Advocacy vs Opus 2: how they compare in 2026

The product is defined by its model architecture. Axiom is described as a proprietary case memory layer that ingests every document in a case, builds memory that persists across every interaction, and reasons across the entire matter rather than one document at a time, in place of querying a generic legal database. Every surface on top of it is generative: a conversational assistant that answers questions about the matter, a drafting environment with generation streaming onto the page, and a structured extraction tool. Since the Promptless release of September 25, 2026, the work runs through AI Associates staffed on a matter, which follow the docket, email, documents and depositions, propose the next step and prepare drafts for review. The vendor rejects the sidebar plugin model on the ground that a plugin is bolted onto someone else's product, while this is the product. There is no document management system, matter management layer or review platform underneath that a firm would license on its own.

Opus 2 Ingenuity is presented as an agentic framework covering document summaries and analysis, extraction of people, organizations, events and legal topics, questions scoped to a matter or selected documents, saved prompts, drafting and checking work product, speech recognition for legal transcripts, and live hearing analysis that compares testimony with the bundle to surface inconsistencies, the feature that depends most on the model. Underneath sit eighteen years of case management, shared workspace, annotation, chronologies, electronic bundles, evidence presentation and hearing infrastructure, which ran without models for most of the platform's life and none of which needs one. The vendor places the AI on top of that platform, describing the platform as the source of the matter intelligence the AI uses.

Citations are verified inside the drafting surface, and outputs are promoted as ones a buyer can trust. Grounding is said to come from case memory built on the matter's own record rather than a generic database, which the company frames as the system learning about the case before it does the work. In the product's own example, the Associate answers a question with the documents behind it, cited by document number and deposition page. A separate feature checks whether the authorities opposing counsel cites support the propositions claimed. No accuracy figure, evaluation, test set or error rate is published, no failure modes are stated, and nothing describes what verifying a citation consists of.

The vendor says better data relationships give more accurate insights, AI features add only relevant and helpful information, and the design stops errors from harming a case. Answers are said to be based on the selected documents and surrounding matter data, with the system locked to a single matter. The AI, home, security and arbitral institutions pages publish no accuracy figure, test set, benchmark, evaluation, error rate or hallucination disclosure. Nothing says whether an answer or summary cites its source document, or whether a reader can open the source from the output. In hearings, the system flags inconsistencies between live testimony and the bundle, and counsel may act on them within minutes. Citator checks do not apply to a platform working on a matter's own evidence.

A person reviews every step. The Associate proposes the next step as a plan with its tasks, and the team approves the plan before the work runs. Methods, the firm's playbooks, set how Associates draft, what they check, which steps need a person's sign off and who on the team can assign what, and every Associate follows them on every matter. Every step is traced to the person who approved it, conflicting information in the record is flagged for the team to confirm, and every thread is auditable. Inside the workspace, research sits beside the draft, generation streams onto the page the user is writing, and queries, reviews and notes are recorded against docket entries with the people responsible. The company also states that the system learns about the case before it does the work. No threshold is published at which the system acts without a person, and nothing describes what happens after an output is wrong or any abstention or confidence behavior. The drafting surface is promoted with the line that what you draft is what you file.

The Control principle says lawyers must control the process, using their own knowledge and judgment, before any data is saved permanently, so AI output stays a suggestion until a person commits it. The chronology feature shows how this works: the vendor says auto generating a chronology fills a timeline with irrelevant placeholders a team must remove, so instead the AI surfaces events for the lawyer to assemble, deciding relevance themselves. Entity extraction works the same way, showing people, events and organizations with summaries so the user can drop irrelevant ones and duplicates before anything is added. The AI, home and security pages state no threshold at which a feature declines to answer, no confidence signal, no route to report or fix a wrong output, and nothing on what happens after an error reaches a work product.

Relativity, Fenwick, Relentless, Morrow Ni, Scott + Scott, Lewis + Llewellyn LLP and IPO Pang Shenjun Attorneys at Law appear as logos under a Trusted by heading on the homepage, with no case study, date or figure attached to any of them. The stated buyers are midsize and Am Law firms. The vendor's own December 2025 announcement quotes only its chief executive and chief operating officer and names no customer. The interface material uses a fictional matter, Estrada v. Kincade, with invented docket entries. No named customer carries a date, a figure or a described result.

Five customer quotes give name, title and firm: a contentious legal technology portfolio manager at Linklaters, the chief knowledge and innovation officer at Dorsey & Whitney, the director of practice technology at Vorys, a litigation partner at Pillsbury and a paralegal at Shepherd and Wedderburn, plus two chambers clerks. About nineteen firm logos appear, including Baker Botts, Dentons, Herbert Smith Freehills Kramer, Holland & Knight, Mishcon de Reya, O'Melveny, Troutman Pepper Locke and Wilson Sonsini. Institutional deployments are named: SIAC Gateway, run by the Singapore arbitral institution SIAC, is said to run on Opus 2, the Dubai institution DIAC is a named partner, and the transcript and hearing services supported the Manchester Arena Inquiry, Grenfell Tower Inquiry phase 2 and the Hillsborough Inquiry. The vendor reports use by 98 percent of Am Law 50 firms and 92 percent of the Financial Times top 25 most innovative firms. No quote carries a number or date, and no case study states a method or a measured result.

The privacy policy states that the company does not use content customers upload to train its AI systems. The same policy scopes itself to the Website and says the handling of data uploaded to the AI platform is covered separately in individual Customer Agreements, which are negotiated per customer and unpublished. The homepage describes the platform as single tenant and states that customer data is never used to train AI models. Nothing addresses privilege or work product treatment, separation between matters, or what any model provider retains. The platform is described as holding strategy notes, evidentiary rulings and work product, and the company intends to make case memory shareable across a team. The site links a privacy policy and a cookie policy and no terms of service.

The Secure principle says client data will never be shared outside the client's instance or between two or more cases inside it, an explicit undertaking across matters and tenants, reinforced by queries locked to a single matter or selected documents and by firewalls, encrypted volumes, logical identifiers and ownership tags. The arbitral institutions material acknowledges that arbitration is confidential. No customer agreement is published, so none of this is contractual: the footer carries a privacy policy, cookie policy, modern slavery statement, supplier code and code of business conduct, but no terms of service, master agreement or data processing addendum. The AI and security pages address neither training on client material nor retention of documents, prompts or output, and they do not address privilege or work product, though the platform holds working papers from highly sensitive disputes and public inquiries.

No statement says the company is not a law firm or that output is not legal advice, and nothing describes the judgment needed before a draft is filed. Jurisdiction limits and competence go unaddressed in the homepage, the privacy policy and the December 2025 announcement. The homepage does say the Associate works under the team's supervision, that the lawyer makes the calls while the Associate carries out the work, and that the judgment stays with the firm. The product is sold to surface critical facts and draft winning motions, its drafting surface promises that what you draft is what you file, and its own framing is that lawyers who control the context win. The site links no terms of service, where such a statement would usually sit.

The footer lists a privacy policy, cookie policy, modern slavery and human trafficking statement, supplier code of conduct and code of business conduct, with no terms of service, disclaimer or professional responsibility statement. There is no statement that output is not legal advice, nothing addresses responsibility when a drafted document or flagged inconsistency proves wrong, and no bar or regulator is named, including ABA Formal Opinion 512 and, for a London vendor selling to English firms and chambers, any Solicitors Regulation Authority or Bar Council guidance. What the vendor publishes is a supervision stance rather than a disclaimer: it says it is not trying to replace a lawyer's intelligence, the AI enhances human ingenuity, and lawyers must apply their own judgment before anything is saved.

No governance position is published. Nothing names an accountable owner or function for model behavior, describes evaluation before release, sets out principles or a policy, or claims a management system or certification, and nothing addresses uneven output. The case memory layer accumulates contested issues, strategy notes and evidentiary rulings across a matter, and the company intends to make it shareable across a team, so it decides what counts as critical context. How that selection is governed or tested is not described. The privacy policy addresses website data handling and does not touch model governance, and the site links no responsible AI or governance page.

Five AI principles are published. Empower, Enhance, Control, Secure and Trust each get a paragraph explaining design choices and rejected alternatives: why the vendor does not auto generate chronologies, why it keeps existing legal workflows, and what the AI may not write into a case without a lawyer's action. Two carry commitments, on human control before anything is saved and on data never crossing an instance or case boundary. The AI, home, security and arbitral institutions pages name no accountable owner for model behavior, no testing regime for the AI before release, no published results, no model documentation, and no standard or certification for AI as distinct from information security. STRIDE threat modeling and CREST accredited penetration testing cover software security, not model behavior. Nothing addresses bias or uneven output, including how the hearing feature, which analyzes live testimony, performs across accents, languages and interpreted evidence in international arbitration.

Retention, deletion and access for the material the platform holds are not published. The privacy policy describes secure storage with a database provider, industry standard security protocols and regular security reviews. It retains personal data for as long as reasonably necessary, with no period stated, and names service providers by category only: a database provider, an analytics provider and payment processing. It scopes all of that to the Website and refers the handling of data uploaded to the AI platform to individual Customer Agreements, which are unpublished. No retention period, deletion commitment, access control model, encryption specification, subprocessor list or incident practice is published for platform data, and no AI or model provider is named. The site links no security or trust page.

Published controls include AES-256 encryption at rest, TLS 1.2 in transit, including between internal components, email encrypted end to end, logical data separation through firewalls, encrypted volumes, logical identifiers and ownership tags, client defined password policy, several multifactor options, single sign on through the client's provider, and full client control over users. Development practice is documented: STRIDE threat modeling with a risk owner per threat, regular CREST accredited external penetration tests, automated and manual code review including third party dependencies, continuous integration, and formal change management with risk and impact assessment. The security and AI pages and the footer state no retention period, deletion or return commitment, export provision, subprocessor list, named cloud provider, or incident response or breach notification practice. Opus 2 also publishes a separate privacy policy.

No indemnity, liability cap, warranty position, disclaimer of warranties, service level commitment or insurance statement is published. The privacy policy states that the handling of data uploaded to the AI platform is covered separately in individual Customer Agreements, so the governing document is negotiated per customer and unpublished, and the site links no terms of service. The drafting surface is promoted with the line that what you draft is what you file.

No customer agreement is published. The footer legal documents are a privacy policy, a cookie policy, a modern slavery and human trafficking statement, a supplier code of conduct and a code of business conduct in PDF. There is no terms of service, master services agreement, subscription terms, service level agreement or data processing addendum, so no published document states a liability cap, an indemnity in either direction, a warranty on the software or on generated output, an insurance position, a limitation period, a governing law or a forum. The security page refers in passing to Opus 2 Services and Agreements meeting global legal and regulatory requirements and names six regimes they are said to satisfy, so agreements exist but none is published.

The vendor states that the platform synthesizes context about the case, including from ediscovery and legal research platforms, and names no product or vendor within either class. Associates take work by text over iMessage and by email, and the docket, email and a growing list of connections feed each matter as filings and emails arrive. The drafting environment is native to Microsoft Word and renders .docx files with full fidelity, and the company positions it against Word plugins. Each matter gets its own channel where the team and its Associate share files and hand off work, with a calendar tied to the matter's deadlines. Nothing describes what data moves between the platform and any external system, in which direction or what a firm must configure, and no API or developer documentation is published.

The AI page says core documents flow from ediscovery and document management systems into one workspace, naming neither. The security page describes linking to a client's own single sign on provider, an identity integration rather than a practice system one. The AI, home, security and arbitral institutions pages and the navigation name no document management system such as iManage or NetDocuments, and nothing on them covers matter management, ebilling, court filing, Word or Outlook, or offers an API, developer documentation or integration list. The vendor runs hearing infrastructure and has partnered with the IDRC hearing venue in London on a dedicated suite, an integration with a venue rather than a system. Opus 2 also publishes a separate platform page.

The homepage describes the platform as single tenant. It is delivered as a cloud workspace a team logs into, with case memory that persists across interactions, and the privacy policy refers to secure storage with a database provider. No region is named for storage or processing, no cloud provider is identified, no residency commitment is published, and no on premises or self hosted option is mentioned. The company is based in San Francisco, which locates the company rather than the data.

The security page says the vendor hosts each client's solution and data in the location that best fits its needs, a customer choice, supported by separate EMEA, North America and Asia Pacific operations and a list of data protection regimes the services meet: GDPR, UK GDPR, Canadian PIPEDA, the California Consumer Privacy Act, the Singapore Personal Data Protection Act and the Australian Privacy Act. Data is described as self contained through firewalls, encrypted volumes, logical identifiers and ownership tags, which is logical rather than physical separation. No list of regions or data centers is published, no cloud provider is named, and nothing separates where data is stored from where processing or model inference happens.

No independent security attestation is published. No SOC 2 report of either type, ISO certification, penetration test summary, named auditor or examination period is claimed, no badge or certification mark appears, and the site links no trust center. The privacy policy describes secure storage with a database provider, industry standard security protocols and regular security reviews, with no assessor, scope, date or report attached.

The security page, last modified 19 Aug 2026, names ISO/IEC 27001:2022 and Cyber Essentials Plus, with regular CREST accredited external penetration testing, STRIDE threat modeling with risk owners, and automated and manual code review. No certification body, certificate number, scope, validity period or issue date is given, and there is no route to obtain the certificate or a report, no trust portal, and no SOC 2 of any type. The arbitral institutions page states ISO 27001:2013, the superseded version, while the security page states 2022, so the site gives two versions of the same certification.

Axiom is presented as a proprietary case memory architecture, and the platform as context first and AI native, with three named generative surfaces built on it. No model is named, and no version, provider, hosting arrangement or commitment to notify customers of a change is published. The privacy policy names service providers by category only, as a database provider for storage, an analytics provider and payment processing, and identifies no AI or model provider on a platform whose value is model driven.

Opus 2 Ingenuity is described as an agentic framework working on matter data, covering summaries, entity extraction, questions, prompt building, drafting and real time speech recognition. The AI, home, security and arbitral institutions pages name no model or provider, draw no first party versus third party distinction, give no version, state no inference location beyond the general offer to host in a chosen geography, and make no commitment to notify customers of model or configuration changes. The one related commitment is that client data never leaves the client's instance, which says where data does not go without saying what processes it, including for the AI that reads live testimony in a courtroom.

No pricing is published at any level: no rate, tier, term, implementation cost or unit of charge, and the site has no pricing page. Nothing states whether the product is charged per Associate, per seat, per matter, per firm or on usage. Associates are staffed one or several at a time, added for a motion and released when the matter closes, and the demo request form asks for the size of the legal team. The privacy policy records that platform data is governed by individual Customer Agreements, which indicates a negotiated commercial relationship. The stated buyers are midsize and Am Law firms.

The navigation and footer across all three regional sites have no pricing or plans page. No rate, unit, tier, volume band, term or charge for implementation, hearing services or transcription appears, though the offering mixes software with services such as court reporters, transcripts and hearing room setup, each usually priced differently. Every call to action is to watch a demo or make contact. The only cost related claim is that connected data and workflows make AI use more efficient, so customers spend less.

Advocacy is built for litigation, from complaint through trial, across parties, claims, timelines, procedural history, evidentiary rulings, strategy notes and work product. The stated buyers are midsize and Am Law firms running high stakes litigation, and the homepage names lean litigation teams, AI native firms, specialized teams within Big Law and in house legal teams. Associates draft and revise briefs, motions, discovery responses and deposition outlines. No practice area within litigation is named, and nothing says whether the product suits commercial, employment, securities, product liability or class work. The demo matter involves price fixing and market allocation, and the leadership team comes from securities and antitrust practice. No jurisdiction, language or unsuitable matter type is stated.

Role pages cover partners and lead counsel, legal innovation teams, associates, and paralegals and litigation support, each with its own benefits. Solutions cover Cases, Hearings, Transcripts, Arbitral Institutions, and Chambers sold as LEX, identifying law firms, barristers' chambers and arbitral institutions as buyers. Practice focus is commercial disputes, international arbitration, public inquiries and inquests, with named inquiry work and arbitral institution deployments, and the chambers product reaches criminal clerking. Reach spans three regional operations and six data protection regimes. The vendor says it serves the litigation and arbitration lifecycle in any jurisdiction worldwide and names no practice area, matter type, jurisdiction or scale it does not serve.