Brightflag vs Legal Tracker: how they compare in 2026

The models are the product and the surrounding platform was built out around them. The core capability is language analysis reading, coding and categorising every line of every invoice narrative, and the vendor's own positioning is that this eliminates the manual configuration and outside firm involvement that conventional e-billing requires. The company was founded on that capability rather than adding it to an existing billing system, and its published framing is that it goes beyond AI invoice review to deliver a governed e-billing platform, which puts the AI first and the workflow second. Distinguished from the enterprise platforms graded B on this axis, where a workflow system predates and stands without the model layer.

A spend and matter management platform with an AI tier sold on top of it. Legal Tracker is electronic billing, matter management, budgeting, rate management and workflow, and every one of those works without a model. The generative AI capability sits in Legal Tracker Advanced as a separate tier, which is the same commercial shape as Onspring's add on module and lands in the same place. Credit where it is due and it distinguishes this record from a bolt on: the vendor states AI powered innovation in the product for more than a decade, and the specific tasks are real and long standing rather than newly announced, being non LEDES to LEDES conversion, duplicate line item detection, excessive timekeeper hour flagging and block billing audit efficiency. That is machine learning doing the actual work of invoice review rather than decorating it. Graded C because the platform is bought for spend control and the AI improves the throughput of one function within it. Compare Brightflag at A in this same category, where the models are the product and the platform was built around them.

Grounding is real and structurally verifiable, short of published measurement. The method is described concretely: the vendor takes a legal team's own outside counsel billing guidelines and translates them into rules the AI checks each invoice against, so every flag traces to a specific guideline and a specific invoice line the reviewer can open. That is grounding by construction rather than by claim, and the reviewer holds both sides of the comparison. Invoice Summaries and a redesigned review experience are published as making in depth review easier. Searched the vendor site, the FAQ, the press releases and third party review material on 29 Aug 2026 and located no accuracy figure, no false positive or false negative rate for flagging, no test set, no evaluation methodology and no independent benchmark participation. Third party review material notes AI driven invoice analysis may require manual review in complex cases, which is an unverified customer observation and was not treated as evidence.

Detection claims are specific and nothing measured is published. The vendor names discrete, checkable tasks: duplicate line item detection, excessive timekeeper hour flagging, block billing audit, LEDES conversion, and a plain language question interface over spend data. These are classification and extraction problems with objectively correct answers, which makes them unusually measurable compared with most AI in this index. No figure of any kind is published: no precision or recall on duplicate detection, no false positive rate on guideline violations, no accuracy measure on LEDES conversion, no evaluation of the natural language query interface, and no statement of what the system does when an invoice narrative is ambiguous. The asymmetry matters commercially: a false positive costs a firm an argument with its client, a false negative costs the department money silently, and neither rate is disclosed. Checked the Legal Tracker and Legal Tracker Advanced product pages, the features page, the UK product page and the Thomson Reuters blog material on 29 Aug 2026.

A real published commitment with documented control surfaces, short of thresholds. The oversight structure is the product's own architecture: the AI reviews and flags, and a controlled approval process with complete audit trails determines what is actually paid, so a human decision sits between the model's output and any financial consequence. That is a genuine and auditable checkpoint rather than an assertion of human in the loop. Ask Brightflag adds a conversational interface described as accessible to every person in the legal department, which widens who interacts with the AI. Not located as of 29 Aug 2026: any threshold at which a flag is escalated or auto applied, whether any reduction can be applied without human approval, and what the vendor commits to when a flag is wrong. The last matters commercially here, because a wrong flag reduces a law firm's payment.

Oversight is built into the workflow and never described as a model. The product's structure places a human at the decision point by design: AI flags anomalies and guideline breaches, and a reviewer approves, adjusts or rejects the invoice through an approval workflow with data driven rules for task automation. That is genuine human control over the consequential act, which here is payment. What is not published: whether any adjustment can auto apply without review, what the data driven automation rules can be configured to do unattended, whether a flag carries a confidence indication, and what happens to invoices the system does not flag at all, which is the silent path and the one that matters. Checked the product pages, the Advanced features page and the UK product page on 29 Aug 2026.

Segment claims stand where deployment evidence would go. The vendor states its customers range from high growth companies to global enterprises with complex multi jurisdictional operations, and third party material describes immediate return on investment from automated invoice review, which is a vendor claim relayed rather than measured. Searched the vendor site, the FAQ, the press releases and the review platforms on 29 Aug 2026 and located no named customer paired with figures and a date, and no case study with an assessable method. Worth recording as a genuine absence rather than a research gap: the Gartner Peer Insights listing for this product carries no reviews at all, which is unusual for an established platform and means the independent evidence base other records here draw on is not available for this one.

The largest published adoption figures on this index and one properly named customer. Stated: 164 of the Fortune 500 and 343 of the Fortune 1000 use the product, with benchmarking drawing on aggregated data from 1,800 law departments and 120,000 law firms covering $230 billion in legal spend. Those are specific, falsifiable numbers rather than market leader language. Named customer with independent validation: Legal Tracker Advanced was named an ACC Value Champion in 2022 jointly with Volkswagen Group of America, which is an Association of Corporate Counsel award to a named department rather than a vendor case study. Further independent placement on G2 and Gartner Peer Insights with published customer commentary. Held at B rather than A because no outcome measure is published: no savings figure, no invoice reduction rate, no realised ROI with a baseline and period, and the adoption counts establish penetration rather than result. The $230 billion figure describes the size of the benchmarking asset, not what customers achieved with it.

CORRECTED 29 Aug 2026 during the trust portal sweep. Previously graded C because confidentiality rested on certification and general controls with the specific limbs unlocated. The vendor publishes a security page not reached in the original pass, and it is detailed. Published: AES-256 encryption at rest with keys managed in AWS Key Management Service; minimum TLS 1.2 in transit; single sign on via SAML with the identity providers named individually as ADFS, Azure Active Directory, Google, Okta, OneLogin and Ping Identity; SCIM support for user provisioning, permission management and de-provisioning, which matters because de-provisioning is how access actually ends when a lawyer leaves a matter or a firm; OAuth authentication on the API; out of the box user roles and access permissions with a detailed breakdown published in the help centre; optional restriction of access to specified IP ranges; and a continuous vulnerability scanning and patching programme. SOC 1 Type 2 and SOC 2 Type 2 are prepared annually across all five AICPA trust categories including Confidentiality and Privacy, which is broader scope than most records here. A data retention and deletion section is published on the same page, though its content was not captured in this pass. Held at B rather than A because the training question is still unanswered: no statement was located on whether customer content, which here means invoice narratives describing legal work, may be used to train or improve models. Privilege and work product are also not addressed directly.

A product specific security document exists and the privilege question this product raises more sharply than most is unaddressed. Legal invoice narratives routinely describe the substance of legal work, so an e-billing platform holds a running account of what outside counsel did on a matter and why, which is privileged or work product material flowing from firm to vendor as a matter of routine operation. Nothing located addresses that: no treatment of privilege in invoice narratives, no statement on whether narrative text is segregated from the spend data used for benchmarking, and no position on what a department's own privilege posture should be when narratives leave its control. Credited at C rather than lower because Thomson Reuters publishes a Legal Tracker specific data security and certification guide, which is a product level document rather than a corporate assurance, and because AI processes narrative text for block billing analysis, so the vendor plainly handles it deliberately. Checked the product pages, the Legal Tracker data security guide reference, the UK product page and the corporate AI Principles on 29 Aug 2026.

The audience is corporate rather than lawyer facing in the advisory sense and no position is published. Users are in house legal departments, legal operations and their finance counterparts, and Ask Brightflag is explicitly described as accessible to every person in the legal department, so non lawyers operate the AI by design. The product analyses billing rather than giving legal advice, so the advice line question arises less sharply than for a research or drafting tool. Searched the vendor site, the FAQ and the press releases on 29 Aug 2026 and located no published position on advice versus tooling, no treatment of competence or supervision duties, and no jurisdiction limits despite serving customers with complex multi jurisdictional operations where billing rules and professional conduct rules differ.

Not located, and largely peripheral to this product. Legal Tracker does not produce legal analysis or advice, so the unauthorised practice question does not arise in the form it takes for a research or drafting tool. The adjacent professional question that does arise is left unaddressed: the platform evaluates law firms, attorneys and judges through data driven profiles and performance indicators, and enforces billing guidelines against outside counsel, and nothing published addresses the professional dimension of a machine assessing an attorney's billing conduct or a judge's record. Checked the product pages, the Advanced features page and the corporate material on 29 Aug 2026.

Fourth A on this axis, earned on an accredited AI management certification. The vendor states it is certified in ISO/IEC 42001 and describes it correctly as the first globally recognised standard for artificial intelligence management systems, which is the governance artifact this axis asks for: an externally audited management system covering the AI lifecycle rather than a principles page. It sits alongside SOC 1 Type 2, SOC 2 Type 2 and ISO 27001, so the AI standard is one part of a substantial assurance posture rather than a lone badge. Recorded honestly as the thinnest of the four A grades on this axis: searched the vendor site, the FAQ, the press releases and third party material on 29 Aug 2026 and located no certifying body, no certification date, no published scope for what the 42001 certification covers, no named owner of model governance, no pre release testing results, and nothing on uneven output across matter types, firms or practice areas. Compare Definely, which publishes its AI System Register and per system ownership, and Workday, which names its certifier and date. The certification is the artifact here; the evidence around it is not.

A named, published and enumerated corporate framework, applied above the product. The Thomson Reuters AI Principles are public and specific: that use of data and AI is informed by the Thomson Reuters Trust Principles, that the company will prioritise security and privacy throughout design, development and deployment, that it will strive to maintain meaningful human involvement and treat people fairly, that products should be reliable and consistent and empower socially responsible decisions, and that it will seek partners with similar ethical approaches. Publishing a fairness commitment matters more than usual for this product specifically, because the system evaluates timekeepers and firms and flags individual billing behaviour, so a systematic tendency would fall on named professionals. Held at B because nothing behind the principles is published for this product: no model card, no bias or fairness testing on flagging behaviour, no evaluation, no accuracy monitoring, no named governance body and no ISO 42001. The commitment is corporate; the evidence is absent at the product level.

Substantive published assurance covering most of the ground, weighted toward certification rather than described controls. Published: SOC 2 Type 2 and SOC 1 Type 2, both stated as achieved without exceptions, ISO 27001, ISO 42001, GDPR, CCPA and CPRA compliance, AWS as the hosting partner, and a completed Cloud Security Alliance Consensus Assessment Initiative Questionnaire available on request, which is a substantive standardised control disclosure most vendors here do not offer. Third party material describes encryption and user based access controls. Not located as of 29 Aug 2026: a stated retention period or deletion control for invoices, narratives or model outputs, a named subprocessor list, and an incident or breach notification practice. The SOC 1 scope covering invoice approval, accruals management and financial reporting is a genuine control assurance over the money path and is credited here.

Corporate commitments exist and no product level position on AI data handling was located. The AI Principles state prioritisation of security and privacy across the AI lifecycle, and a Legal Tracker specific data security guide is published, which together are more than an assurance in marketing copy. What was not located for this product: any statement on whether invoice narratives, matter data or spend records are used to train or improve models, any retention position for AI processed content, and any description of how customer data is separated from the aggregated benchmarking pool. That last question is unusually pointed here, because the benchmarking asset is built from customer spend data and is sold back as a feature, so the boundary between a customer's data and the shared corpus is a live commercial question the published material does not draw. Checked the product pages, the Advanced features page, the Legal Tracker data security guide reference and the corporate AI Principles on 29 Aug 2026.

Searched the vendor site, the FAQ, the press releases and third party review material on 29 Aug 2026. No published indemnity, liability cap, carve out, warranty on output or insurance position was located, and no customer terms of service was located on the surfaces reached. Recorded as a pure absence. The shape is distinctive for this product: the AI's output directly reduces payments to third parties, so a wrong flag has an immediate financial effect on a law firm that is not the vendor's customer and has no contractual relationship with the vendor at all. Nothing published addresses either side of that, and it is a recourse question no other record on this index raises in the same form.

No published position located. Nothing was found on liability for AI output, warranty, service levels or remedy where an invoice is wrongly flagged, a legitimate charge is rejected, or a duplicate goes undetected. The consequence path is direct and financial in both directions: a false flag creates a dispute with outside counsel, and a missed duplicate is money paid that should not have been. Enterprise agreements govern this and are not public, and no public terms page for the product was located in this pass, so this is recorded as an absence across the surfaces checked, being the product pages, the Advanced features page, the UK product page and the corporate material on 29 Aug 2026.

Integration is claimed at category level without named connectors. The vendor states the platform can be implemented into existing processes with minimal setup, which it attributes to the language analysis removing the need to configure rules manually, and third party material refers to integrations particularly in collaboration and business intelligence. An e-billing platform necessarily exchanges data with accounts payable, enterprise resource planning and law firm billing systems, and handles standard billing formats, but none of that was located as documented on the surfaces reached. Searched the vendor site, the FAQ and the press releases on 29 Aug 2026 and located no integrations index page, no named connector, no API documentation, and no statement of which billing format standards are supported. For a product whose data must flow to finance systems, that absence is notable.

Two integrations are named and the ones a legal operations buyer would ask about are not. Named: Microsoft Outlook and Microsoft Teams, described as seamless integration with essential enterprise platforms, plus in platform communication with outside counsel. What is absent from located material: no accounts payable, ERP or finance system integration despite this being a spend platform whose output is payment, no document management system, no matter or contract system connector, and no API documentation. For a product whose core workflow ends in an approved invoice moving to finance, the finance integration story is the one a buyer needs and it is not published. Checked the product pages, the Advanced features page and the UK product page on 29 Aug 2026.

Cloud delivery and the hosting partner are stated and residency is not addressed. AWS is named as the hosting partner, which the vendor frames as providing security and performance. Searched the vendor site, the FAQ, the press releases and third party material on 29 Aug 2026 and located no named regions, no customer selectable residency, no tenancy model, and no statement of where processing happens as distinct from where data is stored. The absence is more consequential than for most records here: the vendor is headquartered in Ireland, sells to enterprises with complex multi jurisdictional operations, and states GDPR compliance, so where invoice narratives describing legal work are processed and stored is a question its own customer base would be expected to ask.

Residency options are described, and the description comes from third party material rather than from the vendor pages read. An independent software directory states that secure data residency options provide flexible storage while upholding compliance and security, and the product is sold globally with multi currency and multi language support, which implies regional handling. No vendor page located in this pass names a hosting provider, enumerates regions, states a residency commitment, or describes single tenant options. Source basis recorded as Third Party Estimated on that footing rather than credited as vendor disclosure. Correction candidate: the published Legal Tracker data security and certification guide is the document most likely to state residency directly and was identified but not read in full in this pass.

CORRECTED 29 Aug 2026 during the trust portal sweep; grade held at B and the currency finding is now firmer. The vendor's security page, not reached in the original pass, states the certification set and scopes it precisely: externally validated through ISO 27001:2013, SOC 1 and SOC 2, with annual AICPA System and Organization Controls reports prepared across all five trust categories, SOC 1 Type 2 covering controls relevant to financial reporting and SOC 2 Type 2 covering Security, Availability, Processing Integrity, Confidentiality and Privacy. Naming all five categories rather than the usual three is more precise than almost any record on this index. A Cloud Security Alliance CAIQ is available with the reports on request. A separate trust centre exists for the vendor's Workspace product at a stable URL, stating annual audits by an independent CPA firm, first SOC 2 audit in February 2021, and reports available by request through the service portal. Why the grade holds at B rather than rising. The evidence route for the main platform is still a request to the team rather than a self serve portal. No coverage period, report date or auditing firm was located for the main platform. And the currency question is now stronger rather than weaker: the ISO 27001:2013 reference appears on the vendor's own current security page, not only in an FAQ, and that revision was withdrawn and superseded by ISO/IEC 27001:2022, whose transition deadline has passed. A vendor stating a withdrawn revision on its live security page is a finding worth recording plainly, and it remains rebuttable by a current certificate.

A product specific security document exists and no certification status for this product was established, and the reason that matters is recorded here as a warning. Thomson Reuters publishes a Legal Tracker specific data security and certification quick reference guide, which is better than a corporate page and indicates the topic is addressed at product level. The guide was identified but not read in full in this pass, and no certification status for Legal Tracker itself was confirmed from any source. THE HAZARD, stated explicitly: sibling Thomson Reuters products carry distinct and separately stated certifications. Case Center is ISO 27001 certified on its own certifications page. The Thomson Reuters Europe trust centre material describes ISO 27701 certification in the context of ONESOURCE Pagero, an e-invoicing product. CoCounsel publishes its own security posture. None of those transfers to Legal Tracker, and treating a corporate parent's certification estate as a per product credential is the domain hazard this pull has already hit four times in a different form. Held at C on what is actually established: a product level security document is published, its contents are unverified, and no certification is confirmed. Correction candidate in both directions.

Searched the vendor site, the FAQ, the press releases and third party review material on 29 Aug 2026. No model, provider, hosting location for model processing, or subprocessor was located, and no commitment to notify customers of supply chain changes. AWS is named as the hosting partner for the platform, which is infrastructure rather than a model supply chain disclosure and was not treated as one. The gap covers both layers of this product's AI: the language analysis that codes invoice narratives, whose nature is not described beyond being language analysis technology, and Ask Brightflag, a conversational interface whose underlying model is not identified anywhere located. A buyer cannot determine from published material which company, if any, processes their invoice narratives.

Nothing located. No foundation model provider, model family or version is named, no subprocessor list was found, and no distinction is drawn between the machine learning models the vendor states have been in the product for over a decade and the generative AI and advanced multilanguage models described in the Advanced tier. The corporate AI Principles include a commitment to partner with organisations sharing similar ethical approaches, which acknowledges that partners exist and names none of them. Checked the product pages, the Advanced features page, the corporate AI Principles and the blog material on 29 Aug 2026.

Checked the vendor site, the FAQ and the press releases on 29 Aug 2026. No pricing page was located, no rate is published, no unit of charge is stated and no tier structure appears on the surfaces reached. Third party sources state pricing is not publicly available and requires a custom quote, structured on subscription and varying with organisation size and the volume of legal spend managed, which confirms the absence and identifies the unit of charge without the vendor publishing it. Worth recording plainly because of what this product is: a platform sold on delivering visibility and transparency into legal spend, which does not publish what it costs. That is not a grading factor beyond the D, but it is the sharpest instance of the pattern on this index.

No pricing at any level. No price, no range, no unit of charge, and no indication of the difference in cost between Legal Tracker and Legal Tracker Advanced, which is the specific question a buyer faces here since the AI capability sits in the upper tier. Every route is a contact or demo request. The irony is on the record and worth stating: this is a product sold to bring transparency to legal spend, and its own cost is not published at any level of abstraction. Checked the product pages, the Advanced page, the features page and independent directory listings on 29 Aug 2026.

Segment coverage is described in general terms with the detail not reached. The vendor states its customers are corporate legal departments across industries and range from high growth companies to global enterprises with complex multi jurisdictional operations, and identifies the buying roles as in house legal, legal operations and their finance counterparts. Its FAQ begins an enumeration of the industries served but that list was not captured in this pass and is not credited. Practice scope is clear and consistently stated as outside counsel spend, matters, vendors, budgets and reporting, with no claim to advisory or drafting capability. Not located as of 29 Aug 2026: an enumerated industry or practice area list, organisation size segmentation, jurisdictional coverage, and any statement of what the platform is not built for. Flagged as rebuttable in one step by reading the FAQ industry list.

Coverage is quantified with real specificity on the dimension that matters for this category, which is the reach of the benchmarking corpus rather than jurisdictions of law. Stated: aggregated data from 1,800 law departments and 120,000 law firms worldwide, a library of $230 billion in legal spend, with segmentation by industry, spend, department, company size, work type, metro area, classification and law firm performance by substantive law. Global operation is supported by multi currency handling, language packs and management of laws and currencies across regions. Rate increase history is analysable by individual timekeeper and firm using compound annual growth rate. Held at B rather than A because the corpus is described rather than characterised: no statement of geographic distribution, no indication of how current the aggregated data is or how often it refreshes, and nothing on whether coverage in a given jurisdiction or practice area is deep enough for a benchmark to be meaningful, which is the question a department comparing itself actually needs answered.

Searched the vendor site, the FAQ, the press releases and third party review material on 29 Aug 2026. No located material states whether customer content may be used to train models, either way. Recorded as silent under the rule that a value is never inferred from the absence of a contradiction, and specifically not inferred from the ISO 42001 certification, which evidences that an AI management system exists rather than what its training position is. The question carries unusual weight for this product. The material at issue is invoice narratives describing legal work across many companies and many law firms, and the vendor's own benchmarking and vendor profiling features depend on cross customer comparison, so a buyer would reasonably want to know what is pooled, in what form, and for whose benefit. Nothing located addresses it.

Silent for this product, and the quote shows precisely why. That commitment is published by Thomson Reuters for CoCounsel Legal, a different product on this index with its own record. It is quoted here to document what was found and deliberately not credited, because a no training commitment made for one product in a large portfolio is not a commitment for another, and transferring it would manufacture a contractual position Legal Tracker has never stated. Nothing located addresses whether Legal Tracker invoice narratives, matter data or spend records are used to train or improve models. The question has commercial weight beyond the usual: the benchmarking asset covering $230 billion in spend is built from aggregated customer data and sold back as a product feature, so this vendor demonstrably does reuse customer data for a purpose beyond the individual customer, and the boundary between that and model training is not drawn anywhere public. Checked the product pages, the Advanced features page, the UK product page and the corporate AI Principles on 29 Aug 2026.

Searched the vendor site, the FAQ, the press releases and third party review material on 29 Aug 2026. No public material states how long invoices, narratives, AI generated flags, summaries or Ask Brightflag conversations are retained, whether a customer controls the window, or whether deletion is available. The platform is a system of record for spend and matter history and its analytics, forecasting and rate benchmarking features depend on multi year retention, so long retention is inherent to the value proposition and no published terms govern it.

Not addressed. No retention period is published for AI processed invoice content, natural language queries against spend data, or generated insights, and nothing indicates whether retention is configurable. The platform retains invoices, matter records and spend history by design as a system of record, which is retention as a product function and a different question from how long the AI layer holds what it processes. Neither is quantified. Checked the product pages, the Advanced features page and the UK product page on 29 Aug 2026. Correction candidate: the published Legal Tracker data security guide was not read in full.

CORRECTED 29 Aug 2026 during the trust portal sweep. Previously recorded as not addressed on the finding that no vendor material described segregation and that third party references to access controls were assertions relayed rather than a documented model. The vendor's security page, not reached in the original pass, documents the model. Published: out of the box user roles and access permissions with a detailed breakdown available in the help centre, so the roles are enumerated somewhere a customer can read rather than merely asserted; single sign on via SAML with named identity providers; SCIM support for provisioning, permission management and de-provisioning; OAuth on the API; and optional restriction of access to specified IP ranges. That is the product's own permission model, described at mechanism level. Recorded at own model documented rather than the positive value for two reasons. No material states that the AI layer respects those permissions at query time, which matters because Ask Brightflag is described as a conversational interface accessible to every person in the legal department and the underlying data includes invoice narratives describing sensitive matters. And no document management integration was located whose access model could be inherited. Conflicts and ethical walls are not named as such.

Not addressed. No permission model, matter level access restriction or segregation description was located. The structural question specific to this product is unanswered: multiple outside firms bill into a single department's instance and collaborate within it, so a firm's invoice narratives describing its work on a matter sit in a platform other firms also use, and nothing published describes what walls exist between them or between matters within the department. No document management system integration exists to inherit permissions from. Checked the product pages, the Advanced features page and the UK product page on 29 Aug 2026.

Searched the vendor site, the FAQ, the press releases and third party review material on 29 Aug 2026, and no published customer agreement or data processing agreement was reached. No clause committing to notify a customer of a government or law enforcement request for their data was located, and no transparency report was located. The exposure is worth naming: a structured record of what every outside law firm did on every matter for a company would be an attractive target for a discovery request or regulatory demand, and nothing published addresses what the vendor would do on receiving one.

Not addressed for this product. A process is described elsewhere in the Thomson Reuters estate, in trust centre material covering ONESOURCE Pagero, stating that processes exist to manage and validate third party data access requests including informing the customer in accordance with applicable law, audited under ISO 27701. That is a different product with a different certification and it is recorded here as located and not transferred. No notice commitment, process description or transparency report specific to Legal Tracker was found. Checked the product pages, the corporate material and the trust centre material on 29 Aug 2026.

No primary law corpus is identified because the product does not hold one, and the relevant provenance question is a different one that is also unanswered. Invoice review runs against the customer's own invoices and their own billing guidelines, so that corpus is theirs. But the vendor also publishes rate benchmarking and AI built vendor profiles applied to panel management and RFPs, and benchmarking necessarily rests on a comparative dataset drawn from somewhere. Searched the vendor site, the FAQ and the press releases on 29 Aug 2026 and located no statement of what the benchmarking corpus comprises, whose data it contains, whether it is aggregated or anonymised, or on what basis it was assembled. Recorded as not addressed on that specific question rather than as inapplicable.

Named without a licence basis, and the corpus here is customer contributed rather than public law. The benchmarking data is described precisely: aggregated data from 1,800 law departments and 120,000 law firms worldwide covering $230 billion in legal spend, segmentable by industry, department size, work type, metro area and firm performance by substantive law. Naming the composition and scale of the corpus that specifically is genuine provenance disclosure and better than most records manage. What is absent is the basis on which it exists: nothing states the contractual or consent footing on which customer spend data enters the aggregate, whether contribution is a condition of use, whether a customer can opt out and still buy the product, or how data is de-identified before it is pooled. There is no primary law corpus in this product, so the signal is recorded against the corpus that does the work.

Searched the vendor site, the FAQ and the press releases on 29 Aug 2026. No material was located addressing whether authority carries a treatment signal or whether subsequent history is checked, and no commercial citator licence was located. Noted for context: this is a legal spend and matter management platform whose corpus is invoices and billing guidelines rather than case law, so a citator is outside its design entirely.

Not addressed, and inapplicable on the facts. Legal Tracker manages spend and matters and produces no legal analysis or citation to authority, so there is nothing for a citator to check. Recorded as a scope fact rather than omitted, so a reader comparing this record against a legal research product does not read an empty row as a disclosure failure. Consistent with the treatment of this row on TrialView and Exterro. Checked the product pages and the Advanced features page on 29 Aug 2026.

Searched the vendor site, the FAQ, the press releases and third party review material on 29 Aug 2026. No published material describes what the product does when it cannot confidently code a line or assess a narrative against a guideline, and no explicit no answer path or confidence signal exposed to the user was located. Third party review material observes that AI driven invoice analysis may require manual review in complex cases, which suggests some routing to human judgement occurs in practice, but it is an unverified customer observation rather than a published behaviour and was not treated as one. For a product that codes every line of every invoice, how it handles an ambiguous narrative is a live question and is unaddressed.

Not addressed. The product includes a plain language question interface over spend data and AI that flags billing anomalies, and nothing published describes what either does under uncertainty: whether an ambiguous invoice narrative is surfaced for human attention or silently passed, whether a flag carries a confidence level, or whether the query interface will state that it cannot answer rather than returning a number. For a system whose output feeds payment decisions and benchmark comparisons, a confidently wrong answer and an abstention have very different consequences and neither behaviour is documented. Checked the product pages, the Advanced features page and the UK product page on 29 Aug 2026.

No court order, opinion or disciplinary record naming this product has been located as of 29 Aug 2026. Instrument searched: the AI Hallucination Cases database maintained by Damien Charlotin, which tracks court decisions worldwide involving AI generated hallucinated content and records the AI tool implicated where it is known. Also checked published 2026 sanctions summaries and secondary sanctions trackers. The entries located name filers, and in some rows other products, rather than this one. This is a statement about the public record on the date shown and not a clearance. Note the product does not generate citations or court facing text at all: its output is invoice flags and spend analysis, so the failure mode this database catalogues does not arise here, and a wrong output would surface as a billing dispute rather than a sanction.

None located, with the instrument named and a transfer refused. General web searches combining the vendor and product names with court, order, sanction and billing dispute terms returned nothing on 29 Aug 2026, and no named docket database or court record tracker was searched. Recorded explicitly for the next reader: the Stanford RegLab and HAI study measuring hallucination rates applies to Westlaw AI-Assisted Research and Ask Practical Law AI, not to Legal Tracker, and it does not transfer to this record on the strength of a shared corporate parent. The product generates no citations to legal authority, so the classic failure mode does not arise. Recorded as a statement about what this search found, not as a clearance.

Searched the vendor site, the FAQ, the press releases and third party review material on 29 Aug 2026. No engagement with any named ethics opinion or bar guidance was located, including ABA Formal Opinion 512. The absence is more pointed here than for most records, because the professional rules governing legal billing are directly the subject matter of the product: what a lawyer may bill for, what constitutes a reasonable fee, and how work is described to a client are conduct rules, and this platform automates the assessment of exactly that. It engages with the customer's own outside counsel guidelines, which are contractual instruments, and not with the professional standards that sit behind them.

Not addressed. No named ethics opinion, no ABA Formal Opinion 512, no state bar guidance and no engagement with professional conduct rules was located for this product. The adjacent professional territory the product occupies is billing conduct, where guidance on reasonable fees and billing practices exists in every jurisdiction, and the platform enforces billing guidelines and flags timekeeper behaviour without engaging any of it. Checked the product pages, the Advanced features page, the UK product page and the Thomson Reuters blog and institute material on 29 Aug 2026.

Second record on this index to reach a value above savings claims, and the only one where fee assessment is the entire product. The platform generates a per matter and per invoice record of what the AI flagged, what a reviewer approved and what was ultimately paid, held in controlled approval workflows with complete audit trails, so a legal department has a durable account of how each fee decision was reached and on what basis. That is the artifact this signal looks for, produced as the core function rather than as a by product. Two limits keep it short of the positive value and both matter. First, the record concerns the law firm's billed work rather than any AI assisted work performed by the vendor itself. Second, and more consequential for this index: outside counsel guidelines increasingly address whether and how AI assisted work may be billed, and searched the vendor site, the FAQ and the press releases on 29 Aug 2026 without locating any statement that the AI checks for AI related billing entries or supports a guideline term about them. A product that translates billing guidelines into automated checks, in a market where those guidelines are being rewritten around AI, publishes nothing about that.

Audit record, and the strongest position on this signal located in the pull, because billing is the product rather than a side effect of it. The platform produces exactly what this signal asks about: an auditable record of what outside counsel billed, which line items were flagged and why, which were adjusted or rejected, and by whom, held against enforced billing guidelines with approval workflow and full spend history. A department can evidence its review of a bill in a way no other record on this index supports. Held at audit record rather than the top value because the guidance limb is missing: nothing published addresses how AI assisted time should itself be billed or disclosed, and no position is taken on what a firm using AI should record on an invoice, which is the live question in this category and the one a spend platform is best placed to answer.

Diligence material exists and reaching it runs through a conversation. The vendor states that security and compliance reports, including a completed Cloud Security Alliance Consensus Assessment Initiative Questionnaire, are available by contacting the team directly, and names SOC 1 Type 2, SOC 2 Type 2, ISO 27001 and ISO 42001 alongside GDPR, CCPA and CPRA compliance. A completed CAIQ is a substantial standardised control disclosure and few vendors on this index offer one. Searched the vendor site, the FAQ and the press releases on 29 Aug 2026 and located no subprocessor list, no statement naming which model providers see customer content, no published data processing agreement, and no client facing consent or notification pack. Recorded at on request on the strength of the stated report route.

Not addressed, which is the sharpest irony on this record. This product exists to operationalise outside counsel guidelines, enforcing a department's billing rules against the firms it instructs, and the vendor publishes no equivalent disclosure pack about itself. No subprocessor list, no named model provider, no data processing agreement, no trust centre for this product and no self serve documentation request route were located. The published Legal Tracker data security and certification guide is the closest thing and its contents were not verified in this pass. Checked the product pages, the Advanced features page, the UK product page and the corporate material on 29 Aug 2026.

Searched the vendor site, the FAQ, the press releases and third party review material on 29 Aug 2026. No per document record covering model used, sources retrieved and human verification was located, and no model is identified in published material so the model used could not be stated. Complete audit trails exist over the approval workflow, which record who approved what and when rather than what the AI did and on what basis, and the two were not conflated. Noted for context: this is a spend management platform whose output is invoice flags and financial analysis rather than legal work product, so a judicial AI disclosure order is unlikely to reach it. The nearer analogue would be a fee dispute or a challenge to billing judgements, where the approval audit trail would be the relevant record and does exist.

Not addressed, and close to inapplicable in the form this signal usually takes. Legal Tracker does not produce legal work product that would be filed, so the model used, sources retrieved and human verification export a judicial standing order asks for has no natural object here. The platform does hold a strong internal audit trail of invoice review decisions, and that is recorded on the billing signal where it belongs rather than double counted here. Recorded as a scope fact: the row is empty because the product does not generate output that reaches a court, not because the vendor declined to document it. Checked the product pages and the Advanced features page on 29 Aug 2026.