision is actually read

The text of an article starts the analysis. What a court or regulator has said it means usually finishes it. Take GDPR Article 46, the basis for most EU transfers on standard clauses.

• In Schrems II (Case C-311/18, judgment of 16 July 2020), the Court of Justice invalidated the EU-US Privacy Shield. It held that standard contractual clauses remain valid, but that the exporter must check whether the destination's law lets the clauses work in practice.
• The European Data Protection Board's Recommendations 01/2020 on supplementary measures, adopted in final form in June 2021, explain how to run that check.
• The Commission's Implementing Decision (EU) 2021/914 issued the current standard contractual clauses.

Interprets and implements links put all three next to the article, so a litigator can see whether the reading they plan to rely on is the mainstream one or an outlier. Links can also cross jurisdictions. Article 26(3) of the DIFC law lets the Commissioner base an adequacy finding on decisions by other data protection authorities, and the map can draw that link too.

4. Mapping a new market for a client

A client expanding from Dubai into Riyadh doesn't need a forty-page memo on day one. It needs to know which rules apply and where they differ. Start from the client's activity and follow the governs links outward.

These rows are the top layer of the map. Under each cell sit the provisions and their sources, and the whole map becomes the outline of the memo. The client can follow the reasoning, and a junior can fill in the detail without starting from a blank page.

5. Making AI answers checkable, link by link

This is the use case that matters most. When an AI answers a legal question, the evidence map shows the path it took: which provisions it relied on, which decisions it read, and which links are verified or only proposed. You don't have to take the answer on trust, because you can check it link by link.

When a link is wrong, you dispute it. When one is missing, you propose it. A second reviewer confirms the change, and the map records who confirmed it, when, and against which version of the text. The next lawyer who asks a similar question starts from a map that is a little more reliable than the one you started from.

How to judge any tool that shows its sources

Every legal AI vendor now says it cites its sources. These six questions separate a map you can check from a list you have to redo. Run them alongside our five trap questions and the GCC buyer's checklist.

HAQQ's take

Trust in legal AI won't come from answers that sound more confident. It will come from answers that show their reasoning in a form lawyers already use: laws, articles, rulings, and the relationships between them. A dashed line shown honestly beats a solid line nobody checked.

Here is what HAQQ does today, as described on haqq.ai. Our legal research feature searches statutes, regulations and case law alongside a firm's own knowledge, and returns a structured answer with inline citations you can open and verify. It does not draw an evidence map, so run the six checks above on our answers too.

Key takeaways

• A citation list shows what an AI read. An evidence map shows how those texts connect, so you can check the reasoning as well as the sources.
• Each link carries a type, a basis, a source, a version and a status. Proposed links stay dashed until a named lawyer verifies them.
• For a DIFC entity, the DIFC Data Protection Law 2020 governs, not the federal PDPL. Transfers out turn on Articles 26 and 27.
• Pinning matters to provisions turns every new amends or repeals link into an alert on the matters it affects.
• Before you buy, ask any vendor the six questions above.

Sources & further reading

• DIFC Data Protection Law, DIFC Law No. 5 of 2020, consolidated version July 2025
• Stanford HAI: AI on Trial, legal models hallucinate in 1 out of 6 (or more) benchmarking queries (23 May 2024)
• Maryland State Bar Association: Confronting the hard numbers behind lawyers, AI and phantom precedents (27 July 2026)
• Simmons & Simmons: UAE Personal Data Protection Law FAQs (December 2021)
• Al Tamimi & Company: Data protection, data transfers
• Clyde & Co: Saudi Arabia's Personal Data Protection Law becomes enforceable (September 2024)
• Mayer Brown: Updates to Saudi Arabia's personal data protection regulations (9 October 2024)
• CJEU, Case C-311/18, Data Protection Commissioner v Facebook Ireland and Maximillian Schrems (16 July 2020)
• HAQQ: Primary sources decide whether lawyers trust legal AI
• HAQQ: AI hallucination cases tracker
• HAQQ: How to test a legal AI, 5 trap questions