Which legal AI vendors publish SOC 2 or ISO 27001 certification?

A SOC 2 report covers the vendor's own controls. It does not tell a firm which model provider sees client content, where inference runs, or whether any of that can change without notice. Those are separate questions and the index grades them separately: 12 of 463 vendors name the models underneath, identify the providers, state where they run and commit to telling customers when it changes. 46 publish deployment options and data residency at the same standard, and 62 publish retention, deletion, access control, subprocessors and incident practice as a complete set. A certified vendor running on an undisclosed model supply chain has answered one diligence question and left the one specific to AI open.

Whether a vendor is secure. This axis measures whether independent attestation exists and whether an outsider can reach it, which is the only part of security an outside party can honestly assess. A vendor may hold every certification in the market and grade lower here because none of it is reachable, and that is a finding about disclosure rather than about the product. The reverse holds too: a published SOC 2 report is evidence that controls were examined against stated criteria in a stated period, not a guarantee about anything outside that scope.

The index also cannot read what sits behind a sales conversation. A vendor that hands a firm its full report in week three of procurement has done the work and gets no credit here, because the record measures what was available before anyone asked. That is deliberate. The reason to publish is that a buyer comparing twenty products cannot open twenty procurement threads, and the vendors who understand that are the ones on the first list above.