CARET Legal vs Smokeball: how they compare in 2026
CARET Legal and Smokeball both sell practice management to small and midsize law firms, with billing, trust accounting and AI that works inside a firm's matters. The sharpest difference is what happens to client data inside the AI. CARET's terms license a firm's AI inputs and outputs to CARET to train, tune and evaluate its models, and the terms offer no opt out. Smokeball's security page says it gives no customer data to third parties for model training, and its own use is not addressed. It also limits Archie to users already permitted on a matter, and states ISO 27001:2022 certification. CARET's counterweight is disclosure about price and model. It publishes plans at $79, $99 and $119 per user a month, and names Microsoft's Azure OpenAI Service behind Quick Summary. Both publish liability terms with an intellectual property indemnity, and both commit to notice before any compelled disclosure.
Which one fits
Choose CARET Legal if
- You want to price the platform before a sales call. CARET publishes plans at $79, $99 and $119 per user a month billed annually, with AI document summaries from the $99 tier, and its terms state that AI services may carry additional fees and token limits set in the order.
- You need to name the AI provider to a client. CARET states that Quick Summary runs on Microsoft's Azure OpenAI Service in a closed environment, and its terms acknowledge third party models and say its providers keep their rights in them.
- You want the advice line and legal process terms in the contract. CARET's terms state that AI outputs are not legal, tax or professional advice and need review by qualified personnel, and commit to prompt written notice before a compelled disclosure so the firm can seek a protective order.
Choose Smokeball if
- You need AI walled by matter. Smokeball states that only users already permitted on a matter can use Archie for it, that Archie never cross references other matters, and that each firm's data is logically isolated from every other firm's.
- You draft in Word and Outlook from a form library. Smokeball builds on Word document automation with more than twenty thousand forms, and Archie sits in the Word sidebar and in Outlook, summarizing threads and drafting replies from matter context before a person sends them.
- Your security review wants a certification and a supervision rule. Smokeball states ISO 27001:2022 certification and annual penetration testing, and its terms state that it is not a law firm and that Archie should be used only by or under the supervision of qualified legal practitioners.
At a glance
All 15 axes, side by side
The same grid applied to every vendor in the index, graded from public sources. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
The AI drives a core capability on a practice management product that ran without it for decades. CARET AI finds unbilled time in work already logged, flags matters that need attention and calculates deadlines from matter data, and Quick Summary condenses documents; the company introduced more AI in its 2026 Summer Launch. Remove those features and case management, native email and calendaring, automated workflows, document management, reporting, billing, trust accounting and payments remain, which is the product CARET and its predecessor AbacusLaw have sold to firms for some forty years. The Terms of Service treat AI Services as a defined subset of the subscription: they are excluded from the 99.9 percent availability commitment and from the warranty, may carry separate fees and token or credit limits set in the order, and document summaries start on the second pricing tier. In that framing the vendor states plainly that the product stands without the models.
Archie, sold as an add on to the Boost, Grow and Prosper+ plans, works inside a matter to draft, review and answer questions with nothing to upload; Playbooks check each document against rules the firm defines; Archie Apps is a marketplace of specialist AI tools that analyze bank statements, build chronologies and transcribe audio; and legal questions surface LawY's jurisdiction aware guidance. Smokeball AI also powers intake and client communication on the higher tiers, and AutoTime captures time passively. Without the models, the core Smokeball has sold for years remains: Word document automation from a large form library with practice area templates and calculators, matter and calendar management, email management, billing, trust accounting and payments. Smokeball's pricing page lists Archie as an add on rather than a feature of every plan.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
Accuracy is disclaimed in the contract, asserted in marketing and never measured. CARET's AI does not cite law; it summarizes documents, surfaces unbilled time and calculates deadlines. The question is how often a summary misstates a document, a time entry is wrong or a computed deadline is off, and the last matters most because a missed deadline is a malpractice claim. Section 20.3 of the Terms says AI outputs may be inaccurate, that CARET makes no representation about their accuracy or reliability, and that every output must be independently reviewed before use. The 2023 launch announcement claimed Quick Summary speeds decisions without sacrificing accuracy, with no test, figure or evaluation behind it. For deadlines, CARET also integrates LawToolBox, which calculates dates from the rules of civil procedure and tracks rule changes; nothing says whether CARET AI's own deadline calculations use it. Section 23 disclaims liability for missed deadlines and late filings.
Archie drafts and answers from the matter's own documents and compares documents to find conflicting terms. It also surfaces LawY's guidance on legal questions by jurisdiction, with an option to have a lawyer verify the answer. Section 24 of the Terms of Service, last updated 9 July 2026, says answers from Smokeball AI or Archie may contain inaccuracies and may not reflect recent changes in the law, that notifications and generated forms may not be accurate, and that Smokeball makes no warranty as to results. No accuracy figure, test set, error rate or evaluation is published for Archie, Playbooks or Archie Apps, including the transcription and chronology tools, and LawY verification is a review step rather than a measure. The Archie page carries a customer's claim of a 117 percent productivity increase, which concerns speed, not accuracy.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
A written commitment that people review model output, without the full control structure. Section 20.3 of the Terms of Service says AI outputs are for information and workflow assistance, must be independently reviewed and validated before use, and must not be relied on without appropriate review by qualified personnel. It asks the firm to report inaccurate or harmful results to CARET, a feedback route. In practice CARET AI presents unbilled time, attention items and calculated deadlines for a person to accept and act on rather than posting them itself, and Quick Summary produces a summary for a user to read. Nothing says where automation stops: whether a calculated deadline goes onto the calendar without confirmation, whether unbilled time suggestions can post to an invoice on their own, or what happens after a wrong output is reported beyond the firm's own correction. Section 23 places responsibility for missed deadlines and sanctions on the firm.
Section 24 of the Terms of Service says Smokeball AI and Archie should be used only by or under the supervision of qualified legal practitioners, and that the firm must validate every notification and generated form with its own professional judgment. Playbooks flag issues against the firm's own rules and suggest fixes for a person to accept, and LawY answers can be sent to a lawyer for verification. Archie drafts in Outlook and Word can be adjusted for tone and length before anything is sent. The security page limits Archie's reach to authorized users, authorized matters and the firm's own environment. Where automation stops is not published. AutoTime captures billable activity passively without saying whether entries need approval before billing, and Smokeball AI handles intake and client communication on the higher tiers without a described handoff rule. There is no route back after a wrong answer beyond the firm's own review.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
Named firms report specific results, though none measures the AI features. The customer stories page profiles named firms and people. At Tectonic, LLP, a San Francisco IP boutique, attorney Hannah Stitt says custom intake forms and a task template cut the time from lead to signed retainer to 2.5 hours. At LaMagna McKenna, partner Michael La Magna estimates 15 to 20 hours a month saved after a merger. Other stories cover Diller & Rice, LLC, a three office Ohio firm; Pregenzer Baysinger Wideman & Sale, PC, whose firm administrator describes leaving a legacy system with frequent downtime; Doering, Grisell & Cunningham, P.A. in Kansas, which moved from CARET's on premises AbacusLaw to the cloud; and Parks Zeigler in Virginia Beach. CARET's home page says more than 6,500 firms use it, and the pricing page's estimate of an extra $20,000 of billable work per timekeeper is footnoted as an informational estimate. The figures are the customers' own, are not dated, and none is attributed to CARET AI.
The case studies page, filterable by state, practice and firm size, profiles named firms and people. Jon Crannell of The Crannell Law Group reports three to five times the efficiency at his Illinois personal injury firm, and Daniel Huestis of the Law Offices of Bonnie M. Benson in Delaware doubled his caseload. At Chuck Franklin Law in Arizona, Archie matter assistance is said to save two named paralegals hours every day. Strohman Ford Attorneys grew from a solo practice to 14 employees, Melrose Law reports a 25 percent caseload increase after migrating decades of data, and the founding partner of Ashton & Price says Smokeball brings millions more in case resolutions each year. The Archie page quotes Liana Mahoney reporting a 117 percent productivity increase, and Smokeball's pricing page says more than 34,000 legal professionals use the platform. The results are the customers' own, undated and without a stated method.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
Confidentiality is covered in the agreement, and the agreement also licenses the firm's AI inputs and outputs for model training. Section 20.4 of the Terms of Service gives CARET a license during the term to use AI inputs and outputs to provide and improve the AI Services, to train, tune and evaluate models and features, and for internal analytics. Anything kept beyond the term is held as anonymized aggregated data, and section 21.5 does the same for beta data. That contradicts CARET's 2023 and 2025 blog posts, which say Quick Summary runs in a closed environment on Azure OpenAI so client data is not exposed outside the firm's instance; where the two conflict, the agreement governs. Section 9 treats client data as confidential and requires notice so a firm can seek a protective order before compelled disclosure, and section 7 deletes client data from all CARET storage 30 days after the term ends. Attorney client privilege, work product and separation between matters are not addressed.
Each firm's data is logically isolated, and Archie can access only the firm's own data and cannot access or learn from other Smokeball firms, according to the security page, last updated 9 July 2026. Archie works within a single matter and is designed not to cross reference other matters, and the Archie page adds that it is visible only to staff already assigned to the matter. On third parties, the security page says Smokeball does not give customer data to third parties for AI model training, and the Archie page says Archie runs under enterprise zero data retention agreements, so data is never shared for viewing, training or modeling. The Terms of Service treat client data as confidential, with prompt prior notice before compelled disclosure, and delete it after a 30 day retrieval window at termination. The training commitment is on web pages rather than in the agreement, Smokeball's own use of data to improve its models is not addressed, and privilege and work product are not named.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
A real position on advice versus tooling is framed for a professional user, with jurisdictional compliance placed on the firm. Section 20.3 of the Terms of Service says AI outputs are not legal, accounting, tax or professional advice and need review by qualified personnel, and that the firm is responsible for any legally required disclosure of AI use to its own clients. Section 23 says CARET does not warrant compliance with court rules or deadlines in any jurisdiction and that the firm must decide whether its use complies with the rules of each jurisdiction it is subject to. CARET is not liable for missed deadlines, sanctions, adverse rulings or malpractice claims arising from reliance on the service. The buyer is always a law firm, the AI features serve the firm's own staff rather than the public, and the Terms bar using the AI for unlawful or discriminatory content. No bar opinion or regulator guidance on lawyers' use of AI is cited, and nothing links AI generated time entries to a lawyer's duty to bill accurately.
Section 24 of the Terms of Service, last updated 9 July 2026 and headed Disclaimer of Legal Advice, says Smokeball is not a law firm, that the system may not have been developed or approved by legal practitioners and carries no legal opinion or endorsement, that Smokeball AI and Archie are not a substitute for legal skill, judgment and experience and should be used only by or under the supervision of qualified legal practitioners, that notifications and generated forms must be validated with the lawyer's own professional judgment, and that content may not reflect current law. Jurisdiction is handled feature by feature: LawY answers are jurisdiction aware with optional verification by a lawyer, some features have been released market by market, and the product runs through separate national businesses. The buyer is always a law firm and the AI serves its staff. No bar opinion is cited.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
There are statements on responsible use and a conduct rule, without a governance program behind them. A 2025 CARET blog post says the company regularly reviews how it uses or plans to use AI and the tools that support it. The Terms of Service bar customers from using the AI Services to generate unlawful, harmful or discriminatory content and ask them to report harmful outputs. Those are a statement of intent and a user obligation. Nothing says how CARET governs its own models. No one is named as accountable, no framework such as ISO 42001 is cited, and nothing describes testing before a change to Quick Summary, deadline calculation or unbilled time detection reaches firms. No finding addresses whether those features perform unevenly across practice areas or matter types. Section 20.4 licenses CARET to train and tune models on firms' AI inputs and outputs, so firm data can shape future model behavior, and nothing describes the controls on that training.
The security page, last updated 9 July 2026, describes Smokeball AI as designed and operated to protect confidentiality, integrity and availability in line with ISO 27001 controls. It limits AI access to authorized users, matters and firm environments, and commits to purpose limitation by not giving customer data to third parties for model training. It notes that AWS, Smokeball's host, holds ISO 42001, the AI management system standard, which describes the infrastructure provider rather than Smokeball's own AI practice. No one is named as accountable for how Archie drafts or answers, and nothing describes testing before a change reaches firms. No finding addresses whether Archie, Playbooks or the partner Archie Apps perform unevenly across practice areas, jurisdictions or document types. The Apps marketplace brings partners' AI tools into a firm's matters, and nothing says how those partners are vetted.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
The data processing addendum and security page cover most of the ground, without a published subprocessor list. The addendum, incorporated into the Terms of Service, commits CARET to report a personal data breach without undue delay and within 72 hours, investigate and mitigate, and help with the firm's own notices. It gives the firm 14 days after notice to object to a new subprocessor, audit rights that a third party audit report can satisfy, and a right to request audits of subprocessors. Section 7 of the Terms permanently deletes client data from all CARET storage 30 days after the term ends. The security page describes daily backups with automatic failover, encryption of documents and data, TLS in transit, brute force detection, two factor authentication for external users, detailed logging, manual penetration testing and daily automated vulnerability scans by outside firms. No subprocessor list is published beyond Azure OpenAI, named on the blog. The addendum still cites the defunct Swiss U.S. Privacy Shield, and section 27 lets data transfer in a sale.
Hosting on Amazon Web Services with geographical redundancy covers disaster recovery, per the security page, last updated 9 July 2026. It describes multi factor authentication, role based access on least privilege, periodic privilege reviews, and automated monitoring and alerts for abnormal access. Regular audits, penetration testing, staff security training and incident response planning are listed too, all aligned with Annex A of ISO 27001. For AI it adds firm and matter level isolation, zero data retention agreements with AI providers and no provision of customer data to third parties for model training. The Terms of Service give 30 days after termination to retrieve data before deletion. No list of subprocessors is published, including the AI providers behind Archie and the partners in Archie Apps, and neither is a retention period for Archie prompts and outputs in Smokeball's own systems or any commitment on how quickly a firm is told of a breach.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
The allocation of risk is published in full, and on wrong AI output it stands behind nothing. Section 25 of the Terms of Service gives the firm a defense and indemnity for third party claims that the subscription service infringes intellectual property, with the usual remedies to procure a license, modify or terminate. Section 24 caps CARET's total liability at the subscription fees paid in the six months before the claim, a short look back, and excludes indirect and consequential loss. Section 23 warrants only the 99.9 percent availability commitment, which excludes the AI Services, with a service credit as the sole remedy. It disclaims every warranty on AI outputs and says CARET is not liable for missed deadlines, late filings, sanctions, adverse rulings or malpractice claims arising from reliance on the service. Section 30 bars claims after two years, and the firm indemnifies CARET for its AI inputs. A firm can read exactly where it stands, but there is no remedy for a wrong summary or deadline.
Section 26B of the Terms of Service, last updated 9 July 2026, gives the firm a defense and indemnity against third party claims that the subscription infringes United States intellectual property rights, with the usual remedies to procure a license, modify, or terminate and refund. Section 25 caps each party's aggregate liability at the subscription fees paid in the preceding year and excludes consequential loss, carving the indemnities and data migration out of the cap. Section 23B warrants that the subscription conforms to its product description and that Smokeball uses commercially reasonable malware protection. Sections 23D and 24 disclaim any warranty as to results and as to the accuracy of AI answers, generated forms or notifications, and the firm indemnifies Smokeball for its client data. No insurance is stated, and no recourse is offered for defective AI output.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
Integrations are named, most with a line on what moves and which way. The integrations page lists two way email and calendar sync with Microsoft 365 and Google Workspace, IMAP for other mail, an Outlook plugin that tracks time while drafting and saves emails and attachments to a matter, and a Word plugin that opens and saves documents and versions directly to matter folders. NetDocuments can be reached from any matter, with a workspace created when a matter opens. OneDrive folders can be linked to a matter to view, download, rename or delete files, and QuickBooks Online receives invoice approvals, edits and deletions automatically. HotDocs, RMail for encrypted email and electronic signature, LawToolBox for rules based deadline calculation and Lawmatics for lead and contact sync are named. Card, ACH and electronic check payments run in the product and the client portal. The Terms contemplate an API subject to rate limits. Setup documentation and field level detail for the connections are missing.
Archie works across Word, Outlook and Smokeball with the matter's full context, summarizing email threads and drafting replies in Outlook and drafting in Word without the matter being explained again. The Grow tier adds Word and Outlook integration for document automation and email management. Smokeball's pricing page lists Microsoft 365 Outlook and calendar integration, Office 365 calendaring, unlimited electronic signatures through InfoTrack, electronic filing, accounting integrations on the Bill tier, and LawY inside Archie for legal questions with optional lawyer verification. Archie Apps adds a marketplace of partner AI tools for bank statement analysis, chronologies and transcription, and Smokeball runs a separate partner marketplace for other integrations, organized by region. The product and pricing pages do not describe what each connection moves in which direction, or what a firm configures.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
Cloud delivery is stated, and neither the hosting provider nor the region is. The Terms of Service define CARET Legal as a software as a service subscription, and the security page describes redundant servers with daily backups and automatic failover without naming who runs them or where. The 2023 and 2025 blog posts say Quick Summary runs on Microsoft's Azure OpenAI Service in a closed environment so client data is not exposed outside the firm's instance of CARET Legal, which implies separation between firms for the AI feature without saying whether the underlying infrastructure is shared. The data processing addendum addresses transfers out of the European Economic Area, which tells a firm that its data may move across borders, but no region, residency option or processing location is stated. CARET still sells an on premise product, AbacusLaw, and one customer story describes moving from it to the cloud, but no private or single tenant deployment of CARET Legal itself is offered.
Amazon Web Services hosts Smokeball with geographical redundancy that keeps the service running through regional outages, according to the security page, last updated 9 July 2026. Each firm's data is logically isolated, with Archie confined to the firm's own data and to one matter at a time, a multi tenant model with separation down to the matter. The product is offered in the browser from the Boost tier and as a Windows desktop application with cloud services. Smokeball runs separate businesses and sites for the United States, Australia and the United Kingdom, with regional pages aligned to Australian privacy law and the UK GDPR. Which AWS regions hold a US firm's data, whether a firm can choose, and where the AI providers behind Archie process a matter's documents under their zero data retention agreements are not stated.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
A named attestation and a payment security standard are stated, without a type, a date or a report that can be obtained. The security page says CARET Legal has achieved SOC 2 compliance and that payment card data is handled to the PCI DSS standard. It describes the testing behind that in detail: manual penetration testing of the application and infrastructure by its own security team, plus automated vulnerability scans by outside firms every 24 hours, along with encryption, TLS in transit, brute force protection, two factor authentication and activity logging. The data processing addendum lets a third party audit report stand in for a customer audit, which implies a report exists. Nothing says whether the SOC 2 report is Type 1 or Type 2, its date, auditor or scope, including whether the AI features are covered, or how to request it. There is no trust center.
The security page, last updated 9 July 2026, says Smokeball is an ISO 27001 certified organization, and the Archie page repeats that Smokeball is certified to ISO 27001:2022 and independently penetration tested every year. The security page describes the program behind it: controls aligned with ISO 27001 Annex A, regular audits and assessments, penetration testing, compliance reviews, staff security training and incident response planning, with hosting on Amazon Web Services and its own certifications. The page attributes SOC 2 and ISO 42001 to AWS rather than to Smokeball. The certifying body, certificate number and scope, including whether Archie is inside it, are not published, and there is no trust center or route to request the certificate or a penetration test summary.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
The provider behind the first AI feature is named, and the rest of the supply chain is not. CARET's 2023 launch announcement and a 2025 blog post say Quick Summary runs on Microsoft's Azure OpenAI Service in a closed environment, which names the model provider and hosting arrangement and tells a firm that Microsoft's enterprise terms sit underneath. The Terms of Service say the AI Services may use third party and publicly available models and that CARET's providers keep their rights in the underlying models. Nothing says which models and versions run today, which providers stand behind the newer features for unbilled time, attention items and deadline calculation, where inference runs, or whether firms will be told before a model or provider changes. The data processing addendum gives firms 14 days to object after notice of a new subprocessor, but no subprocessor list is published to show whether AI providers are on it.
The Archie page says Archie runs under enterprise zero data retention agreements so a firm's data is never shared with third parties for viewing, training or modeling, and the security page says Smokeball does not provide customer data to third parties for AI model training. Both confirm that outside model providers are in the chain. LawY is named as the source of the legal guidance Archie surfaces, and Archie Apps brings in tools from specialist partners that are named in the product but not on a published list. The model provider or providers behind Archie's drafting, review and answers, the models and versions, where inference runs, and any commitment to notify firms before a provider or model changes are not published.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
A figure, a unit and a term are published. CARET's pricing page lists three tiers billed annually per user per month: Enterprise at $79, Enterprise Plus at $99 and Enterprise Insights at $119, each with features listed, plus one time implementation fees. AI document summaries start on Enterprise Plus, and premium support costs extra, with a 25 user minimum. A firm can work out its annual cost for a given headcount before speaking to anyone. The Terms of Service fill in the rest. AI Services may carry extra fees and token or credit limits set in the order form, and CARET may raise fees annually or on 30 days' notice for costs including cloud infrastructure and AI. Payments are not refundable, and ending before the term closes incurs the remaining balance. The pricing page's estimate that firms can capture an extra $20,000 of billable work per timekeeper is footnoted as an informational estimate. The cost of the AI token or credit limits is set in the order form and not published.
The pricing page sets out four plans on one platform, Bill, Boost, Grow and Prosper+, with a comparison feature by feature. Bill covers invoicing, time and expense tracking, payments and trust accounting. Boost adds browser based matter, task and calendar management, Microsoft 365 integration, the client portal, electronic signature and electronic filing. Grow adds practice area templates and calculators, advanced document automation and email management, and Prosper+ adds firm insights, lead management, advanced intake, custom workflows and automatic time capture. Archie is an add on from Boost upward, and AutoTime, Intake and Workflows are add ons below Prosper+, where they are included. Every plan shows a get pricing button rather than a figure. The Terms of Service add that fees are per user for a fixed term, that Flex Users pay a higher monthly rate, that upgrades are allowed during a term and downgrades only at renewal, and that renewal pricing comes with 60 days' notice. No price is published.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
Segment and practice coverage are described with substance, and some limits are stated. CARET publishes solution pages for civil litigation, personal injury, estate planning, intellectual property, criminal, immigration, family, real estate, employment, insurance defense, workers' compensation and general practice. It also has role pages for firm administrators, partners, bookkeepers and IT, and pages for firms of one to thirty employees and more than thirty. Customer stories cover an IP boutique in San Francisco, a real estate and tax firm in Kansas, a three office general practice in Ohio and an estate planning firm, and CARET's home page says more than 6,500 firms use it. Stated limits: the AI features begin on the second pricing tier, the service is governed by US law and subject to export control, and the Terms make firms responsible for confirming compliance with court rules in each jurisdiction. Nothing says where the AI is weaker, for instance whether deadline calculation covers every state's court rules or relies on the separate LawToolBox integration.
Smokeball publishes solution pages for family law, personal injury, real estate, criminal law, civil litigation, business law, general practice and probate, for solo, small and midsize firms, and for eight roles from solo attorney and managing partner to paralegal and billing manager. Its case studies can be filtered by US state, practice area and firm size, and run from solo practitioners in Louisiana and Texas to twenty person firms in California and Oregon. Its pricing page says more than 34,000 legal professionals use it, and it operates through separate businesses in the United States, Australia and the United Kingdom. Some features, including Archie Apps at launch, have been released market by market, AI features are add ons rather than standard on every plan, and section 24 of the Terms warns that content may not reflect current law. Which practice areas Playbooks and Archie Apps serve well, and where Archie's drafting is weaker, is not stated.
The 12 legal signals, side by side
Recorded rather than graded. These are the questions a practitioner has to answer before a tool touches a client matter, and the answers are taken from public material only.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
The published agreement expressly reserves a right to train on customer content, and no opt out is offered. Terms of service section 20.4, last updated 18 August 2026, has the client grant CARET a license to use and process AI inputs and AI outputs during the term to provide, maintain, support and improve the AI services, to train, tune and evaluate models and features, and for internal reporting and analytics. Learnings retained beyond the term are held as aggregated data, defined in section 7 as anonymized and not capable of reidentification.
Section 21.5 separately permits beta data to be used to train and improve AI systems. This sits against the vendor's blog statements of 2023 and 2025 that Quick Summary runs in a closed environment and client data is not exposed outside the firm's instance; the agreement governs.
The security page states that Smokeball does not provide customer data to third parties for AI model training or third party AI modeling, and the product pages say Archie runs under zero data retention agreements and that data is never shared with third parties for viewing, training or AI modeling. Every statement is about third parties, and Smokeball's own use of customer data for its models is not addressed. The Terms of Service of 9 July 2026 contain no clause that names training; section 18 says Smokeball AI and Archie processing aligns with the product's primary uses and the privacy policy.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
A specific period is published and the customer cannot change it. Terms section 7 provides that client data, which section 7 defines to include AI inputs, is permanently deleted from all CARET and affiliate servers and cloud instances thirty days after the term of the order expires; section 20.4 licenses AI inputs and outputs to CARET for the term and retains only anonymized learnings beyond it. Nothing states a shorter or configurable window during the term.
Terms section 14 permits deletion of the account and data thirty days after termination, and section 15 gives thirty days of access for retrieval, with a defined data backup on request. The period is set for the platform, and the customer cannot change it. The product pages say Archie runs under zero data retention agreements with its AI providers, which covers retention at the model provider rather than in the platform. Nothing states a shorter or configurable window for Archie prompts and outputs inside Smokeball during the term.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
Segregation is claimed at the level of a firm's instance without documentation. The vendor's blog states that AI runs in a closed environment so that client data is not exposed outside a firm's instance, and CARET's pricing page lists custom permissions on the second tier and above. Nothing describes how matters are walled within a firm or how the AI features respect those permissions.
The security page states firm level logical isolation and says only users already permitted on a matter can use Archie for that matter, consistent with ISO 27001 and SOC 2 expectations on access control. The product pages say Archie works only within the matter the user is in, never cross references other matters, and is visible only to staff assigned to it. The product keeps its own permission model and documents it at matter level.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
The published agreement commits to notice. Terms section 9.4 provides that where the receiving party must disclose confidential information to comply with a judicial or administrative proceeding, it will, to the extent legally permitted, give the disclosing party prompt written notice so that it may seek a protective order or other remedy at its own expense, and that disclosure after a failed application is not a breach. Client data is confidential information under section 9. No transparency report is published.
Terms section 22B requires the receiving party, to the extent permitted by law, to notify the disclosing party promptly and before any compelled disclosure so it can seek a protective order, to assist in opposing the disclosure, and then to disclose only what is legally required with efforts to obtain confidential treatment. Section 18 separately provides that Smokeball will give notice of legal process for client data, to the extent allowed by law, as soon as reasonably possible. No transparency report is published.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
No legal corpus stands behind the AI features, which are not built on one, since Quick Summary condenses the firm's own documents and CARET AI works from the matters, time, billing and deadlines already in the platform, citing no law.
The LawY integration answers legal questions with guidance described as jurisdiction aware and tailored to matter type, and Smokeball's own form library is stated at more than twenty thousand forms across matter types. Nothing states what primary sources sit behind LawY's answers, under what license, or how often they are refreshed, and the terms warn that content may not reflect recent changes in the law.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
Primary law is neither retrieved nor cited by the product, and no check of authority for subsequent history is described; its AI summarizes documents and surfaces practice data.
No public material addresses whether authorities in LawY's answers are checked for later history. Smokeball's control on citation risk is the option to have a lawyer verify an answer, which is a review step rather than a citator or treatment signal.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
An ungrounded summary or deadline calculation has no described fallback in the AI features. The terms require the client to review every output and to report inaccurate or harmful results, which is a reporting duty rather than an abstention path, and no confidence signal is described.
No public material describes what Archie or the LawY integration does when it cannot ground an answer. Playbooks flag issues against rules the firm defines, and the lawyer verification option acts on an answer already given; neither is a way to decline, and no confidence signal is described.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
The AI Hallucination Cases database maintained by Damien Charlotin, and wider reporting of court findings, record no court order, opinion or disciplinary record naming CARET Legal, Zola Suite, Quick Summary or CARET AI; the sanctions recorded involve general purpose chatbots, none of them this product. A practice management tool whose AI summarizes documents and surfaces practice data has little exposure to fabricated citations.
The AI Hallucination Cases database maintained by Damien Charlotin records no case naming Smokeball, Archie or Smokeball AI; the sanctions reported in court findings involve general purpose chatbots. No court order, opinion or disciplinary record naming the product appears in the public record. This is a statement about the public record, not a finding about the product.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
Professional responsibility frameworks, bar rules and ethics opinions go unnamed. The terms address the advice line, human review by qualified personnel and the client's duty to comply with court rules and to disclose AI use to its own clients, but no guidance from any jurisdiction is named.
Section 24 of the Terms requires that Smokeball AI and Archie be used only by or under the supervision of qualified legal practitioners and that outputs be validated with professional skill, judgment and experience, and Smokeball offers bar association discounts. No ethics opinion, bar rule or guidance from any bar or regulator on AI use is named.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
The buyer is a law firm and the product issues the client's invoice, so it sits inside the fee relationship; what it publishes on AI and the bill is a capture and savings claim. CARET AI is described as finding billable time in work already happening, and the pricing page claims an extra twenty thousand dollars of billable work per timekeeper as an illustrative estimate. Nothing addresses how AI assisted work is recorded or disclosed on the client's bill when the work takes less time, although the terms do require the client to make legally compliant AI disclosures to its own clients.
The buyer is a law firm and the product issues the client's invoice, so it sits inside the fee relationship. AutoTime records time passively and is described as gaining Smokeball AI, Archie is marketed as delivering work faster, and the terms price by user rather than by usage. Nothing addresses how AI assisted work is recorded or disclosed on the client's bill when the work takes less time.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
No subprocessor list or AI disclosure material for clients is published. The blog names Microsoft's Azure OpenAI Service as the provider behind Quick Summary, which is one provider for one feature, not a list. The terms permit subcontracting without consent and place the duty to disclose AI use to clients on the firm. The data processing addendum they incorporate gives firms 14 days after notice to object to a new subprocessor and accepts a third party audit report in place of a customer audit, but no subprocessor list is published that a firm could forward.
No subprocessor list or model provider list is published. The product pages describe zero data retention agreements with unnamed AI providers, and the security page says no third party model training takes place, which states terms a firm could forward rather than who sees client content. The terms address third parties a firm chooses to connect without naming processors.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
AI assisted work leaves no record built for court disclosure or verification certification. The terms require human review of every output and disclaim liability for missed deadlines and sanctions, and the product keeps matter and billing records, but nothing describes a record for each document of the model used, sources and human verification that could be exported for a court.
No public material addresses court disclosure, or certification that AI assisted work was verified. Archie's outputs and Smokeball AI summaries are described as visible only to firm staff, and the lawyer verification option on LawY answers produces a checked answer, but nothing says that a record for each document of the model used, the sources and the human verification can be exported for a court.
The questions both sides leave open
Derived from the records above rather than written, so it cannot favor either vendor. Take these into both conversations and ask each side the same question.
- Good Law Verification
- Refusal and Uncertainty Behavior
- Outside Counsel Guideline Readiness
- Court Disclosure Support
Product updates
The latest logged changes from each vendor, newest first, each linked to its source.
Smokeball
-
Product / capability
Archie, Smokeball's matter assistant, now highlights placeholders in its drafts and prompts the user to fill in any missing information.
Source -
Privilege / confidentiality
Smokeball Desktop App Version 10.1, released to beta testers, reworks matter permissions and adds a Manage access control to the Smokeball Web App, where a matter can be set to Open (all firm users) or Restricted (only staff with roles on the matter plus selected users).
Source
In summary
CARET Legal
CARET Legal, from Abacus Data Systems, Inc. of San Diego, which does business as CARET and was formerly AbacusNext, is a cloud practice management platform for small and midsize law firms. It handles case management, native email and calendaring, and document management, with workflows, intake and a client portal. Billing is LEDES capable, with payments and full legal and trust accounting. Its AI, CARET AI and Quick Summary, finds unbilled time, calculates deadlines and summarizes documents. According to the AI Legal Index, CARET publishes its pricing, from $79 per user a month, and names Azure OpenAI behind Quick Summary. It states SOC 2 compliance.
Smokeball
Smokeball, from Smokeball Incorporated of Chicago with businesses in Australia and the United Kingdom, is a desktop and cloud practice management platform for solo, small and midsize law firms. It is built on Word document automation with more than twenty thousand forms. It adds AutoTime passive time recording and matter and email management, along with intake, invoicing and trust accounting. Its AI assistant, Archie, drafts, reviews and answers questions inside the matter a user is working in, from Word and Outlook. According to the AI Legal Index, Smokeball's terms state that it is not a law firm and that Archie should be used only by or under the supervision of qualified legal practitioners. It states ISO 27001:2022 certification and limits AI access to users already permitted on a matter. It prices per user for a fixed term across four named plans, with Archie as a paid add on.
Questions buyers ask
CARET Legal vs Smokeball: which is better for a small law firm?
Smokeball publishes more on data handling and on matter level access to its AI, and states ISO 27001:2022 certification. CARET publishes its prices and names its AI provider. Firms that want to price a platform before a demo have more to read from CARET. From the AI Legal Index, based on each vendor's own published materials as of September 26, 2026. No vendor pays for placement.
Does CARET Legal train AI on client data?
Its terms allow it. Section 20.4 of CARET's terms of service, dated 18 August 2026, licenses a firm's AI inputs and outputs to CARET to train, tune and evaluate its models and features, and keeps learnings beyond the term only as anonymized aggregated data. The terms offer no opt out. Smokeball's security page says it gives no customer data to third parties for model training. From the AI Legal Index, based on each vendor's own published materials as of September 26, 2026. No vendor pays for placement.
How does Smokeball keep Archie inside one matter?
Smokeball's security page states that each firm's data is logically isolated and that only users already permitted on a matter can use Archie for that matter. Its product pages add that Archie works only within the matter a user is in, never cross references other matters, and is visible only to assigned staff. CARET claims separation at the level of a firm without describing matter walls. From the AI Legal Index, based on each vendor's own published materials as of September 26, 2026. No vendor pays for placement.
How much do CARET Legal and Smokeball cost?
CARET publishes Enterprise at $79, Enterprise Plus at $99 and Enterprise Insights at $119 per user a month billed annually, plus implementation fees it does not quantify, with AI summaries from Enterprise Plus. Smokeball prices per user for a fixed term across four named plans, with Archie as a paid add on. From the AI Legal Index, based on each vendor's own published materials as of September 26, 2026. No vendor pays for placement.
Neither vendor paid for inclusion, placement or a grade, and neither reviewed this page before it published. Everything on it comes from public material on the dates shown. How the index grades.
Three points to weigh. CARET's license to train on AI inputs and outputs is a published term a firm can read before signing, and learnings kept after the term are anonymized and aggregated. Smokeball's statements about training cover third parties only, and its own use of customer data for models is not addressed. CARET states SOC 2 compliance without saying whether the report is Type 1 or Type 2, when it was issued or who audited it. Neither vendor reviewed this page.