Juro vs Oneflow: how they compare in 2026

J
Juro profile
O
Oneflow profile
Last verifiedOctober 16, 2026

Juro and Oneflow both combine contract collaboration with AI assistance, but their commercial units and drafting routes differ. Juro describes a subscription with unlimited users and pricing shaped by contract volume and integrations, and now supports Word AI Review as well as its contract platform. Oneflow publishes a five user Business floor and emphasizes live web agreements populated from CRM data. Juro's Operator supplies citations for contract answers, while Oneflow links playbook findings to highlighted passages and missing clause views. On that difference between conversational contract assistance and configured portfolio review, AI Legal Index identifies a useful demonstration focus. Juro permits private customer learning while prohibiting cross customer use; Oneflow expressly bans customer data model training. Both have limits on AI remedies, and Oneflow's generative AI section additionally excludes confidentiality undertakings.

At a glance

Category
JuroContract Review & Drafting
OneflowContract Review & Drafting
Founded
Juro2016
Oneflow2012
Headquarters
JuroLondon, United Kingdom
OneflowStockholm, Sweden
Last verified
JuroAug 31, 2026
OneflowOct 16, 2026

All 15 axes, side by side

The same grid applied to every vendor in the index, graded from public sources. Hover a grade to see what the letter means on that axis.

AI Centrality

How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.

Juro
BB on AI CentralityThe models are the engine of a core capability, layered on a product that would still function without them as a document or workflow system.

Juro manages the complete contract lifecycle, from template creation and approval routing through negotiation, electronic signature, storage and tracking. AI Review redlines third party contracts, AI Extract captures data from signed agreements, and the AI Assistant supports drafting and summaries. Operator adds conversational access to the repository and can answer questions with source citations. The underlying contract platform also has a distinct function without those AI features. Legal teams control templates and approval processes while colleagues generate agreements within those controls. Native electronic signature and lifecycle tracking complete transactions independently of an AI response. The company began in 2016 and added AI to that established contracting workflow.

Oneflow
BB on AI CentralityThe models are the engine of a core capability, layered on a product that would still function without them as a document or workflow system.

AI supports several substantial contract tasks within Oneflow's wider platform. Write with AI drafts, edits and translates text inside an agreement; AI Extract imports participants, dates and duration into editable metadata. AI Review compares terms with a workspace playbook, and AI Insights aggregates the resulting risks across the portfolio. The premium package adds custom rules, dashboard widgets and a report for negotiation follow up. Electronic signatures, editable HTML agreements, permissions, approvals and renewal reminders continue to work without these models. Customers can disable AI, and several review capabilities remain in beta. AI therefore changes how users analyze contracts without replacing the underlying contract system.

Citation Accuracy and Hallucination Disclosure

Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.

Juro
CC on Citation Accuracy and Hallucination DisclosureAccuracy is asserted without measurement, or grounding is claimed while output cites sources the reader cannot open and verify.

Juro's AI terms warn that generated output may misstate people, facts or laws, including legal authorities. Operator connects repository answers to source citations, while AI playbooks constrain tasks with contract context and customer rules. Prompt shortcuts help users structure instructions consistently. These features provide context and a route back to source material, but no measured hallucination rate, legal accuracy benchmark or test set accompanies them. The retrieval mechanism behind Operator's citations is unspecified. Juro treats generative AI as fallible and places responsibility for identifying and correcting errors with the customer before reliance. A source citation therefore provides a review aid, without a separate guarantee that the answer is correct.

Oneflow
BB on Citation Accuracy and Hallucination DisclosureGrounding is real and documented, with linked primary sources and a described retrieval method, short of published accuracy figures an outsider can test.

Review findings connect to highlighted passages in the agreement, with controls for moving between them. Each finding carries the relevant playbook concept, configured feedback and example clause text. A separate view identifies required clauses that the review did not find, while portfolio charts open the corresponding contract list. This lets the reviewer compare a proposed concern with the actual wording and the organization's rule. Oneflow warns that generated text can misstate facts, numbers and law and recommends human correction. No reproducible accuracy study, error rate or jurisdiction specific evaluation accompanies these features. The contract highlighting supports source verification, not validation of legal authority.

Autonomy and Oversight Model

What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.

Juro
BB on Autonomy and Oversight ModelA written commitment that the models work alongside a supervising lawyer, with real review surfaces, short of the full control structure: commonly the threshold at which the system stops or what happens after it is wrong.

Human review is required before customers use or rely on AI output. Juro also prohibits presenting generated output as human authored. Inside the product, legal teams establish approval routes and set playbook context and constraints at the template or individual contract level. AI Review explains which playbook rule supports a proposed edit, and reviewers can accept, edit or skip suggestions. The responsible AI guidance limits recommended use to tasks that the professional could perform and verify independently. These controls put the reviewer between a proposed redline and its acceptance. The circumstances that stop unattended agent activity and the escalation process after an erroneous result remain unspecified.

Oneflow
BB on Autonomy and Oversight ModelA written commitment that the models work alongside a supervising lawyer, with real review surfaces, short of the full control structure: commonly the threshold at which the system stops or what happens after it is wrong.

Administrators enable AI Review for a workspace and configure its playbook, including which clauses matter, which findings count as risks or issues, and what feedback appears. Role permissions separately control access to individual reviews and the Insights dashboard. Sent contracts receive continuing analysis; draft contracts require a manual review action. A person can inspect highlighted text, edit the playbook and use example wording when revising an agreement. The AI appendix advises human review before relying on output. No confidence cutoff, mandatory lawyer approval after an AI finding, or correction route for an already approved mistake is specified. Risk colors classify findings rather than stop execution.

Operational and Outcome Evidence

Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.

Juro
BB on Operational and Outcome EvidenceReal deployment evidence with substance, short of full attribution or measurement: a named customer without figures, or figures without the named customer.

Juro associates customer outcomes with named legal and business leaders. Talentful reports an 86 percent reduction in time to sign, Funnel an 88 percent reduction in manual contract reviews, and Luno a 91 percent time saving per contract. Paddle attributes three and a half hours saved per contract to the platform. Goldin's stated workload is 20,000 contracts annually, while Deliveroo describes eight years of use. These examples cover contract operations across multiple companies and roles. They do not establish the contribution of an individual AI feature, and the figures lack a measurement method or deployment period. Older lifecycle results cannot establish the performance of the current AI review and Operator features.

Oneflow
BB on Operational and Outcome EvidenceReal deployment evidence with substance, short of full attribution or measurement: a named customer without figures, or figures without the named customer.

Puzzel's Sales Operations Manager, Anette Johnsen, describes generating offers and contracts from Salesforce opportunities with items from related CPQ quotes. She identifies a concrete benefit of the HTML format: participants revise one agreement instead of uploading successive files before signature. Other named users include Systembolaget's Head of Indirect Sourcing, Tor Myhrman, and Hedin Bil's HR Business Partner, Elin Skoglund, who describe handling agreements and maintaining oversight. These accounts establish operational use across sales, procurement and HR. They do not isolate AI review performance or supply a measured error reduction, evaluation period and sample for Oneflow's current AI packages.

Privilege and Confidentiality Posture

How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.

Juro
BB on Privilege and Confidentiality PostureSubstantive published commitments on confidentiality and training use, short of the full picture: commonly silence on segregation between users or matters, or on what the underlying model provider may retain.

Customer data cannot train an AI model serving another customer. Juro's AI terms permit a model used exclusively for the same customer, with deletion of that model within 60 days after termination. Generated output belongs to the customer and is treated as customer data. The responsible AI guidance identifies OpenAI's GPT family through Microsoft Azure and describes confidentiality obligations covering Juro and its technology providers. A data processing agreement and named subprocessors support that contractual framework. Repository separation and permission enforcement across legal, sales, HR and procurement are not explained in that material. Professional confidentiality is recognized, but attorney client privilege and work product receive no separate treatment.

Oneflow
BB on Privilege and Confidentiality PostureSubstantive published commitments on confidentiality and training use, short of the full picture: commonly silence on segregation between users or matters, or on what the underlying model provider may retain.

The AI appendix expressly prohibits Oneflow from training any AI model on customer data and takes precedence over conflicting general terms for AI features. Ordinary service confidentiality continues while information remains confidential, with restrictions on compelled disclosure. There is a consequential exception: the generative AI section excludes Oneflow's contractual confidentiality obligations along with liability, indemnities and service levels. Review, Insights and Extract have a separate processing section tied to the DPA. Workspace permissions and optional provider controls support access management, but attorney client privilege and work product receive no specific undertaking. The contract therefore requires attention to the exact AI functionality being enabled.

UPL and Professional Responsibility Posture

Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.

Juro
CC on UPL and Professional Responsibility PostureA boilerplate disclaimer sits in the terms while the marketing describes the product in advice terms, or the intended audience is left ambiguous.

Juro requires human review of generated output and prohibits passing it off as human authored. Its responsible AI guidance recognizes lawyers' professional confidentiality duties and extends a related concern to HR teams handling employee information. The contracting workflow allows sales, procurement, HR and finance teams to act within legal team templates and approvals. These are operational controls around contract production, rather than a jurisdiction specific professional responsibility framework. The terms and guidance do not establish a no legal advice boundary, identify a governing bar opinion, or map product behavior to ABA Formal Opinion 512. Restrictions on which jurisdictions or categories of professional work the AI can support are also unspecified.

Oneflow
BB on UPL and Professional Responsibility PostureA real position is published on advice versus tooling, short of full treatment: commonly a disclaimer without the supervision and competence dimension, or silence on jurisdiction limits.

Oneflow's AI appendix says output is not legal advice, legal conclusions, recommendations about legal rights or an application of law to a customer's circumstances. It advises human review because generated content can misstate law as well as facts. A separate UK article maps solicitor responsibilities to SRA standards, confidentiality, client communication and supervision, and describes practical review and pilot controls. North American terms also prohibit treating the platform as a substitute for an attorney. The product nevertheless serves sales, HR and other users without legal qualifications. No comprehensive jurisdiction by jurisdiction set of product restrictions or lawyer competence program is supplied.

AI Governance and Bias Disclosure

Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.

Juro
BB on AI Governance and Bias DisclosureA published governance framework with real substance, short of testing results or a named owner.

Juro's responsible AI framework focuses on privacy, confidentiality and accuracy in contracting. Customers can obtain a data protection impact assessment template populated for AI Assistant, with separate data protection guides for AI Assistant and AI Extract. AI playbooks let legal teams specify context and constraints, while an EU AI Act guide addresses the regulatory setting. The framework acknowledges bias and intellectual property issues but treats them as less pertinent than its three principal concerns. It does not identify a person accountable for model behavior, a release testing regime or evaluation results. Those omissions leave the operational ownership of model risk and the testing of biased outputs unclear.

Oneflow
CC on AI Governance and Bias DisclosureResponsible AI principles are published without a mechanism, a testing regime, or anything a buyer could audit.

Oneflow promotes human accountability and warns against automation bias in its guidance for UK legal teams. It recommends evaluating missed issues, overrides and review quality rather than relying only on speed, and says its AI performs best in English and Swedish. These are useful limits and principles for customers designing a pilot. The public material does not identify an accountable AI governance owner, publish a model release evaluation, or report bias and performance differences across languages, contract types or populations. General ISO security controls and a list of security policies concern operational protection; they do not describe a separate AI testing and governance program.

AI Safety and Data Stewardship

Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.

Juro
BB on AI Safety and Data StewardshipSubstantive published policy covering most of the ground, short of the full set: commonly no named subprocessor list or no stated incident practice.

Juro names infrastructure providers including Algolia, AWS and MongoDB, along with analytics, communications and payments providers. Salesforce, Slack and Google also appear as customer initiated integrations. A data processing agreement governs personal data, and customers have access, portability and erasure rights. Separate security and resilience guidance accompanies a status page and a 99.9 percent uptime commitment. The AI terms require deletion of customer specific models within 60 days of termination; that period is not a retention schedule for contract text, prompts or generated output. The broader content retention window and AI specific incident notification process remain unspecified in the material underlying this assessment.

Oneflow
BB on AI Safety and Data StewardshipSubstantive published policy covering most of the ground, short of the full set: commonly no named subprocessor list or no stated incident practice.

Contract data is encrypted with AES 256 at rest and TLS 1.2 in transit. Customers configure permissions and retention policies; administrators can disable optional providers or AI features. Global DPA terms require breach notification without undue delay, while the North American DPA specifies 48 hours. Daily database snapshots last seven days, and system and authentication logs last 90 days. The DPA permits limited residual backups after deletion without fixing that period. Generative AI history can follow provider terms, while the product page promises removal of temporary review and import data. That leaves no single, specific retention schedule for every prompt and output.

AI Liability and Recourse

What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.

Juro
BB on AI Liability and RecourseA real published position on liability, short of the full picture: commonly a stated indemnity without scope or caps.

Juro separates its AI terms from the Master Services Agreements for customers in the United States and elsewhere. Under clause 3.2 of the AI terms, any MSA indemnity for infringement of intellectual property or other third party rights excludes generated AI output. Clause 3.1 assigns the customer the duty to identify and correct output errors before relying on a result. The March 2025 AI terms retain a link to their February predecessor, making the version boundary identifiable. This arrangement defines the treatment of AI output directly, but leaves customers without the MSA's infringement remedy for that output. Human review is the customer's contractual responsibility.

Oneflow
CC on AI Liability and RecourseLiability is addressed only through a standard limitation clause that disclaims the exposure the product creates.

Ordinary global service terms include an intellectual property defense obligation, a material performance warranty and a general cap based on 12 months of fees. Those protections do not carry through unchanged to AI. The appendix supplies AI output as is, disclaims warranties and excludes all liability and indemnification undertakings for generative AI functionality, together with confidentiality obligations and agreed service levels. It also permits specified AI suspensions or termination without reimbursing fees. North American terms contain the same generative AI exclusion. A wrong clause, inaccurate summary or reliance on generated advice has no specific affirmative AI remedy in these published terms.

Practice Systems Integration Depth

How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.

Juro
BB on Practice Systems Integration DepthReal integrations exist and are documented, short of depth: named connections without a description of what they actually move.

Juro connects contract creation and management with business systems and Microsoft Word. Word synchronizes edits, comments, redlines and versions with the contract workspace. Slack, email, Google Drive and Word are available across plans. Growth adds HubSpot, Claude, Copilot, DocuSign, Greenhouse, Zapier and Ashby; Enterprise includes Salesforce, REST API access and webhooks. Claude uses MCP to work with the repository, while the ChatGPT connection remains a beta. Pricing depends partly on integration complexity, and the pricing FAQ identifies Salesforce, HubSpot and Workday as integrations carrying additional cost. No iManage or NetDocuments connection is identified. The integration set primarily follows in house contracting and business system workflows.

Oneflow
AA on Practice Systems Integration DepthDocumented, verifiable integrations into the systems legal work already lives in, with the depth described: what syncs, in which direction, and what a firm must configure.

The Salesforce integration creates interactive contracts from opportunities and transfers contact, company and opportunity data into them. Its configurable sync sends data from Salesforce objects into Oneflow and returns contract values to Salesforce. Product tables can reflect price books or CPQ quotes, while workflows map contract stages back to pipeline stages. Engagement events and status changes appear in the Salesforce timeline, and returned contract data supports dashboards. Oneflow identifies separate setup guidance for older and newer integration versions and compatibility with Professional edition upward. HubSpot, Dynamics 365 and other CRM connections complement this workflow; Salesforce and Dynamics can require premium integration charges.

Deployment Model and Data Residency

Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.

Juro
CC on Deployment Model and Data ResidencyCloud delivery is implied and neither the tenancy model nor the region is stated.

AWS supplies part of Juro's infrastructure, and the responsible AI guidance places GPT processing on Microsoft Azure servers. Customers use the hosted contract workspace across more than 85 countries. An EU Data Act addendum addresses a separate contractual requirement around the service. That international reach does not itself establish where an individual customer's contract data resides. The deployment material underlying this assessment does not specify a choice of regions, a residency commitment, tenant architecture or a private installation. The distinction between platform infrastructure and the model processing route is identifiable, but the customer controlled boundary for hosting location remains unclear.

Oneflow
BB on Deployment Model and Data ResidencyDeployment model is stated clearly with partial residency detail, or residency is offered without the processing location being addressed, or the tenancy model is stated on its own with no residency detail published.

Production infrastructure uses AWS availability zones in Ireland, with document replication and backups in Sweden. Oneflow's AI FAQ broadly describes data as remaining in the EU, and Insights Premium is described as running within Oneflow's own EU infrastructure. The published subprocessor table gives a more varied picture: optional Legly review operates in Germany, optional OpenAI extraction in the United States, and Postmark email processing also in the United States. Administrators can disable optional services. The public descriptions do not fully reconcile these routes or map every AI function to a processing region. No on premises deployment is offered in the published package descriptions.

Security Certifications and Trust Center

Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.

Juro
BB on Security Certifications and Trust CenterCertification is real and stated, short of accessible evidence: a named standard without scope, date, or a way to obtain the report.

Juro's trust center covers privacy regulations, application security, network infrastructure, resilience, electronic signatures and responsible AI. Its security claims include SOC 2 Type 2, supported by a corresponding trust center topic and a certification badge. The platform also has a status page and a stated 99.9 percent uptime. Access to the explanatory articles does not require a form, email address or confidentiality agreement. The trust center index does not identify the auditor, attestation period, report date or tested scope. A route to the underlying report and details of a penetration test are also unspecified there. The security claim is identifiable, while its independent verification details remain incomplete.

Oneflow
AA on Security Certifications and Trust CenterCurrent independent attestation with named scope, reachable without a sales call: a trust center carrying reports, dates and the standards actually covered.

A public certificate issued by Qvalify covers Oneflow AB's digital solution for contract automation under ISO 9001:2015, ISO 14001:2015 and ISO 27001:2022. It was issued on June 28, 2024 and remains valid through June 30, 2027, identifying the Stockholm organization and its registration number. A June 2026 statement of applicability lists the security controls and their implementation status. The security center separately identifies SOC 1 Type 1 and SOC 2 Type 1 reports issued by Grant Thornton, available under NDA. Those reports concern control design; neither is identified as a Type II examination of operating effectiveness over a stated period.

Model Supply Chain Disclosure

Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.

Juro
BB on Model Supply Chain DisclosureThe supply chain is partly disclosed: providers named without change notification, or architecture described without the providers.

Juro identifies OpenAI's GPT family as the model behind its AI tools, delivered through Microsoft on Azure servers. That establishes a provider, model family and delivery route for the arrangement described in its responsible AI guidance. The discussion also uses GPT 4 as an example of training scale, without confirming that version as the current production model. A precise version and a customer notice commitment for model changes are unspecified. The trust center's infrastructure subprocessor list names Algolia, AWS and MongoDB but omits OpenAI and Microsoft. The named model route therefore does not resolve the complete chain of processors or how customers learn of a change.

Oneflow
BB on Model Supply Chain DisclosureThe supply chain is partly disclosed: providers named without change notification, or architecture described without the providers.

The subprocessor list identifies Legly AB for contract review in Germany and OpenAI for extraction in the United States, alongside AWS infrastructure in Ireland and Sweden. Both AI suppliers are optional and controlled through account settings. The AI appendix directs customers to their Data Management page for the current generative model suppliers and their terms. It does not publish model versions or a complete function to model map. DPA provisions require reasonable advance notice of subprocessor changes to the customer's designated email address and allow a 14 day objection. That process concerns suppliers, without promising notice of every underlying model change.

Commercial Transparency

Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.

Juro
BB on Commercial TransparencyReal pricing is published for part of the range, with enterprise tiers withheld, or the unit and structure are stated without the figure.

Juro charges according to monthly contract volume and integration complexity, with unlimited users, workflows and templates across plans. Volume bands range from fewer than 20 contracts per month to more than 1,000. Slack, Google Drive and Companies House are included according to the pricing FAQ, while Salesforce, HubSpot and Workday incur additional cost. Quotes also reflect implementation complexity. Billing can use USD, GBP or EUR, and nonprofit discounts are available. No numeric subscription or implementation price is stated. The pricing page supplies the main drivers of a quote without a per seat rate or an independently calculable total. A previous demo month promotion is no longer part of the current pricing offer.

Oneflow
BB on Commercial TransparencyReal pricing is published for part of the range, with enterprise tiers withheld, or the unit and structure are stated without the figure.

Business starts at $292 a month, billed annually, including five users; Enterprise has ten users and a custom quote. Business includes writing, extraction and summary features. Standard AI Review and Insights have conflicting public treatment: the pricing page marks paid beta additions, while September help guidance says they are included in Enterprise during beta. Insights Premium is explicitly a paid addition for Business and Enterprise. SMS, identity verification, premium integrations and enhanced support can cost more. A 14 day trial needs no card. Implementation has no published amount, and global annual renewals can increase by the greater of 5 percent or Swedish CPI.

Firm and Practice Coverage

Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.

Juro
BB on Firm and Practice CoverageSegment and practice coverage is described with substance, short of the boundaries: what is supported is clear, what is not is left open.

Juro serves legal, HR, procurement, sales and finance teams. Legal establishes templates and workflow controls, allowing other departments to produce agreements within an approved process. Contract types include NDAs, employment agreements, master services agreements, statements of work, order forms, acquisition material and supplier agreements. The company describes customers in more than 85 countries and positions the platform for businesses completing roughly ten or more contracts each month. Its industry examples include software, food delivery and marketplaces. The central setting is an in house contract operation. A dedicated law firm, government or court workflow is not identified, and the product does not function as a primary legal research service.

Oneflow
BB on Firm and Practice CoverageSegment and practice coverage is described with substance, short of the boundaries: what is supported is clear, what is not is left open.

Legal, procurement, sales, finance and HR teams can create and manage agreements in Oneflow. Legal users configure review rules and approve terms; business teams use reusable templates and CRM data for offers, sales agreements and employment documents. Named customers span telecoms, retail, recruitment and public sector purchasing. UK guidance also addresses solicitors using AI for commercial contract review, bringing professional duties into the intended audience. AI is optimized for English and Swedish, with variable results in other languages. The product does not supply a jurisdiction specific research corpus, and its coverage statements do not define supported litigation work or every category of legal agreement.

The 12 legal signals, side by side

Recorded rather than graded. These are the questions a practitioner has to answer before a tool touches a client matter, and the answers are taken from public material only.

Client Data in Training

Can material a lawyer puts into this product be used to train a model?

Juro
Never, in the contract

Juro's AI terms prohibit using customer data to train a model for anyone else. A model used only to provide services to that same customer is permitted, and Juro must erase it within 60 days after the agreement ends. The responsible AI guidance also rejects training foundational models with customer data. The contract's limited customer specific exception is therefore distinct from shared model training, and the deletion deadline applies to that derived model.

Oneflow
Never, in the contract

The AI appendix forbids Oneflow from using customer data to train any AI models and overrides conflicting general terms for AI issues. Inputs and attributable outputs fall within the customer data definition. The general service license permits improvement and anonymized analysis, and AI feedback may improve accuracy, but those clauses do not remove the express training ban. The product FAQ also says underlying models do not train on customer data.

Separate provider processing, retained history and the generative AI confidentiality exclusion remain relevant to handling client material.

Prompt and Output Retention

How long does the product keep what a lawyer typed, and can that be set to zero?

Juro
Disclosed without a period

Juro's AI terms require erasure of a customer specific model within 60 days after termination. That deadline governs the model rather than the contracts, prompts or generated output used in the service. Customers can exercise portability and erasure rights under the privacy framework. A content retention window and a customer controlled retention setting are unspecified in the material underlying this assessment, leaving the lifetime of operational AI content separate from the model deletion commitment.

Oneflow
Disclosed without a period

Oneflow permits customers to set retention policies for stored contracts, and its AI page says temporary import, review and Insights data is removed after use. Generative AI has a different contractual provision: input questions and output responses may remain as history under the model supplier's current terms. No uniform period covers that history or every provider copy. Daily database snapshots last seven days, system logs last 90 days, and residual backups after termination have no precise DPA deadline. Contract deletion therefore cannot be treated as an immediate purge of all AI processing records.

Ethical Walls and Matter Segregation

Does retrieval respect the firm’s ethical walls, or can the model read across them?

Juro
Not addressed

Legal, sales, HR, procurement and finance can work in Juro's contract workspace. The AI terms prevent a customer specific model from serving another customer and distinguish one user's output from similar output produced for others. Those contractual boundaries do not explain permission enforcement within the repository or retrieval across teams. A technical separation model and controls for ethical walls between matters are unspecified in the material underlying this assessment.

Oneflow
Claimed, not documented

Workspace roles control access to contracts, and Oneflow provides distinct permissions for AI Review and the Insights dashboard. Administrators enable review for selected workspaces and can disable AI features or optional suppliers. These controls can support departmental separation and limit who sees review results. The descriptions do not specify how retrieval enforces every contract permission within a workspace, how restrictions propagate to generated summaries, or how a law firm's matter wall follows an AI request. Permission controls alone do not establish a complete ethical wall mechanism for confidential client matters.

Third Party Request and Subpoena Notice

If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?

Juro
Notice committed

Juro's data processing agreement requires notice to the customer of government access requests under Appendix 3, paragraph 4.4(k). The commitment operates through the Standard Contractual Clauses where the corresponding transfer law applies. Notification to individual data subjects remains the customer's responsibility. An equivalent commitment is not identified in the general terms or CCPA appendix. Requests from a third party claiming to control customer personal data are directed to the customer. No transparency report or request volume accompanies these provisions.

Oneflow
Notice committed

Global confidentiality terms require reasonable prior notice when disclosure is legally compelled, unless notice is prohibited, and reasonable assistance at the customer's expense in seeking protection. That gives the customer an opportunity to contest or narrow a request involving ordinary confidential service data. The AI appendix expressly removes contractual confidentiality obligations for generative AI functionality, so the same protection should not be assumed across every AI route.

No transparency report accompanies the commitment. North American and global agreements need to be matched to the contracting entity and enabled services.

Primary Law Corpus Provenance

Where does the law in this product come from, and does the vendor have the right to use it?

Juro
Sources named, basis unstated

Operator answers questions from the customer's contract repository and connects responses to its sources. AI Extract captures data from signed agreements in that same customer supplied collection. The underlying model route is separately identified as OpenAI's GPT family through Microsoft Azure. Juro is not a primary law research corpus. Rights to the foundation model's training material and an update schedule for that material are not established by the repository's customer supplied provenance.

Oneflow
Not addressed

Oneflow's review and portfolio analysis work with the customer's agreements and configured playbook concepts. Example clauses come from the organization's rule setup, and drafting can use selected text as input. No catalog of legislation, reported decisions or licensed legal commentary is supplied for these features. Naming a model provider does not identify the legal sources in its training data or their licensing terms.

The UK educational articles link professional guidance, but those links do not constitute a legal research corpus inside the product.

Good Law Verification

Does the product tell you when the authority it just cited has been overruled?

Juro
Not addressed

Juro works with a customer's contracts rather than a primary law collection. It has no identified citator, treatment signal or process for checking the subsequent history of a legal authority. Operator's citations connect repository answers to contract sources, which serves a different purpose from determining whether a case remains good law. The AI terms acknowledge that generated output can misstate laws and legal authorities and require human correction before reliance.

Oneflow
Not addressed

Highlighted review passages let a user inspect contract language, not whether a judicial decision remains authoritative. Oneflow has no published citator connection, treatment history service or automated check of legislation's current status. Teams maintain their own playbooks, including preferred and fallback clauses, so changing a rule after a legal development remains an organizational responsibility. The appendix warns that AI can generate incorrect law and recommends human review. A portfolio risk chart or missing clause flag does not establish that the underlying legal proposition remains valid.

Refusal and Uncertainty Behavior

What does the product do when the answer is not in the corpus?

Juro
Not addressed

Juro warns that generative AI can produce errors and requires a person to review results before reliance. Playbooks provide context and constraints for contract tasks, but no defined abstention path or confidence indicator explains how the system responds when an answer lacks support. The responsible AI guidance treats accuracy as an ongoing professional review responsibility. That establishes a warning and a human control, without specifying when the AI itself declines a request.

Oneflow
Documented

The AI Review interface separates findings from a missing clauses view. That view identifies playbook concepts absent from the agreement, giving the reviewer an explicit negative result instead of merely omitting a match. Red and yellow labels distinguish issues from risks; they are not numerical confidence estimates. Oneflow warns that generated facts and law can be wrong, but does not publish a general abstention rule for drafting or summaries. Missing clause handling is described for review, without promising that every unsupported question will be refused.

Fabricated Citation Record

Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?

Juro
None located

No identified court decision or disciplinary record names Juro or Juro Online Limited in connection with fabricated citations. Damien Charlotin's AI Hallucination Cases database and the sanctions material underlying this assessment contain no attributable incident. That finding does not establish an error rate or demonstrate that generated authorities are reliable. Juro primarily supports commercial contracting inside companies, a setting in which output is less likely to become part of a court filing.

Oneflow
None located

Damien Charlotin's AI Hallucination Cases database contained no entry naming Oneflow as of October 16, 2026. The result covers the database's reported court incidents, not every private use of the product or every inaccurate contract response. Oneflow itself discusses court examples involving generic AI tools in educational material; those examples do not identify Oneflow as the tool involved. Contract drafting and risk analysis can still produce incorrect law, which the AI appendix expressly warns about. The absence of a named incident provides no accuracy guarantee.

Bar Guidance Alignment

Has the vendor engaged in public with the ethics opinions its buyers are bound by?

Juro
Generic reference

Juro recognizes that lawyers must protect professional confidentiality when using AI. Its responsible AI guidance connects that duty to restrictions on training with customer data, while making a similar confidentiality point for HR teams. It does not connect these controls to a named ethics opinion or regulator's requirements. ABA Formal Opinion 512, state bar guidance, and Solicitors Regulation Authority or Law Society materials are not identified as the governing framework.

Oneflow
Mapped by jurisdiction

Oneflow's UK contract review guidance maps SRA standards and conduct duties to human supervision, confidentiality, client transparency and practical controls. It also discusses insurance, data protection and the legal team's responsibility for final judgment. This is a jurisdiction specific mapping with suggested review steps, rather than a generic statement that lawyers remain responsible. It is vendor guidance, not regulator approval or an independent finding of compliance. The mapping does not establish equivalent coverage for every jurisdiction in which Oneflow sells its platform.

Billing and Fee Posture

Does the vendor address what happens to the bill when the work takes an hour instead of six?

Juro
Outside the fee relationship

Juro's customer examples describe reduced contract work, including faster signing, fewer manual reviews and time saved per agreement. The commercial focus is an in house operation where legal and business teams share the platform. Those efficiency claims do not establish how a law firm should bill a client for AI assisted work. No matter based fee record, disclosure procedure or guidance on passing time savings through to clients accompanies the contracting workflow.

Oneflow
Savings claims only

The vendor's UK AI review material addresses solicitors as well as internal legal departments and promotes faster review with retained professional judgment. Its product pages also describe reducing routine contract work and administrative effort. No accompanying procedure explains how a firm records AI time, adjusts a client invoice, discloses savings or passes through Oneflow charges. Subscription pricing is the buyer's software cost rather than a client billing policy.

Because the audience includes lawyers serving clients, the time savings claims cannot be treated solely as an organization's internal operating expense.

Outside Counsel Guideline Readiness

Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?

Juro
Subprocessors listed

Juro identifies infrastructure, analytics, communications and payment subprocessors, including AWS, MongoDB, Algolia, Stripe and HubSpot. Customer initiated integrations include Salesforce, Slack and Google. The contractual package includes a data processing agreement, an EU Data Act addendum and separate AI terms, with an impact assessment template available for AI Assistant. The trust center list does not include the OpenAI and Microsoft route described in the responsible AI guidance. No client consent or notification pack accompanies this material.

Oneflow
Subprocessors listed

Oneflow supplies a public DPA, global and North American service terms, an AI appendix and a subprocessor table with functions and processing locations. Optional AI suppliers include Legly and OpenAI, and administrators can control optional services. A public ISO certificate and statement of applicability support security diligence; SOC reports require an NDA. These materials help counsel explain data handling to a client.

They do not form a dedicated client AI disclosure package, and the generative AI confidentiality exclusion and conflicting regional descriptions require specific attention in any outside counsel approval process.

Court Disclosure Support

If a judge’s standing order requires an AI disclosure, can the product produce one?

Juro
Not addressed

Juro manages commercial contracts rather than court filings. Operator provides source citations for repository answers, and the AI terms prohibit representing generated output as human authored. These features support a limited record of sources and a contractual disclosure boundary. They do not create a court certification, standing order workflow or export that records the model's role and a lawyer's verification. A dedicated litigation disclosure process is not identified.

Oneflow
Partial record

AI Insights supports an export of portfolio analysis, and reviewers can inspect the contract passages associated with a playbook finding. Insights Premium adds an action report for internal discussion and negotiation. Enterprise also includes an account audit log, while signing workflows maintain transaction records. The published export instructions do not establish a complete record of model identity, prompt, output and human edits for each AI action.

These are useful contract administration records, but no court disclosure template or complete model provenance export is described for a later filing.

What neither one publishes

The questions both sides leave open

Derived from the records above rather than written, so it cannot favor either vendor. Take these into both conversations and ask each side the same question.

Signals neither addresses in public material
  • Good Law Verification

Which one fits

Choose Juro if

  • Unlimited users suit the intended organization wide adoption.
  • Word AI Review is important alongside the contract workspace.
  • Operator's cited contract answers match the team's questions.

Choose Oneflow if

  • A fixed five user Business package suits the starting team.
  • Portfolio analysis should follow administrator defined playbook concepts.
  • A contractual ban on customer data model training is required.

In summary

Juro

Juro offers a contract workspace, Operator assistance and Word AI Review. Its commercial structure uses unlimited users with volume and integration considerations, while private customer learning has separate contractual limits.

Source: AI Legal Index, 2026

Oneflow

Oneflow bundles web agreement collaboration, signature and metadata management with AI functions. Standard review and Insights analyze configured concepts across a workspace, with a paid Premium package adding custom reports and dashboards.

Source: AI Legal Index, 2026

Questions buyers ask

Are Juro and Oneflow both sold by the same seat model?

No. Juro describes unlimited users with pricing shaped by volume and integration needs. Oneflow's Business package includes five users, and its Enterprise offering includes ten before any separately agreed expansion. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.

How do their review outputs connect to the contract?

Juro's Operator provides citations for contract answers. Oneflow's review highlights relevant passages and shows the associated playbook concept, feedback and example clause, with missing concepts separately listed. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.

Does Juro permit use of one customer's learning for another?

Its terms distinguish private customer learning from use across customers and prohibit the latter. That permission is different from Oneflow's express ban on training any AI model using customer data. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.

Which demonstration would expose the useful difference?

For teams comparing answer driven review with a configured risk dashboard, AI Legal Index highlights Juro's Operator workflow and Oneflow's workspace playbooks. A representative contract collection can show which approach fits the team's recurring work.

Disclosure

Neither vendor paid for inclusion, placement or a grade, and neither reviewed this page before it published. Everything on it comes from public material on the dates shown. How the index grades.

Juro's unlimited user structure does not make its volume based quote equivalent to Oneflow's entry package.

Contact

Correct a record, or ask how something was graded

Every grade and every signal on this index is drawn from public sources and dated. If a record is wrong, out of date, or missing an artifact the index did not locate, send the source and it will be reviewed and the record redated. Vendors are welcome to submit documentation. Nothing on this index is for sale, including a listing, a placement, or a grade.

AI Legal Index

The AI Legal Index is an independent index that tracks changes to AI vendors in legal. It holds 462 vendors across 9 categories, each graded on the same 15 capability axes and recorded against 12 legal signals, from public sources. No vendor pays for inclusion, placement, or rating.

Index Status
Last index update
October 16, 2026
The AI Legal Index is an editorial reference. It is not a regulatory body, not a law firm, and nothing published here is legal advice or a recommendation to retain or avoid a vendor. Records are verified against published sources, bar guidance and public court records. Where a record reads not addressed, the material was not located in public sources on the date shown. See the Methodology page for evaluation standards and limitations.
© 2026 AI Legal Index
3801 N Capital of Texas Hwy, Ste E240 · Austin, TX 78746