Hadrius vs Red Oak Compliance: how they compare in 2026
Hadrius and Red Oak Compliance both sell compliance software to broker dealers and registered investment advisers, from opposite ends. Hadrius is built around AI review of marketing, communications and trading, while Red Oak is a long established review workflow engine that added an AI module. Hadrius sits in the top two bands on ten of fifteen axes and Red Oak on two of fifteen, identical on three. Most of the gap is paper. Hadrius publishes its master services agreement, which states that AI output is not compliance advice and must be checked by qualified compliance staff. The same agreement commits to notice within 72 hours of a security incident, and the site names SOC 2 and ISO 27001. Red Oak publishes no customer agreement, security attestation or hosting region. Its counterweight is depth in the marketing workflow: direct filing with FINRA through its AREF integration, SEC 17a-4 retention, and an option to bring your own model. Hadrius's agreement lets it train AI models on customer inputs and outputs once aggregated and anonymized.
At a glance
All 15 axes, side by side
The same grid applied to every vendor in the index, graded from public sources. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
The models are the proposition and the vendor argues the point itself: if AI is generating the communications, the marketing and the trades, only AI can review them at the same scale. Every module's described value is a machine determination. Marketing review reads content against the firm's rules and disclosure requirements and routes it for approval. Communications supervision normalises threads across more than sixty channels and cuts false positives, which the vendor puts at 99 per cent against legacy tools. Account surveillance runs pattern tests over employee and firm trading against restricted lists and blackout windows and escalates what matters. The testing programme, attestations and branch examinations sit around those determinations as workflow. Strip the models out and what remains is an archive and a task tracker, which is what the platform is sold against. The agreement calls the same thing by its plainer name, describing AI-generated compliance outputs, automated approvals and recommendations. Verified 20 September 2026.
The models are one module on a workflow platform that sells perfectly well without them, and the vendor says so in its own words. What Red Oak leads with is the most configurable books-and-records compliant workflow engine: unlimited review workflows, a rules engine, parallel reviews, user-defined questions, annotations, document stamping, audit trails and write-once retention. Around it sit disclosure management, registration and licensing management, internet and social media supervision, website monitoring and a distribution platform, none of which is described as model-driven; disclosure intelligence is explicitly deterministic rules. AI Review is presented as an addition to that engine, with the vendor framing it as using AI without compromising compliance workflows and pairing the module with the engine so a buyer is not sacrificing compliance functionality for the sake of AI. Strip the module out and the platform, which has served this market since well before it, remains. Verified 20 September 2026.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
Six outcome figures are published and none of them measures whether the determinations are right. The estate carries 99 per cent fewer false positives, a 96 per cent reduction in time spent on communications supervision, a tenfold reduction in marketing review cycle time, 19-plus hours gained back weekly per user, $3,900 average annual cost reduction per representative, and $5 trillion in assets across more than 500 firms. Not one carries a period, a sample, a baseline or a method. Nothing addresses the failure that matters most in supervision, which is the violation the system does not flag. The agreement is candid where the marketing is not, stating that the services use artificial intelligence which is inherently not error-free, that outputs are informational only, that no warranty is given as to their accuracy, completeness or reliability, and that the customer must independently verify every AI-generated output before relying on it. Verified 20 September 2026.
No accuracy or grounding disclosure was located for the AI module at all. The product gives marketers compliance feedback on advertising copy before it reaches a reviewer, which is a judgement about whether content meets a firm's policies and the rules behind them, and nothing published says how reliable that judgement is. There is no accuracy figure, no error rate, no description of what grounds the feedback beyond prompts engineered to the firm's policies and procedures, no statement that the output should be verified, and no hallucination or limitation disclosure anywhere on the module page or elsewhere on the estate. The published numbers measure throughput instead: 35 per cent faster approvals, 70 per cent fewer compliance touchpoints and a 54 per cent reduction in AI review time. No customer agreement is published in which an accuracy position might otherwise sit. Checked the AI Review page, the advertising review page, the solutions pages, the privacy notice and the website disclosure. Verified 20 September 2026.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
The review point is stated and the thresholds belong to the customer. The vendor's own framing is a system of record that executes compliance operations under human governance, and the agreement puts that in enforceable terms: AI-generated outputs, automated approvals and recommendations are informational only, the customer must independently verify them before relying on them, and the vendor disclaims liability for regulatory penalties arising from reliance on automated outputs without independent review by qualified compliance personnel. Escalation and routing are described, with the AI triaging risk so reviewers clear supervisory queues in priority order. Two things hold it here. The controls are the customer's to set: the agreement makes the firm responsible for configuring surveillance rules, alert thresholds, restricted securities lists and retention periods, and says the vendor does not warrant that any configuration satisfies the firm's regulatory obligations. And automated approvals are referred to without any published description of what may be approved without a person. Verified 20 September 2026.
The machine is placed before the human rather than beside or instead of them, and nothing states what weight its output may carry. The described flow is clear enough: marketers receive instant compliance insights so they can correct errors before submission, and the formal review by the compliance team then runs through the workflow engine as it always did, with parallel reviews, audit trails and document stamping behind it. That placement is a real design decision and the vendor makes a point of it, saying AI improves the existing process rather than breaking it. What is absent is any statement of the constraint. Nothing says the AI's feedback is advisory, nothing describes a threshold or an escalation, nothing addresses whether a reviewer may rely on a clean AI pass, and no published agreement carries an obligation to check output before relying on it. Verified 20 September 2026.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
Named firms, named officers and real figures, never joined to each other. Five customers are quoted on the home page through the person accountable for the programme: Tealee Hinger, Chief Compliance Officer at M1 Finance; Robert Spake, Chief Compliance Officer at Republic Capital; Michael Schmidtke, Chief Compliance Officer at Csenge Advisory Group; Laurie Williams, Deputy Chief Compliance Officer at SmartAsset; and Raymond Gettins, Director at United Advisor Group. Three case studies are published, for Stirlingshire Investments, Lifemark Securities and Arrived, the last headlined as a tenfold reduction in weekly marketing review time. Scale is claimed at more than 500 institutions and $5 trillion in assets under management, with fifteen further customer logos. What is missing is the join and the method: no figure is attached to a named firm on the surfaces read, and no measurement period or baseline is given for any of them. Verified 20 September 2026.
Scale is claimed convincingly, testimonials are plentiful, and almost nothing is attributable. The estate publishes more than 1,800 client firms, partnership with over half of the top 20 asset managers, an 84 NPS score, over 99.9 per cent uptime and average help ticket resolution under an hour. Twelve client stories are published and two carry a name and firm: Stephen D. Tally, Chief Operating Officer at Leo Wealth, and Matthew Dorn, President at Dorn and Co. Wealth Management. The other ten identify the speaker by role and firm type only, such as a chief compliance officer at a broker-dealer, RIA and investment bank. None of the twelve mentions the AI module. The outcome figures, 35 per cent faster approvals, 70 per cent fewer touchpoints and a 54 per cent reduction in AI review time, appear without a period, a sample, a baseline or a method, and none is attached to a named firm. Verified 20 September 2026.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
Substantive written commitments, readable before signing, with the training carve-out as the thing to weigh. The Master Services Agreement carries mutual confidentiality on a need-to-know basis with no less than reasonable precautions; deletion of the other party's proprietary information promptly after termination, subject to record-keeping law; and a compelled-disclosure clause requiring reasonable prior notice so the disclosing party can contest the order. The customer retains ownership of its inputs and is assigned the outputs. A data processing agreement is incorporated by reference and available on request, and the privacy policy is explicit that communications content, trading activity and employee information are processed solely on the customer's instructions with the customer as controller. Against that: the agreement permits the vendor to use inputs and outputs to improve its products, including to train AI models, once aggregated and anonymised. No subprocessor list was located and privilege is not addressed. Verified 20 September 2026.
Confidentiality is asserted through product properties rather than commitments, and the one privacy document on the estate addresses the wrong subject. The product pages promise data ownership, saying a firm's data stays secure, accessible and under its control, and the platform is built to SEC 17a-4 write-once standards with full audit trails and document stamping. But no customer agreement is published anywhere, so there is no confidentiality clause, no need-to-know restriction, no return or destruction obligation and no compelled-disclosure notice a buyer could read before signing. The published privacy notice is a financial-institution notice written as though Red Oak were an adviser holding clients' nonpublic personal information, describing brokerage accounts, balances and transactions and an opt-out from sharing with non-affiliated third parties. It says nothing about the marketing material, adviser communications or model prompts the platform actually holds. Verified 20 September 2026.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
The advice line is drawn in the agreement, in terms, and it names the professional who has to do the checking. The Master Services Agreement states that AI-generated compliance outputs, automated approvals and recommendations are provided for informational purposes only and do not constitute legal, regulatory or professional compliance advice; that the customer must independently verify all AI-generated outputs before relying upon them and assumes sole responsibility for decisions based on them; and that the vendor disclaims liability for regulatory penalties arising from reliance on automated outputs without independent review by qualified compliance personnel. A separate clause states that the service is designed to assist with SEC and FINRA compliance but does not guarantee compliance, and that the customer remains solely responsible for all compliance obligations, regulatory filings and supervisory decisions. Configuration is handled the same way: the vendor gives implementation assistance and does not warrant that any configuration satisfies the firm's regulatory obligations. Who the product is for, what it is not, and whose judgement governs are each stated. Verified 20 September 2026.
A real disclosure exists, it is better than boilerplate, and it does not reach the AI. The website disclosure states plainly that Red Oak Compliance Solutions is not a law firm, attorney or CPA firm and does not provide legal services or tax advice; that information on the site should not be relied on as a substitute for legal, tax or accounting advice from a qualified professional; that a firm should retain a compliance professional or attorney for guidance on its own situation; and that securities regulations for advisers vary by state and federal government so the material is general and not specific to any location. It adds that no relationship arises without a written engagement, and that no outcome with regulators is guaranteed. What it does not do is address the product: nothing states whether AI Review's feedback is advice, whether it must be checked, or who is accountable when a piece clears the machine and fails at examination. The same company also sells an outsourced chief compliance officer service. Verified 20 September 2026.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
A governance posture is stated and no mechanism sits behind it. The published position is that the platform executes compliance operations under human governance, that the AI is policy-aware and configured to each firm's compliance manual, and that it runs on zero-data-retention AI; the agreement adds an acknowledgement that artificial intelligence is inherently not error-free. The vendor also publishes a recorded session for compliance officers on what AI can and cannot do in automating compliance work, which is education for buyers rather than a statement about its own model. Nobody inside the company is named as accountable, nothing is published about what is tested before a change ships, and there is no disclosure of whether output differs across channels, languages, firm types or the populations an adviser communicates with. On a product whose false-positive rate is its headline claim, the absence of any published testing regime behind that number is the gap. Verified 20 September 2026.
Nothing published addresses governance of the model at all. No owner is named, no testing or evaluation is described before a prompt set or model change reaches customers, no principles page exists, and no disclosure addresses whether the module's judgements differ across content types, asset classes, distribution channels or the populations an adviser markets to. The two statements that touch the machine are operational rather than governance: that no time-consuming model training or retraining is required of the customer, and that a firm may bring its own model. Neither says anything about how Red Oak governs what it ships. The gap is wider here than the grade alone conveys, because the module's prompts are configured per firm by an implementation team and compliance staff can generate further prompts themselves, so the behaviour of the system varies by customer with no published method for validating any of it. Verified 20 September 2026.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
Most of the ground is covered, and the incident clause is stronger than most in this index. Published: TLS 1.2 or above in transit and AES-256 at rest, role-based access control, multi-factor authentication and single sign-on, firewalls, intrusion detection and vulnerability scanning, employee training and confidentiality undertakings. Retention is the customer's to set, with the agreement making the firm responsible for configuring retention periods to its regulatory requirements, alongside write-once archiving to the 17a-4 standard. The AI layer is described as zero-data-retention. The agreement commits to notifying the customer within seventy-two hours of confirming a security incident involving data subject to Regulation S-P, providing written detail of the incident's scope, preserving forensic evidence, producing incident reports suitable for regulatory examination and cooperating with the customer's own notification obligations. The gaps: no subprocessor list was located, and the security page itself would not render. Verified 20 September 2026.
Retention of the record is engineered and everything else is generic or absent. What is published and real: SEC 17a-4 write-once retention, full audit trails, document stamping and a data ownership claim, all of which speak to keeping the compliance record intact and producible. What is not published is the rest of the axis. No retention period is stated for prompts or AI output, nothing describes deletion, no subprocessor list appears, no incident response or breach notification practice is published, and no encryption or access-control detail is given. The privacy notice that would normally carry some of this is a financial-institution notice concerned with nonpublic personal information about individuals, offering only that access is restricted to employees who need to know and that physical, electronic and procedural safeguards meeting federal or state standards are maintained. No security page or trust centre exists on the estate. Verified 20 September 2026.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
A real published position, and the exposure the product creates sits outside it. The Master Services Agreement carries a mutual indemnity with stated scope: the vendor defends claims that its underlying software infringes third-party intellectual property, the customer defends claims arising from its own use and its inputs, with six carve-outs and a defined procedure. Liability is capped at the fees paid or payable in the twelve months before the claim, with consequential, indirect, punitive and lost-profit damages excluded both ways and indemnification obligations sitting outside the cap. The vendor warrants that the services will be provided in a professional and workmanlike manner by qualified personnel. What is expressly excluded is the loss a compliance officer would actually fear: the agreement states that the vendor is not liable for regulatory enforcement actions, fines or sanctions imposed on the customer or its personnel, and disclaims liability for penalties arising from reliance on automated outputs without independent review. No insurance is referenced. Verified 20 September 2026.
No position on liability for the product is published, because no customer agreement is published. The navigation and footer were run to the bottom and carry only a privacy policy and a website disclosure; there are no terms of service, no master agreement and no order form anywhere on the estate. The only liability language located is in the website disclosure and it addresses the website rather than the platform: information is provided as is without warranty of any kind, the company assumes no responsibility for errors or omissions in the site's content, and under no circumstances and no legal theory will it be liable for damages of any kind arising from an individual's use of the site. A separate line states that no specific outcome with securities regulators is guaranteed for registration services or consulting work. Nothing addresses indemnity, caps, warranty, service levels or remedy if the AI module clears content that later draws a regulatory finding. Verified 20 September 2026.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
The systems this work actually lives in are named, in the agreement rather than on a logo wall. The agreement lists what a customer connects: email through Gmail and Microsoft Exchange, communication platforms including Slack, WhatsApp, LinkedIn and Telegram, and financial data providers including Plaid for brokerage account feeds. The estate puts the count at more than sixty communications channels captured, supervised and archived in real time, and a July 2026 integration adds Claude Enterprise, pulling employee conversations from that platform into the same books-and-records archive. What is not published is depth: nothing describes what syncs in which direction, what a firm must configure beyond the agreement's statement that permissions, authentication and access controls are the customer's responsibility, and no developer documentation or API reference was located. The agreement is also frank that third-party integrations are a convenience, that continued availability is not guaranteed, and that the vendor is not liable for data gaps arising from them. Verified 20 September 2026.
Named connections, described by what moves through them, into both the regulator and the marketing stack. The FINRA AREF integration automates direct filing with FINRA and the retrieval and storage of comment letters, which the vendor puts at up to thirty minutes saved per filing; that is a connection into the regulatory system this work actually ends at. A Submission API connects advertising review to content creation tools and automates publishing and retirement of approved material in digital asset management systems, with Seismic, Workfront, PowerBI and Tableau named. A User Management API integrates with HR systems to automate user activation and deactivation, group memberships and visibility settings. An Embedded Annotations API lets content creators see and act on reviewer feedback inside their own tools. A dedicated integrations and APIs page sits in the navigation. What is missing is depth: no developer documentation was located, and no authentication, sync direction or field-level detail is published. Verified 20 September 2026.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
Cloud delivery is implied throughout and neither half of the question is answered. Nothing published states where the data sits: no region, no country, no cloud provider, and no residency option for a firm with obligations outside the United States, although the agreement's export control clause bars access from embargoed countries. Nothing published states how customers are separated from one another either: no tenancy model, no single-tenant or private option. The one separation fact that is published sits inside an account rather than between accounts, in the multi-tenant workspaces offered to compliance consultants so they can run several client firms from one login, and in the branch and org-chart structure. The page where residency would normally sit, the vendor's security page, returns navigation only because the site renders client-side, and one search on its own vocabulary recovered nothing; that limit is recorded rather than read as an absence. Verified 20 September 2026.
Neither question is answered anywhere on the estate. No hosting region, country or cloud provider is stated for the platform, and no residency commitment appears on any product page, in the privacy notice or in the website disclosure. Nothing describes the tenancy model, and no single-tenant, private or on-premise option is offered or referred to. The only geographic statement located sits in the EU and UK privacy notice and concerns personal information rather than the platform, saying that data may be transferred to companies in the United States and to third parties providing email and marketing services, with reasonable steps taken to protect it. For a vendor whose customers include firms subject to SEC and FINRA books-and-records obligations and whose combined client base is described as global, the absence of any published residency position is the notable part. Checked the navigation, the footer, all solutions pages read and both privacy notices. Verified 20 September 2026.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
Standards are named and no route to the evidence was found. The footer carries three marks on every page: ISO 27001, the AICPA SOC badge and GDPR, and the security page's own published description names SOC 2 compliance alongside bank-level encryption and zero-retention AI. Named standards put this above the floor, which is reserved for a site claiming certification without naming one. What is absent is everything a buyer would check them against. No audit period, no scope or coverage statement, and no auditor is published anywhere. No trust centre exists and no request route for a report was located, so nothing is shown to be obtainable with or without a sales conversation. The security page itself returns navigation only, the site being client-side rendered, and one search on the vendor's own security vocabulary recovered no body text; that retrieval limit is recorded rather than treated as an absence. What is contractual rather than certified is the incident clause, recorded on the stewardship row. Verified 20 September 2026.
No independent security attestation is named anywhere and no trust centre exists. There is no security page in the navigation or the footer, which carry only a privacy policy and a website disclosure, and no SOC 2, ISO 27001, penetration testing or audit reference appears on any page read. Nothing is offered on request. The strongest security language on the estate is in the financial-institution privacy notice: access restricted to employees who need to know, and physical, electronic and procedural safeguards that comply with applicable federal or state standards. That is a description of practice, not something a third party has examined. The absence is recorded rather than inferred, the navigation and footer having been run to the bottom. This records what is published, not a finding about the vendor's actual security, and a firm serving this client base may well hold an attestation that it does not publish. Verified 20 September 2026.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
A retention promise is made about model providers who are never identified. The estate repeats that the platform is powered by zero-data-retention AI and that supervision runs through privacy-first, zero-retention models, which is a commitment about what a provider may keep. No provider, model or version is named anywhere for the review engine, nothing says where inference happens, and nothing commits to telling customers when any of it changes. One name does appear and it is not the model behind the reviews: a July 2026 integration with Claude's Compliance API pulls employee conversations out of Claude Enterprise into the archive, which makes that platform a source of records to supervise rather than the engine doing the supervising, and it is recorded as an integration. The agreement adds nothing on the point beyond permitting the vendor to train on aggregated and anonymised inputs and outputs. Verified 20 September 2026.
The architecture is described and no model is identified. The module page states that AI Review leverages advanced large language models and sophisticated prompt engineering specific to the firm's policies and procedures, and adds an unusual option: bring your own large language model, so a customer is not locked into one model or another. That option is genuinely useful disclosure, because it tells a buyer that model choice can be moved under its own control and its own agreements with a provider. What is not published is any identification: no default provider, no model family or version, nothing on where inference runs, nothing on what a firm gets if it does not bring its own, and no commitment to notify customers when the underlying model changes. A related line, that no time-consuming model training or retraining is required, describes what the customer need not do rather than what the vendor does. Verified 20 September 2026.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
The shape is visible and the number is not. Six modules are published as separate solutions, testing programme, marketing, people oversight, communications, account surveillance and branches, so a buyer can see what the product is divided into. The agreement names the billing structure: fees are set in an order form, invoices fall due within thirty days, past due balances carry the lesser of 1.5 per cent a month or the legal maximum, order terms renew automatically for successive twelve-month periods unless either side gives thirty days' notice, and fees can be raised on thirty days' notice at renewal. The audit clause names the unit in passing, requiring the customer to keep records of user counts and module usage relevant to its payment obligations. No rate, band, minimum or implementation figure is published anywhere, there is no pricing page in the navigation or footer, and the only route is a demo request that asks for firm size in four bands. Verified 20 September 2026.
No pricing information of any kind is published. There is no pricing page in the navigation or the footer, no tier names, no feature-to-plan split, no unit of charge, no minimum and no implementation figure, and the only route anywhere on the estate is a demo request or a contact form. The commercial statements that do appear are claims rather than prices: unlimited workflows at no extra cost, data ownership without fees, and implementation in as little as four to eight weeks with the customer's own team trained to manage workflows afterwards to cut long-term costs. Because no customer agreement is published either, none of the surrounding mechanics is visible: nothing states the term, renewal, notice period or what happens on termination. A buyer cannot form any estimate from public material. Verified 20 September 2026.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
Four buyer segments, each tied to the rules it answers to, and no statement of where the product stops. Broker dealers get supervision under FINRA Rules 3110, 3120 and 3130 with 17a-4 and write-once retention and evidence for the chief executive's annual certification. RIAs get SEC Rule 206(4)-7 operationalised, with programme testing, annual reviews and Marketing Rule workflows. Private funds get personal trading surveillance against restricted lists and blackout windows with Code of Ethics attestations and conflict tracking. Compliance consultants get multi-tenant workspaces to run several client firms. Firm size is addressed from one to fifty users up to more than five thousand on the demo form, and the named customers span a large retail broker, a wealth platform and small advisory groups. What is absent is the boundary: nothing says which regimes are out of scope, and a firm with banking, insurance or non-US obligations is left to infer. Verified 20 September 2026.
Five buyer types are named and the regulatory regimes behind them show up in the evidence. The estate addresses broker-dealers, registered investment advisers, banks, insurance and other industries, and puts its reach at more than 1,800 firms globally including over half of the top 20 asset managers. The client stories fill in the range: a hedge fund and RIA, a global investment manager, a global retirement solutions and insurance company, a private lender, a broker-dealer in the Midwest, and a compliance professional supervising in the foreign exchange markets whose account names CFTC and NFA supervision requirements. Practice coverage is US securities and financial services compliance, with SEC 17a-4, FINRA filing and state and federal adviser regulation named across the product and disclosure pages. What is absent is the boundary: nothing states which regimes or firm types the platform does not serve, and no non-US regulatory coverage is described. Verified 20 September 2026.
The 12 legal signals, side by side
Recorded rather than graded. These are the questions a practitioner has to answer before a tool touches a client matter, and the answers are taken from public material only.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
Training is named in the agreement, permitted, and gated on a condition that is stated precisely. The Master Services Agreement's primary rule is a purpose limit: inputs and outputs are used solely to provide the services, comply with law, enforce the agreement and prevent abuse. The carve-out that follows is what decides the value: the vendor may use inputs or outputs to improve its products and services, including to train AI models, but only after first aggregating and anonymizing them so that neither the customer nor any individual may be identified.
No opt out from that use was located in the agreement. Usage data is treated the same way, disclosed only in aggregated or anonymized form. A buyer should read that against the marketing, which repeats that the platform runs on zero-data-retention AI; that promise is about what a model provider keeps during a review, not about what the vendor may do with the material afterwards. The two sit together and only one of them is in the contract. Verified 20 September 2026.
No customer agreement is published, so no training position can be established. The navigation and footer were run to the bottom and carry only a privacy policy and a website disclosure; there are no terms of service, no master agreement and no order form anywhere on the estate, and no security or trust page exists that might carry a data commitment instead. The privacy notice that is published is a financial-institution notice about individuals' nonpublic personal information, brokerage accounts and transactions, and it says nothing about customer content in the platform or about model training in either direction.
One line on the AI module page can be mistaken for an answer and is not one: the statement that no time-consuming model training or retraining is required describes work the customer is spared, not a limit on what the vendor may do with a firm's marketing material or prompts. The bring-your-own-model option is the only lever a buyer has here, and it is a workaround rather than a commitment.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
Two retention regimes run side by side and a buyer needs both. At the AI layer the claim is zero: the estate repeats across the home page, the solution pages and the buyer pages that supervision runs on zero-data-retention AI, which is a commitment that what is sent for review is not kept by the model. At the record layer the opposite is the point of the product, because the firm is required to keep things: communications are captured and archived to the SEC's 17a-4 standard with write-once retention, and the agreement makes the customer responsible for configuring retention periods to its own regulatory requirements.
So the window for a prompt is stated as none, and the window for the underlying record is the firm's to set. What is not published is the detail behind the zero: no model provider is named, so the promise cannot be checked against whoever would have to keep it, and no retention period is stated for review outputs held inside the platform.
How long prompts or AI output are kept is not addressed. The platform's retention story is about the compliance record rather than the machine: material moving through advertising review is held to SEC 17a-4 write-once standards with full audit trails and document stamping, which is retention by regulatory design and is recorded on the stewardship row. Nothing published extends that to the AI layer. No period is stated for the prompts a firm's compliance staff configure or generate, for the instant feedback returned to marketers before submission, or for any intermediate content passed to a model.
Nothing describes deletion. Because no customer agreement is published, there is no document in which such a term could sit, and the bring-your-own-model option means retention may in practice depend on an agreement the customer holds with a provider the vendor never names. Checked the AI Review page, the advertising review page, both privacy notices and the website disclosure on 20 September 2026.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
Separation is documented at the level this product needs it, which is between client firms inside one account. Compliance consultants are sold the platform expressly to deliver reviews, testing and evidence packs across several client firms from multi-tenant workspaces, and the branches module carries the same structure inside a single firm, managing branch examinations, personnel org chart, questionnaires and remediations as separate units.
Access is controlled by role, with multi-factor authentication and single sign-on, and the agreement puts the configuration of those permissions on the customer. The audit trail records who reviewed, escalated, approved and remediated what, so a determination is attributable to a person. What is not addressed is a conflicts wall in the legal sense, screening a named reviewer from a particular firm or matter, which matters most in the consultant configuration where one reviewer may serve competing advisers.
Nothing published addresses walls or segregation, between customers or inside one. The nearest material is administrative rather than protective: a User Management API that integrates with HR systems to automate user activation and deactivation, group memberships and visibility settings, and a workflow engine in which firms build their own review paths with parallel reviews and user-defined questions. Visibility settings imply per-user control but no published detail says what they enforce or how.
No statement describes separation between one client firm's content and another's, which matters on a platform holding unpublished marketing material for more than 1,800 competing firms, and nothing addresses separation inside a firm between business lines, affiliated broker-dealer and adviser entities, or distribution partners. No conflicts or screening mechanism appears. Checked the advertising review page, the AI Review page, the solutions overview and the privacy notices on 20 September 2026.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
The commitment is in the agreement and it is aimed at letting the customer fight. The confidentiality section provides that nothing prevents a party from disclosing the other's proprietary information pursuant to a judicial or governmental order, provided it gives reasonable prior notice of the disclosure so the other party can contest that order. It is mutual, it requires notice before rather than after, and the stated purpose is the contest rather than mere courtesy.
Alongside it sits a related and unusual commitment: the vendor agrees to cooperate with the customer's own regulatory examinations by providing documentation and making personnel available, with the customer reimbursing out-of-pocket costs beyond eight hours a year. What is not published is any operational detail, a named contact, a practice of narrowing what is produced, or a timeframe, and no transparency report exists.
Disclosure is addressed and no notice attaches to it. The published privacy notices state that information may be shared with regulatory authorities including tax authorities, courts and bodies as required by law or requested for internal investigations and reporting, and separately in connection with litigation, investigations, regulatory or governmental inquiries or other legal or regulatory purposes involving the company or its clients.
A further clause permits transfer of personal information as part of a sale, merger, consolidation, change of control or reorganisation, which is live given the combination announced in July 2026. None of it commits to telling the customer that a demand has arrived, to waiting before producing anything, to narrowing the response or to assisting with a protective order. No customer agreement is published in which such a commitment could otherwise sit, and no transparency report exists.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
The rules are named and where the rule content comes from is not. Published coverage runs to the SEC Marketing Rule, ADV requirements and performance presentation standards, FINRA Rules 2210, 3110, 3120 and 3130, Regulation Best Interest and suitability, Rule 17a-4 and write-once retention, Regulation S-P, and the Code of Ethics and personal trading rules that govern an adviser's employees. The other half of the corpus is the customer's own, described as policy-as-code and configuration to each firm's compliance manual, with the agreement making the firm responsible for setting its own surveillance rules, thresholds and restricted lists.
Nothing states who writes or maintains the regulatory rule content, how quickly a rule change reaches the platform, or on what basis any source is used. What matters for membership is that no third-party regulatory content provider is named anywhere, so the analysis is the vendor's own.
The regimes are named and no corpus behind the judgments is identified. Coverage is described by jurisdiction and regulator across the estate: SEC rules including 17a-4 write-once retention, direct filing with FINRA, state and federal adviser regulation, and in the client evidence CFTC and NFA supervision requirements. What is never identified is what the AI module actually reasons over. The published account is that prompts are engineered to the firm's own policies and procedures, configured by an implementation team, tuned against the firm's previous submissions and extendable by its compliance staff, which makes the customer's own rulebook the working corpus.
No regulatory rule set, filing manual, enforcement record or interpretive source is named as maintained by the vendor, nothing states who updates the rule content when a regulator moves, and no license or rights basis is stated for anything.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
This product cites no authority a reader could open, so there is nothing for a treatment signal to rest on. Its output is a determination about a piece of marketing, a communication or a trade, together with an audit trail, rather than a proposition of law with a citation behind it. The rules it applies are named in the marketing, but no published material describes how the platform keeps current with them: nothing says who monitors SEC or FINRA rule changes, how long a change takes to reach the review logic, or whether a firm is told when a rule it relies on has moved.
For a product sold on being exam-ready that currency question is the nearest analog to a treatment signal, and it is unanswered. Checked the home page, the solutions overview, the buyer pages, the insights index and the Master Services Agreement on 20 September 2026.
This product cites no authority, so there is nothing for a treatment signal to attach to. AI Review returns compliance feedback on a firm's own marketing copy measured against that firm's own policies; it does not quote a rule, cite a release or reference an enforcement action that a user would need to verify. The currency question that does arise here, whether the policies and prompts a firm configured last year still reflect what the SEC or FINRA requires today, is not addressed either: nothing published describes rule-change monitoring, a prompt refresh cadence or any notice to a firm that the basis of its automated review has moved.
The disclosure management module maintains a central disclosure library with deterministic rules for where a disclosure belongs, which is version control over the firm's own text rather than a check on authority. Checked the compliance solutions pages, the AI Review page and the website disclosure on 20 September 2026.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
Uncertainty is expressed as risk ranking, and what the system does when it cannot tell is not described. The published behavior is triage: the AI routes and prioritizes the highest-risk trades, communications and marketing materials so reviewers clear supervisory queues in order, with intelligent escalation and a claimed 99 percent reduction in false positives. That is a confidence-shaped signal applied to workload rather than to knowledge.
Nothing published describes an abstention, a threshold below which the system declines to decide, or what a reviewer sees when the model has no basis for a judgment as distinct from a low-risk one. The agreement approaches the same ground from the other side, requiring the customer to verify every AI-generated output independently before relying on it and disclaiming liability where automated outputs are relied on without review by qualified compliance personnel.
Nothing published describes what the module does when it cannot judge a piece of content. The described behavior is uniformly confident: marketers receive instant compliance insights so they can correct errors before submission, and the module is presented as going beyond deterministic rules to harness advanced AI. No confidence score accompanies a flag, no threshold is described below which the system declines to opine, and nothing says what a marketer sees when content falls outside the prompts configured for that firm, which is the ordinary case for a new product type or a novel claim and the one where silent confidence costs most.
Nothing distinguishes a clean pass from an unexamined one. Because the prompts are firm-specific and extendable by the firm's own staff, the boundary of what the module can assess varies by customer and is documented nowhere. Checked the AI Review page, the advertising review page and the solutions overview on 20 September 2026.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
No record was located of this product's output being found fabricated or inaccurate in a proceeding, a regulatory action or a published account. Searches on 20 September 2026 across the vendor's estate, press and directory profiles returned nothing of the kind. The exposure here is not an invented citation, because the product asserts no law and cites no authority: the failure that would matter is a communication or an advertisement that cleared automated review and later drew an SEC or FINRA finding, or a trade pattern the surveillance did not escalate. Nothing published describes such a case, and no account of one was found.
No record was located of this product's output being found fabricated or inaccurate in a proceeding, a regulatory action or a published account. Searches on 20 September 2026 across the vendor's estate, press and directory profiles returned nothing of the kind. The failure that would matter here is not an invented citation, since the module asserts no authority: it would be marketing material that cleared automated review and later drew an SEC or FINRA finding, or a required disclosure the system did not flag as missing. Nothing published describes such a case and no account of one was found.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
Professional obligation is referred to as such, and no rule, opinion or bar is named. The Master Services Agreement states that AI-generated compliance outputs, automated approvals and recommendations are informational only and do not constitute legal, regulatory or professional compliance advice, and that reliance without independent review by qualified compliance personnel is the customer's own risk. A second clause puts supervisory decisions and all compliance obligations squarely on the customer.
That is the duty engaged in general terms. What the estate names in abundance is regulation binding the firm rather than guidance binding a practitioner: the SEC Marketing Rule, FINRA 2210, 3110, 3120 and 3130, Regulation Best Interest, 17a-4, Regulation S-P, Rule 206(4)-7. None of that is bar or ethics guidance. No rule of professional conduct, ethics opinion or bar publication appears anywhere, and nothing engages the guidance on lawyers' use of generative AI.
Professional duty is engaged squarely and no guidance is named. The website disclosure states that Red Oak Compliance Solutions is not a law firm, attorney or CPA firm and does not provide legal services or tax advice; that information on the site is not a substitute for legal, tax or accounting advice from a qualified professional; that a firm should retain a compliance professional or an attorney for guidance on its own situation; and that no relationship arises from viewing the site or contacting its consultants without a written engagement.
It also notes that adviser regulation varies by state and federal government and that the material is not specific to any location. That is a clearer statement of the advice line than most records in this lane carry. What is absent is any named authority: no rule of professional conduct, no ethics opinion, no bar or regulator guidance on the use of generative AI, and nothing tying the AI module to a compliance officer's own supervisory obligations.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
No lawyer's fee sits in this product's path. The buyer is the regulated firm itself, or a compliance consultant serving several such firms, and the subscription is an operating cost carried by the firm rather than anything billed on to an advisory client. The vendor's economic case is internal efficiency, published as 19 or more hours gained back weekly per user and an average annual compliance cost reduction of $3,900 per registered representative, with the consultant pitch framed as scaling oversight rather than headcount.
Those are savings claims about the firm's own cost base. Nothing here bears on what a client is told about machine-assisted work or how such work is billed, because no client bill is involved; the disclosure obligations the product does engage run to regulators rather than to clients, and are recorded on the court disclosure row.
No lawyer's fee sits in this product's path. The buyer is the regulated firm itself, licensing the platform for its own compliance and marketing teams, and nothing is billed on to an advisory client. The vendor's own commercial framing is internal efficiency and revenue velocity rather than legal spend: shorter review cycles, 35 percent faster approvals, 70 percent fewer compliance touchpoints, unlimited workflows at no extra cost, and advisers getting quicker access to approved content that drives growth.
The one place a fee relationship does appear is the consulting and outsourced chief compliance officer side of the business, where a firm pays Red Oak for compliance work under a written engagement and fee agreement, but that is the vendor's own service rather than a lawyer billing a client, and nothing addresses disclosing machine assistance within it.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
The diligence pack exists behind a request rather than on the page. The agreement incorporates a data processing agreement by reference and states that it is available upon request, and the same document carries commitments a reviewer would want to see: seventy-two hour notification of a security incident involving Regulation S-P data with written scope, forensic preservation and exam-ready incident reports, and cooperation with the customer's own regulatory examinations including documentation and personnel.
Standards are named in the footer, ISO 27001, the AICPA SOC mark and GDPR. What is not published is the evidence behind any of it: no subprocessor list was located, no audit period, scope or auditor appears anywhere, no trust center exists, and the security page returns navigation only because the site renders client-side, with one search recovering no body text.
A diligence reviewer would find almost nothing to work from. No subprocessor or model provider list is published, no security certification is named, no penetration testing statement appears, no data processing addendum is offered, and no trust center or security page exists in the navigation or the footer. No customer agreement is published, so there is no confidentiality, data handling or audit-cooperation term to point at.
The published privacy notices are financial-institution and consumer privacy notices concerned with individuals' personal information rather than with the platform's handling of client content, and the only security language in them is that access is restricted to employees who need to know and that safeguards meeting federal or state standards are maintained. The one genuinely useful disclosure for a reviewer is architectural rather than documentary: a customer may bring its own model, which moves that part of the supply chain under its own contracts.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
The record is built for an examiner rather than a court, and read through that reader it is substantial but incomplete. Every review, escalation, approval and remediation is timestamped into an immutable audit trail, communications are archived to the 17a-4 write-once standard, and the estate promises exam packs on demand and regulator-grade evidence produced instantly for FINRA examinations, sweeps or inquiries. The agreement goes further than the marketing, committing the vendor to cooperate with the customer's regulatory examinations by providing documentation and making personnel available.
What is missing is the disclosure question itself: nothing distinguishes a determination the AI made from one a reviewer made once both sit in the trail, nothing describes a format or export addressed to disclosing machine involvement, and no court sits in this product's path. This is the second record in this pull read through a regulatory analog; the parked item covers it.
The record is built for an examiner rather than a court, and it is substantial as a record while saying nothing about the machine. The platform is described as 100 percent books and records compliant, with SEC 17a-4 write-once retention, full audit trails and document stamping, and the FINRA integration stores comment letters alongside the filings they answer. A published client account describes producing audit reports directly from the system to demonstrate to regulators that required monitoring was performed, with individual findings organized.
So a firm can show what was reviewed, by whom and when. What is absent is the disclosure question itself: nothing distinguishes a flag raised by the AI module from one raised by a human reviewer once both sit in the trail, nothing describes an export addressed to disclosing machine involvement, and no court sits in this product's path. Third record in this pull read through the regulatory analog.
The questions both sides leave open
Derived from the records above rather than written, so it cannot favor either vendor. Take these into both conversations and ask each side the same question.
- Good Law Verification
Which one fits
Choose Hadrius if
- You want marketing, communications, trading and people oversight in one system. Hadrius covers AI review of marketing against the SEC Marketing Rule, supervision of more than sixty communication channels with 17a-4 archiving, personal trading surveillance and attestations, configured to your compliance manual.
- You want the advice line and incident terms in writing. Hadrius's agreement states that AI output is not legal, regulatory or compliance advice and must be independently verified, and commits to notice within 72 hours of a security incident involving Regulation S-P data.
- You run compliance for several client firms. Hadrius sells compliance consultants workspaces that hold several client firms under one login, to deliver reviews, testing and evidence packs across all of them.
Choose Red Oak Compliance if
- You want a configurable marketing review workflow first. Red Oak lets firms build unlimited review workflows with a rules engine, parallel reviews, annotations, document stamping and full audit trails under SEC 17a-4 write once retention.
- You file advertising with FINRA. Red Oak's AREF integration files directly with FINRA and retrieves and stores comment letters beside the filings, and its APIs connect review to Seismic, Workfront and HR systems.
- You want to choose the AI model yourself. Red Oak's AI Review module gives marketers feedback against prompts engineered to your policies before formal submission, and lets you bring your own large language model.
In summary
Hadrius
Hadrius, sold by Quantbase Investments, Inc. of New York, is an AI compliance platform for firms regulated by the SEC and FINRA, consolidating AI marketing review, supervision of email, chat and social across more than sixty channels with 17a-4 archiving, trading surveillance, people oversight, a testing program and branch examinations, all logged in an audit trail. The AI Legal Index grades it in the top two bands on ten of fifteen capability axes, with A grades on AI centrality and professional responsibility. Its published agreement sets the advice line and a 72 hour incident notice, and it names M1 Finance, SmartAsset and Republic Capital among customers. As of 20 September 2026 the index located no named model provider, hosting region or price.
Red Oak Compliance
Red Oak Compliance, from Red Oak Compliance Solutions of Austin, Texas, is a financial services compliance platform for broker dealers, registered investment advisers, banks and insurers, built around a configurable advertising review workflow engine with SEC 17a-4 retention and direct FINRA filing, plus disclosure, licensing and online supervision tools. Its AI Review module gives marketers feedback before formal submission, with customers able to bring their own model. The AI Legal Index grades it in the top two bands on two of fifteen capability axes. It states more than 1,800 client firms and combined with MirrorWeb in July 2026. As of 20 September 2026 the index located no customer agreement, security attestation, hosting region or price.
Questions buyers ask
Hadrius vs Red Oak Compliance: which is better for an RIA or broker dealer?
On published evidence Hadrius sits in the top two bands on ten of fifteen AI Legal Index capability axes and Red Oak on two of fifteen, identical on three, largely because Hadrius publishes its customer agreement. Red Oak is the more established marketing review workflow, with direct FINRA filing. Firms wanting AI across communications and trading surveillance as well as marketing have more to read from Hadrius.
Does Hadrius train AI on customer data?
Its agreement allows it under a condition. Hadrius's master services agreement limits use of inputs and outputs to providing the services, then permits the vendor to use them to improve its products, including to train AI models, once aggregated and anonymized so no customer or individual can be identified. No opt out was located. Red Oak publishes no agreement, so its position cannot be read. Graded by AI Legal Index against 15 capability axes and 12 legal signals, including privilege handling and citation accuracy, from each vendor's own published materials, verified September 26, 2026. No vendor pays for placement.
Can I use my own AI model with Red Oak?
Yes. Red Oak's AI Review page says customers can bring their own large language model rather than being locked into one, alongside prompts engineered to the firm's own policies and procedures. It names no default model or provider. Hadrius states that it runs on zero data retention models without naming a provider. Graded by AI Legal Index against 15 capability axes and 12 legal signals, including privilege handling and citation accuracy, from each vendor's own published materials, verified September 26, 2026. No vendor pays for placement.
Do Hadrius and Red Oak file with FINRA or keep books and records?
Both keep records to the SEC's Rule 17a-4 write once standard with audit trails. Red Oak's AREF integration files advertising directly with FINRA and stores the comment letters, while Hadrius archives communications from more than sixty channels and promises evidence packs ready for examination, with its agreement committing to cooperate with a customer's regulatory examinations. Graded by AI Legal Index against 15 capability axes and 12 legal signals, including privilege handling and citation accuracy, from each vendor's own published materials, verified September 26, 2026. No vendor pays for placement.
What do Hadrius and Red Oak both leave unpublished?
The model, the hosting region and the price. Neither names the AI model or provider behind its reviews, neither states where customer data is hosted, and neither publishes a rate. Neither publishes an accuracy measure for its AI or describes what it does when it cannot judge a piece of content. Graded by AI Legal Index against 15 capability axes and 12 legal signals, including privilege handling and citation accuracy, from each vendor's own published materials, verified September 26, 2026. No vendor pays for placement.
Three readings to weigh. Hadrius's agreement permits it to train AI models on customer inputs and outputs once aggregated and anonymized, and excludes liability for regulatory fines; those are published terms. Hadrius's security page would not render and Red Oak publishes no customer agreement, so some low grades record what could be reached rather than what exists. Red Oak combined with MirrorWeb in July 2026, under the Red Oak name. Hadrius and Red Oak Compliance were both verified on 20 September 2026. Neither vendor reviewed this page.
Neither vendor paid for inclusion, placement or a grade, and neither reviewed this page before it published. Everything above comes from public material on the dates shown. How the index grades.