iCONECT vs Nuix Neo: how they compare in 2026

Machine learning runs core review and breach response work on a document review platform that would still function without it. iCONECT's eDiscovery product is built around processing, an Elasticsearch index, deduplication, redaction and production. The models sit in several core capabilities: continuous active learning through Sentio technology; Oversight, which the vendor says is included in standard eDiscovery licensing and finds false negatives and false positives in reviewer tagging; AI email threading; and AI assisted identification and extraction of personal information in the cyber data mining product, where users can send documents to a model of their choice. Generative AI features listed on the eDiscovery and law firm pages add document summaries, classification by content or legal relevance, entity redaction, image description, transcription and translation. The vendor describes itself as a data intelligence AI platform, and in August 2026 announced an integration with eDiscovery AI that is still under development. Without the models, a full review and production system remains.

Nuix Neo's AI classifies and contextualizes data, applies language models described as trained for the customer's use case to cut review volume, and drives automated redaction. Without it, the Nuix Engine still processes more than a thousand file types into searchable form. Early case assessment, review in Nuix Neo Discover and investigation workflows also remain, which is the product Nuix has sold for years. The Solutions Terms of July 2026 say Nuix will identify in its documentation the features that materially rely on AI systems, and the license is sold by data volume processed rather than by AI use.

The Oversight post of 17 May 2024 says the tool reaches a level of precision once thought unattainable and helps teams rectify discrepancies, with no recall, precision, elusion or validation figures and no test set. The cyber data mining page says each extracted data element is linked through audit trails to its original source file, creating a defensible chain of custody, which lets a reviewer trace a notification entry back to the document. How the generative features are grounded is not described: whether a document summary cites passages, how classification by legal relevance is validated, or how automatic privilege redaction is confirmed. No error rate or statement on invented content is published.

Nuix says its language models improve accuracy and reduce the data to review. Its telecommunications page claims that up to 95 percent of irrelevant data is eliminated early, with no test set, method or recall figure. The Solutions Terms of July 2026 call AI output probabilistic and warn that it may contain errors, omissions or bias. They disclaim any warranty on its accuracy, completeness or reliability and make the customer responsible for verifying it. The product classifies and culls documents rather than citing law, and no measured error rate for its classification is published.

The Oversight post of 17 May 2024 says a subject matter expert, attorney or experienced reviewer seeds a model with as few as fifty documents, and that Oversight reports tagging errors for the team to correct. The cyber data mining page lets a team define its criteria so that verification, whether manual or automatic, fits its needs, and says GenAI reviews are used where appropriate. The eDiscovery page says redaction, including of an entire document because of privilege, can happen automatically, and that document classification sorts documents by legal relevance automatically, with no review step described for either. Nothing states what the generative features may not be used for, when a person must check their output, or what happens when a classification or redaction is wrong. For the generative features, review is a setting the customer chooses.

Nuix commits in writing that the models work alongside reviewing people, with real review surfaces, but the full control structure is not published. The review product is described as responsive review with workflows enabled by AI that support faster and more precise human review. A named customer describes running its own AI within its own environment under its own compliance controls. Automated workflow templates run culling and redaction that a reviewer then works from. Nothing published sets the threshold at which a document is excluded from review, says what runs without a person, or states a route back after a misclassification beyond ordinary review.

Releases on iCONECT's site record that ProFile Discovery selected the platform for its law firm and corporate legal department environments (26 January 2021) and that Everest Discovery launched a cyber breach response service built on it (27 January 2025), with a quote from Everest's owner and president; other releases name Pictera Solutions, Right Discovery and Iota Analytics as customers. The Why iCONECT page names NASA and the FDIC among users. The law firm page presents seven large matters, among them the Vioxx, Yasmin and Pradaxa litigation, Oracle v. SAP and the Columbia investigation, without naming the firm, iCONECT's role or a result. No case study with a measured result is published on the site.

Donn Hoffman, Chief Privacy Officer and Deputy District Attorney at the Los Angeles County District Attorney's office, is quoted on the Discover page for installation on premises. He speaks about running the office's own AI within its own environment, with no measured outcome. IAV GmbH is named on the same page as an ediscovery services customer. The data reduction figure of up to 95 percent on the telecommunications page carries no customer name or date. No named customer is joined to a figure.

The only legal documents on the site are a terms of use (31 July 2024) and a privacy policy (June 2024), both written for the website. No customer agreement, data processing addendum or statement on training with customer documents is published. The eDiscovery and law firm pages cite SOC 2 certification, rigorous data protection and handling protocols and controlled access, and the SOC 2 Type 2 report on the SaaS platform covers the confidentiality criterion. The cyber data mining page lets users send documents to a model of their choice, including models from OpenAI, Microsoft and Google, and nothing published states what those providers may keep or use. The platform can be deployed on premises, which keeps documents in a firm's own environment, but nothing addresses privilege handling, segregation between matters, or what happens to documents sent to a model.

Customer data stays the customer's under Nuix's Solutions Terms of July 2026, which license Nuix to process it only to provide the solutions. They state that Nuix will not use customer data to train any AI systems, treat customer data as confidential information, and require prompt written notice of any compelled disclosure where the law permits. Installed on premises, the software keeps matter data in the customer's own environment, and the bring your own AI option keeps third party models there too. For SaaS, each customer's databases and file shares are logically separated and encrypted with AES 256. Privilege and work product are not addressed as such, and no separation by matter inside the review product is described.

The terms of use say information on iCONECT's pages is distributed on the understanding that the authors are not rendering legal, accounting or other professional advice. That sentence governs website content, not the review platform. The product classifies documents by legal relevance, redacts for privilege and summarizes documents for law firms, corporations, public sector organizations and service providers, and nothing published states that its output is not legal judgment, that a supervising lawyer must review it, or how it fits a lawyer's competence and supervision duties. No ethics opinion or court decision on technology assisted review is named.

AI output is probabilistic and may contain errors, omissions or bias, according to Nuix's Solutions Terms of July 2026. The terms say AI systems are no substitute for legal or other professional advice or for review by a trained professional, and the customer must verify output before relying on it. Buyers span law firms, corporate legal teams, law enforcement, financial regulators and telecommunications companies. Nothing describes how the product supports a supervising lawyer's duties, and no jurisdiction limit is named beyond export control and the territory clause.

The platform page and a post of 10 May 2024 describe iCONECT's path as a responsible adoption of generative AI that enhances the platform without compromising data integrity or security. No person is named as accountable for model behavior, and no testing before release, evaluation results or principles are published. The SOC 2 Type 2 report covers information security controls and not the conduct of the models. Nothing addresses uneven output across languages and document types in classification by legal relevance or personal information identification. Users choosing between models from OpenAI, Microsoft and Google for personal information identification are not told how iCONECT evaluated them.

Nuix markets its review product as powered by ethical AI and describes language models trained to the customer's use case. Its Solutions Terms of July 2026 commit Nuix to governance processes designed to identify, assess and mitigate material bias in its proprietary AI output. Customers get a written route to report systemic bias, and Nuix commits to comply with AI laws that apply to it as a provider. No governance framework, ISO 42001 or equivalent, named owner, testing before release or finding about uneven classification across document types or languages is published.

The eDiscovery and law firm pages cite SOC 2 certification, regular security training and penetration testing, workstation and server security, data protection and handling protocols and controlled access, and the platform page cites encryption, access controls, regular security audits and adherence to GDPR and HIPAA standards. The SOC 2 Type 2 audit of the SaaS platform, completed on 22 September 2025 by A-LIGN, covers security, availability, processing integrity, confidentiality and privacy. The cyber data mining page says ingestion, extraction, review and modification actions are logged with audit trails. The privacy policy (June 2024) covers the website and not data processed in the platform. No retention period, deletion commitment, breach notice timing, subprocessor list or statement on what model providers keep when documents are sent to them is published.

Nuix's data processing addendum of June 2026 commits to notice of a personal data breach without undue delay, with information and help in mitigating it. Nuix deletes or returns personal data at the end of the agreement, or at any time on written request, unless the law requires it to keep some. A SaaS customer has 10 days after its subscription ends to download its data under the Solutions Terms of July 2026. Nuix then deletes it, and data is unrecoverable from backups 90 days after the end. The Security Requirements of June 2026 set encryption, logical separation of each customer's data and an incident response program. On premises, the customer holds and backs up its own data. No subprocessor list is published.

No customer agreement, license terms or SaaS terms are published. The terms of use (31 July 2024, California law) disclaim liability for direct, indirect, special, incidental or consequential damages arising from the website and its content; they do not govern the software. No indemnity, warranty, cap or allocation of risk is published for missed documents, wrong classifications, failed redactions or errors in personal data extraction, on a product used to decide what is produced to an opposing party and who is notified after a breach.

Nuix defends the customer against third party claims that its use of a solution infringes intellectual property, and pays losses awarded or settled, under its Solutions Terms of July 2026. Exclusions cover unsupported versions, combinations and unauthorized use. Nuix warrants that software is free from defects for 90 days from the license key and that a SaaS offering is free from defects through the subscription, with repair as the remedy. Each party's liability is capped at the fees for the agreement year. A super cap of twice that applies to breaches of the security requirements or the data processing addendum that compromise customer data. Fraud, wilful default, death or injury from negligence and indemnified claims sit outside the caps. Nuix maintains professional liability and general liability insurance. AI output carries no warranty of accuracy, completeness or reliability.

iCONECT's release of 10 June 2021 says its Ligl integration, available then, lets organizations identify, hold, preserve and collect enterprise documents in Ligl, process and cull them, and push relevant documents to iCONECT for review. The cyber data mining page lets users send selected documents to a model of their choice, including models from OpenAI, Microsoft and Google. The partners page shows Microsoft, Nuix, LexisNexis, Sentio, Opus 2 and Heureka Software as technology partners, as logos without descriptions, alongside more than 25 hosting partners. An integration with eDiscovery AI was announced on 24 August 2026 as under development, with availability to follow. The platform page says iCONECT integrates with the most common applications in its three markets, without naming them. Nothing describes connections to a firm's document management, matter management or litigation support systems, and no integration documentation is public.

The Engine ingests more than a thousand file types and connects to data sources, which is the core of the product. Nuix's Solutions Terms cover customer integrations and the use of Nuix's APIs, and the Neo Legal page describes orchestrating business applications across the enterprise. No document, matter or review system connection is described with what moves, in which direction or what a customer must configure.

The eDiscovery page offers on premises, hybrid, cloud and SaaS deployment. The post of 19 July 2024 on system architecture describes in house deployment, cloud deployment on Microsoft Azure, Google Cloud, AWS or other providers, and hosting through iCONECT's network of legal service providers. The release of 23 August 2023 launching iCONECT SaaS says it runs on Microsoft Azure. A firm can therefore keep the platform and its documents on its own infrastructure. Not stated are where iCONECT's SaaS stores or processes data, which regions are available, and whether SaaS customers are separated at the tenant level. Nor is it stated where documents go when they are sent to a model from OpenAI, Microsoft or Google for personal information identification, or whether the generative features work in an on premises deployment.

On the customer's premises or as a SaaS offering, Nuix Neo Discover serves organizations with data sovereignty and chain of custody requirements. On premises, the customer installs one production copy in its own environment and keeps complete control over its data, so residency is wherever the customer puts it. For SaaS, Nuix's Security Requirements commit to logically separated databases and file shares dedicated to each customer, with encryption at rest and in transit. No hosting provider, region or processing location for the SaaS offering is stated.

iCONECT's release of 29 September 2025 says A-LIGN completed a SOC 2 Type 2 audit of its SaaS platform on 22 September 2025 covering security, availability, processing integrity, confidentiality and privacy, and the home page carries an A-LIGN badge. No audit period is stated, no trust center is published, and the report is offered neither for download nor on request. The eDiscovery and law firm pages add regular penetration testing and security training, and the platform page claims adherence to GDPR and HIPAA standards without any certification behind them.

The Nuix Discover page states that the product holds ISO 27001 and SOC 2 certifications. Nuix's Security Requirements of June 2026 bind it, for SaaS offerings, to obtain an annual third party audit report on ISO/IEC 27001 compliance covering the cloud infrastructure, client and web applications, APIs and software development. They also require AES 256 encryption at rest and in transit and logical separation of each customer's databases and file shares. No auditor, coverage period or route to a report is published, and Nuix runs no public trust center.

The cyber data mining page lets users send selected documents for personal information identification to a model of their choice, including models from OpenAI, Microsoft and Google. The platform page says iCONECT integrated Sentio technology, which carries its continuous active learning, and acquired AI source code from Ayfie in 2021. Nothing published names the model behind document summaries, classification, image description, transcription or translation, states whether iCONECT or the customer holds the model provider relationship, says where those models run, or commits to notice when a model changes.

The supply chain is partly disclosed. The vendor describes proprietary AI in the Engine and custom language models trained for the customer's use case. A bring your own AI option lets the customer run its chosen models inside its own environment, which places the third party model, where it runs and who controls it with the customer. A named customer describes using the latest AI advances within its own environment on that basis. Nuix does not publish the name of any model it supplies, any provider behind its own models, or a commitment to notify customers of changes.

The law firm page offers flexible pricing with monthly or annual terms, the Why iCONECT page describes predictable pricing through monthly and yearly plans, and the release of 23 August 2023 launching iCONECT SaaS describes Price Protect, which applies discounts automatically as data volume grows without renegotiating the contract. That points to data volume as a driver and term length as a choice, without stating the unit, the rate or what the generative features add. No price, rate per gigabyte, user fee or tier is published, and every route to a number runs through a demo request.

A unit and structure are published without a figure. The EULA effective 30 September 2025 remains published for agreements made under it. It sells a consumption license at one terabyte of uncompressed data processed per year, aggregated across instances and expiring unused at the end of each term. Usage is reported quarterly and reconciled at the overage rates in the order form, renewals run for twelve months with ninety days' notice, and premium support costs extra. The Solutions Terms of July 2026 leave the usage entitlement to the order. No figure, plan name or price page is published.

The site addresses law firms, corporations, public sector organizations and service providers, each with its own page, across three products: eDiscovery, cyber data mining for breach response, and data governance. The law firm page covers litigation, investigations and responsive actions, the cyber data mining page covers breach notification work for incident response professionals, and the release of 24 August 2026 names law firms, corporations, legal service providers and public sector organizations as customers. Named users include NASA and the FDIC. What is not stated is which languages the generative features and personal information identification support, which privacy regimes the breach tools are built around beyond references to GDPR and HIPAA, and which deployment options carry the generative features.

The Neo Legal page lists law firms managing ediscovery at large scale, corporate legal teams handling regulatory matters and disputes, financial services firms, compliance officers, investigation teams and security leaders. Separate solution lines cover investigations and data privacy, with industry pages for telecommunications, integrity agencies and financial regulators. The Engine handles more than a thousand file types. The territory clause and the choice of installation on premises or SaaS set the boundaries, and no matter type or practice area is named as unsupported.