LawToolBox vs LawX: how they compare in 2026
LawToolBox and LawX are not usually weighed against each other, because they are built for two different legal systems. LawToolBox calculates court deadlines for US and Canadian courts inside Microsoft 365, and LawX runs German notarial offices from matter opening to invoice. They have two things in common: both publish full prices, and both integrate deeply with the systems their users already run. They differ in where each puts its weight. LawToolBox writes its limits into its agreement: output is legal information, not advice, a licensed attorney must review every deadline, and the firm must keep a second, independent deadline system. It also names Microsoft Azure OpenAI, running in the customer's own tenant, as its model provider. LawX's AI runs through the whole notarial workflow, and it signs professional confidentiality undertakings once it handles mandate data.
Which one fits
Choose LawToolBox if
- You need court deadlines calculated from the rules. LawToolBox calculates dependent deadlines from a trigger date using rule sets its attorneys maintain for thousands of state and federal courts in the United States and Canada, and syncs them to Outlook, Google or Apple calendars or a case management system.
- You want AI that pulls deadlines from court orders without leaving your tenant. LawToolBox AI runs on Azure OpenAI inside your own Microsoft tenant, reads emails and attachments including handwritten orders, and presents extracted deadlines for review before they reach a calendar.
- You want to price the whole firm in advance. LawToolBox publishes rates for every firm size, from $35 per user a month billed yearly at 2 to 9 users down to $19 at 80 or more, with connector and consulting fees listed and its AI sold as an add on.
Choose LawX if
- You run a German notarial office. LawX creates the matter with register data, prepares deeds from your templates in Word, reads land register extracts, handles execution and XNP export, and raises the invoice, and it appears on the Federal Chamber of Notaries' software register.
- You want AI that suggests and waits for your approval. LawX checks entries for gaps, suggests wording in context and proposes next steps on a matter, under a published principle that the professional releases each step before it takes effect.
- You want one price with setup included. LawX charges 159 euros per license a month on annual payment, a single tier that includes onboarding, data migration and support, and hosts accounts in German data centers holding ISO 27001 and a BSI C5 attestation.
At a glance
All 15 axes, side by side
The same grid applied to every vendor in the index, graded from public sources. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
The core is a rules based deadline engine: enter a trigger date and the platform calculates dependent deadlines from rule sets the vendor's attorneys build and maintain, covering thousands of state and federal courts, under a patent the company filed for online deadline management in 1998. No model is involved in that. LawToolBox AI is a separately licensed add on that needs Azure OpenAI enabled in the customer's own Microsoft tenant. It adds a way in: reading an email, attachment or handwritten court order, pulling out the dates, mapping them to the civil rules behind them, and summarizing documents. It can be removed without touching what the firm bought. The AI is an intake layer on a deterministic calculator, not the calculator.
The buyer licenses a practice operating system: matter creation, deed preparation, execution and XNP export, invoicing, a dashboard with task priorities, structured case file export, and interfaces to the commercial register and Microsoft 365. Without the models, a working notarial practice management system remains. The AI layer covers checks for incomplete entries, wording suggestions in context, a land register assistant that reads extracts, communication help, automated execution preparation, matter suggestions and adaptive template use. The company brands the whole product as an AI supported operating system.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
Deadline charts and forms the product generates may be out of date or built for a different state or jurisdiction, the agreement warns, and may not match local court rules. It expressly disclaims any warranty that the information is correct, complete or current. The AI ethics page says plainly that AI hallucinates and makes mistakes and that a licensed person must review everything it produces. The pricing FAQ says a team of attorneys monitors court rules daily so deadlines are always up to date and accurate, the opposite claim. The grounding is structural: deadlines come from named rule sets in a public catalog, and the AI maps extracted dates to the rules behind them. No error rate, sample or test of the extraction is published.
The published claims are outcome claims: automated checks mean matters run reliably from the outset, error sources are minimized, excellence becomes the standard rather than the exception. None carries a figure, a test set, a method or a date. Outputs are built from the firm's own templates and from data read out of the commercial register and the land register through named interfaces, so a drafted deed starts from official register content and a stored precedent rather than from model recall. Nothing published describes what happens when the model is wrong, no accuracy evaluation is linked, and hallucination and error rates are not mentioned on the home, product, pricing or security pages.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
The agreement says the application is meant to be used alongside other deadline reminder and calendaring systems. It conditions use of its reminders on the firm stating that it has at least one other independent way of calculating and being reminded of its deadlines, and the firm also agrees to check the algorithms independently against the needs of each matter. The vendor says that condition is priced in. Around it sits a described review structure. Extracted deadlines appear in Outlook for the user to check and edit before they go anywhere, and the privacy policy says no calendar event is ever added without the registered user's prior consent. The agreement requires a licensed attorney competent to manage the case to review and modify all deadlines and pleadings.
The automation section of the pricing page is headed with the principle: Sie geben frei, you release it. The product illustration shows the assistant proposing a matter update and then asking the user to confirm it before applying it, so approval is a step in the product. Routine processes run in the background so the professional can concentrate on the legal substance. No threshold is published at which the system defers or escalates, nor which steps run unattended and which need approval, nor what happens after an error reaches a deed or an execution filing.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
The case studies index carries nine items dated between 2015 and 2021, every one of them written by a platform or a publication rather than the vendor: Microsoft Azure and Microsoft Office customer stories, a Microsoft Teams story for legal departments, a LexisNexis case study on LawToolBox with Time Matters at the Los Angeles Unified School District, and a LegalTalk Network episode on rules based docketing. The most recent predates the AI features by two years. A separate customer story on Microsoft's partner site names an attorney at Marrache Law. The vendor's own testimonials carry first names and job titles only, three of them paralegals, with no firm named and no figures. Awards are from 2018. The deadline platform has been deployed and written about for a decade, and no account of the AI in production is published.
About seventeen unlabeled marks appear on the home and pricing pages under a heading about experienced practitioners accompanying the product, with no sign of which are customers, advisers or media. The claim that the product is proven in notarial practice names no office. LawX appears on the Federal Chamber of Notaries listing of software houses for IT in the notarial office, a professional body's register rather than a vendor claim. The company says it maintains an exchange with the federal and regional chambers and contributes to specialist committees. No named customer, figure, matter volume or date appears on the home and pricing pages. A customer page sits in the site navigation.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
The agreement limits use of Confidential Information to performing the vendor's obligations, and its anonymous aggregation clause states that no client file information is ever available or accessed. The privacy policy says matter data sits in dedicated databases on dedicated servers and that personal information there is never shared with third parties, that every employee signs a confidentiality undertaking and passes a background check, and that a firm administrator controls who reaches which matter, can grant read only access and can withdraw a departing user from every matter. For the AI, processing happens inside the customer's own Microsoft container and no result is stored by the vendor. The agreement states that emails sent by the application are not encrypted and asks the firm to weigh what that means for privileged material it chooses to store in reminders. Privilege is addressed in that warning rather than in any commitment.
The security page commits to professional confidentiality undertakings as soon as mandate data is processed, which carries the notary's and lawyer's duty of secrecy onto the vendor's staff. Processing is described as compliant with data protection law and professional law throughout. Separation is documented at feature level, with role based rights, logging of access, client structure and support for several locations. Accounts are hosted in German data centers, with TLS 1.2 or higher in transit and AES-256 at rest. Nothing says whether customer or mandate data is used to train models, no retention or deletion position for mandate data is published, and no model provider is named, so what any provider may retain is unstated. The privacy policy covers website use and the sales process only, and leaves processing under the customer relationship to a contract that is not published.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
A section of the agreement headed Duty to Consult a Licensed Attorney says the product generates legal information of the kind found in a legal publication or a retail legal form. It says the user is not receiving legal advice, and that the material is general and may not fit the user's circumstances. It says output must be checked by an attorney licensed in the relevant state or venue. It also requires a licensed attorney competent to manage the cases on the platform to review and modify all deadlines and pleadings as needed, and describes the product as producing a first draft and saving time rather than supplying judgment. Competence, supervision and jurisdiction are each named. The AI ethics page makes the same point for the machine: a licensed person must review all AI generated work, as they would a paralegal's.
Compliance with professional law is stated as a design principle, with the security page headed on it and processing described as compliant with the GDPR and professional law. The company says it maintains a close exchange with the Federal Chamber of Notaries and regional notary chambers and contributes to specialist committees, and it links the chamber's register of notarial software. Routine processes run in the background so the professional concentrates on the legal substance, and the approval principle leaves the release decision with the office. Nothing says the product does not give legal advice, nothing addresses the line between a prepared draft and a professional's own judgment, and no jurisdiction limit is stated, although the product is built around German notarial and court procedure.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
The vendor says it is committed to responsible AI and publishes a Responsible AI Guarantee: results are generated through Microsoft Azure AI and Copilot, which by design do not train on customer data; the vendor does not and cannot store AI generated results; and nothing goes into a Microsoft or LawToolBox model. Its ethics page addresses bias as a duty of the user, telling attorneys they must understand any bias in AI results and the data behind them. It notes that the data set is always defined by the end user, who points the AI at a specific file, URL or files in their own tenant. That is an architecture argument, not governance. No owner inside the company is named, nothing is published on what is tested before a change ships, and no finding about uneven output has been disclosed.
No responsible AI statement, governance framework, named owner accountable for model behavior, evaluation or testing regime for output quality, published result, or position on bias is published for the product. Two published items come near the subject. The privacy policy says no automated decision making or profiling under Article 22 GDPR takes place, but limits that to the website and to contract initiation and performance, not the product's processing of mandate data. The EU AI Act appears only in a partner's training course on AI Act compliance, a service sold alongside the product rather than a statement of the vendor's own governance. A data protection officer is named, which is a data protection role, not an AI one.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
LawToolBox publishes matter data in dedicated databases on dedicated servers, https in transit, passwords stored as PBKDF2 hashes with the iteration count and key sizes given, single sign on through OpenID, firm administrators controlling access to each matter with read only options and full revocation when someone leaves, OAuth tokens for integrators that a Microsoft global administrator can revoke from their own Azure portal, background checks and confidentiality undertakings for every employee, and server request logging kept inside the company. For the AI specifically, nothing is retained because processing stays in the customer's Microsoft container. No subprocessor list, incident response or breach notification practice, or statement on encryption at rest is published, and the retention position runs the other way, since a subscriber's data is not deleted until all statutes of limitation have expired.
Customer accounts are hosted in German data centers certified to ISO 27001 with a BSI C5 attestation. Data is protected with TLS 1.2 or higher in transit and AES-256 at rest, with role based rights, logging of access, access control and login logs, and regular audits and tests described as ongoing. A data protection officer and the supervisory authority are named. The privacy policy names every processor for the website and sales process: Framer, Microsoft Deutschland, Attio, Intercom, Mailchimp, Luma, Typeform, Posthog, Google Ireland, Calendly and TeamViewer. It addresses transfers outside the EU under the Data Privacy Framework and Article 46, and states the remaining FISA risk plainly. No retention period, deletion commitment, incident or breach notice practice, or named processor for the AI is published for mandate data. The privacy policy says it covers website use and steps before a contract, and that the customer relationship is governed by a contract that is not published.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
Sold as is with all warranties disclaimed, the product comes under the economic loss doctrine and an exculpatory clause in which the user releases the vendor from all liability for negligence, including negligent misrepresentation. The sole and exclusive remedy for any claim of harm or economic loss, however framed, is a refund: the amount paid for the specific matter where the firm pays per matter, or no more than six months of that user's fees. The vendor ties this back to the firm's own non delegable duty to have every deadline reviewed by an attorney. Alongside it sits a real service level agreement with a 99.9 percent monthly uptime target and credits of 10 or 25 percent of that month's fees, claimable within 30 days and capped at the month's fees. Nothing covers a deadline calculated wrong.
No general terms and conditions, customer agreement, master subscription terms or service level document is published on the site. The navigation carries Product, Solutions, Customers, Pricing, Security and a company menu; the footer carries an imprint, a privacy policy, careers and support. The imprint is the disclosure German law requires of any commercial website and says nothing about the contract. No indemnity, liability cap, warranty, uptime commitment or insurance position is published, and the privacy policy is the only legal instrument published, expressly scoped to the website and the sales process. Nothing published says who bears the loss when a system that prepares deeds and executes filings is wrong.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
Sixteen named systems each have their own page. Direct integrations cover Actionstep, Caret, LEAP, MyCase, Neos, PracticePanther, Rocket Matter and Smokeball. Microsoft 365 integrations cover Centerbase, ECFX, Filevine, iManage, InfoTrack, NetDocuments, PCLaw and Time Matters, ProfitSolv, Soluno, SurePoint and TagMyFav. What moves is stated: deadlines sync to Outlook, Google and Apple calendars and to case management platforms through published APIs. Each matter gets its own Microsoft group, calendar, Teams space, SharePoint folders and OneNote, and a document management system can be linked to deadlines, or Microsoft itself used as one. Configuration is described in the subscription terms, from administrator rights and application permissions to Outlook rules and calendar filters, and the connector surcharge is published at four dollars per user. Third party integrators authenticate with their own OAuth tokens.
Inside the office, LawX connects to Microsoft 365, with Outlook and Word named, prepares drafts and letters directly in Word, and assigns incoming email automatically to the correct matter. Toward the official systems notarial work runs on, it offers a commercial register interface, a land register assistant that reads extracts intelligently, and export to XNP, the electronic notarial filing standard, including into the deposit register for escrow. Structured export of case files lets a customer leave with its data. Through named partners come a DATEV interface for accounting and electronic invoicing, transparency register extracts and sanctions screening in the money laundering workflow, and escrow account opening with transactions flowing back into the LawX file. Onboarding covers data migration explicitly, and the product is documented as able to run in parallel with an incumbent system rather than requiring replacement.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
Every plan carries the promise to keep data in the customer's own tenant, and that is literally true for the Microsoft artifacts the product creates, the matter groups, calendars, Teams spaces, SharePoint folders and documents, and for the AI, which runs on the customer's own Azure OpenAI inside their Microsoft container and returns nothing to the vendor. The privacy policy, though, states that matter and personal information submitted to LawToolBox is stored in dedicated SQL databases on dedicated LawToolBox servers, which is a separate estate under the vendor's control. No region is published for those servers, no residency option is offered, no single tenant or on premises alternative is described, and nothing addresses where a customer outside the United States would sit.
The security page says the customer's account is hosted in German data centers certified to ISO 27001 with a BSI C5 attestation, and describes the arrangement as compliant with data protection law and professional law. Nothing states whether the platform is single or multi tenant, no dedicated or private option appears at the single price, and nothing separates where mandate data is stored from where model inference happens; no model provider is named. Support for several locations is published, but it describes the customer's own offices, not the deployment model.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
No independent attestation is published and none is claimed. There is no security page or trust center in the navigation or footer, no SOC 2, ISO or penetration test reference in the agreement, privacy policy or any product page, and no report offered on request. Instead, Enterprise Security is listed as a feature of every plan with nothing behind it, and the privacy policy describes security measures, which is a statement of practice, not an audit. The vendor leans on Microsoft's posture, noting that AI processing happens behind Microsoft's enterprise grade security inside the customer's own tenant; that is the host's assurance, not the vendor's.
The security page states that LawX's processes and systems are oriented to ISO 27001 standards and that certification is currently in preparation. No certifying body, scope, observation period or date is published for that orientation. The ISO 27001 certification and the BSI C5 attestation named on the same page belong to the data centers hosting the accounts, not to LawX, and the page keeps the two apart. Regular audits and tests are described without naming an auditor, a standard or a cadence. There is no trust center, no report is offered at any access tier including on request, and no penetration testing is mentioned.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
All AI features run on Microsoft Azure OpenAI. The vendor says processing happens inside each customer's own Microsoft 365 cloud, reads only data that user can already reach, and never uses prompts or responses to train models that benefit other legal professionals. Turning the feature on requires Azure OpenAI to be enabled in the customer's own tenant, and a firm can bring its own Azure OpenAI license and run its own prompts against its own documents or a URL. So whose models run, where and on whose account is published. Not published: the model or version, which Azure region serves the deployment, or any commitment to tell customers if the underlying model changes beneath a prompt library they have built.
No model is named, no model provider is identified, no location is given for inference, and no commitment to notify customers when any of it changes is published. The one detailed processor list the company publishes, in the privacy policy, covers the website and the sales process and names Framer, Microsoft Deutschland, Attio, Intercom, Mailchimp, Luma, Typeform, Posthog, Google Ireland, Calendly and TeamViewer. None of those is presented as processing mandate data, and the list is expressly scoped away from the customer relationship.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
Rates are published for every firm size range in both billing cycles. Billed yearly: $35 per user per month at 2 to 9 users, $33 at 10 to 19, $23 at 20 to 79 and $19 at 80 or more. Billed monthly: $42, $40, $30 and $22. The unit is a license for every Microsoft 365 licensed mailbox in the firm or department, the minimum commitment is one year, and cancellation brings no refund for the current term. Implementation costs are published too: four dollars per user to activate the NetDocuments, iManage, ECFX or InfoTrack connectors, and extra training and consulting at $225 an hour. Up to 20 published rule sets are included for firms of 20 or more, with other jurisdictions quoted on request, and onboarding is quoted separately. One figure is withheld: LawToolBox AI is described only as an additional fee.
The price is 159 euro per license per month on annual payment, a single tier with no enterprise band held back. What the license includes is listed in five groups: core processes, from matter creation with register data capture through deed preparation, execution and XNP export, invoicing, dashboard and structured case file export; communication and documents, including email integration, AI communication help, file and party management, the commercial register interface and the land register assistant; security and compliance; technical integration with Microsoft 365; and automation and AI. Onboarding, data migration and customer service are included in the license under LawX Care. Every purchase route ends in booking a demo.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
Four buyer pages sit in the navigation, for law firms, corporate legal departments, enterprise firms, and government and agencies. The pricing ranges run from two users to eighty and above. Practice coverage is stated: thousands of state and federal courts across the United States and Canada, with bankruptcy, patent, family law, probate, estate and administrative rules named, and a public rule set catalog that can be read before subscribing. The limits are stated in the agreement itself. A subscription includes up to 20 published rule sets for firms with 20 or more licensed users, rule sets outside the catalog are quoted on request, and those marked private preview are excluded unless agreed. Custom rule sets are built on request at extra cost.
Two buyer segments are named, and their relationship is stated: the product is proven in notarial practice and is now being offered to law firms, with a separate page for firms offering early access and introductory terms. Within the office, the professionals, staff and IT specialists each have their own material. Practice coverage shows in the workflows: property purchase deeds, land and commercial register work, execution and deposit, escrow accounts and money laundering checks. No firm size or matter volume is stated, in house and government use are not mentioned, and nothing says which areas of practice fall outside the system. LawX also publishes solutions and customer pages.
The 12 legal signals, side by side
Recorded rather than graded. These are the questions a practitioner has to answer before a tool touches a client matter, and the answers are taken from public material only.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
The AI ethics page carries a Responsible AI Guarantee. Results are generated through Microsoft Azure AI and Copilot, which by design do not train on customer data. The vendor does not and cannot store any AI generated result, because processing stays inside the customer's own Microsoft environment, and none of the customer's data is ever used to train a Microsoft or LawToolBox model. The agreement never uses the word training.
It does something narrower: the customer grants a right to use Confidential Information solely to perform the vendor's obligations. A separate clause permits aggregate anonymized reports on system usage and content trends, with five named safeguards, including that no personally identifiable information is extracted and no client file information is ever available or accessed.
LawX publishes no general terms and conditions, customer agreement or data processing agreement; the footer carries an imprint and a privacy policy and nothing else. The privacy policy states at its opening that it covers use of the website and the initiation of a contract, and that further processing under the customer relationship is explained when the contract is concluded, so it never reaches mandate data. Nothing on the security page, the product page or the pricing page states whether client or mandate content is used to train or improve models, though the security page engages professional secrecy directly.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
For the AI the window is zero, and the vendor explains why. Prompts and results stay inside the customer's own Microsoft environment: the feature runs on Azure OpenAI in the customer's tenant, reads only data that user can already reach, and the vendor says it does not and cannot store any AI generated result. Matter data is the opposite case. The privacy policy says a subscriber's account can be disabled, but the data will not be deleted until all possible statutes of limitation have expired and all potential claims against the vendor are released.
Only trial accounts can ask for deletion outright. So nothing the machine produces is kept, while what the firm entered is kept for years, for a period set by litigation risk rather than a retention schedule.
Mandate data, prompts and generated drafts have retention periods set only in an unpublished contract. The privacy policy does publish retention periods in detail, but only for the categories it governs: server log files deleted after at most seven days, contact data held while the sales process is active, applicant data deleted after six months or two years in a talent pool, and commercial and tax retention obligations of two to ten years with limitation periods running to thirty.
All of that concerns website visitors and prospects. For the product itself the policy defers expressly to the customer contract, which is not published, and no deletion commitment or position at the end of a subscription appears anywhere. The one adjacent product feature is a structured export of case files, which addresses getting data out rather than how long it stays.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
Segregation is described at matter level. Every firm gets a firm administrator who controls user permissions matter by matter, can limit a user's access to a shared case to read only, and when someone leaves can withdraw their access to every matter they were granted and then remove them from the firm entirely. Matter data sits in dedicated databases on dedicated servers, and each matter provisions its own Microsoft group, calendar, Teams space and SharePoint folder structure, so the wall a firm builds in Microsoft is the wall the product inherits.
Third party integrators authenticate with their own OAuth tokens, and a Microsoft global administrator can revoke the add in's token directly from their own Azure portal. Nothing describes screening a named user from a matter for ethical rather than administrative reasons, or any conflicts process.
The security page publishes role based rights management with logging of access, under the heading that the system is for authorized people only, and the pricing page repeats it as rights by role plus access control and login logs. Client structure and support for several locations are published as features, which is how a firm with several offices keeps files apart. The permission model is LawX's own, documented at feature level, and the office administers its own roles.
How roles map to a wall in practice is not published, and nothing addresses separation between matters within one office, which is how the question arises for a notary acting for several parties.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
The privacy policy says personal information is not disclosed except as it describes, to comply with applicable laws or valid legal process, or to protect the vendor's rights or property. Elsewhere it lists sharing with third parties when required by law or in response to legal process or lawful requests from law enforcement or government agencies. Nothing commits to telling the customer a demand has arrived, waiting before complying, narrowing what is produced, or helping the firm seek a protective order.
The data at stake is a law firm's matter list and deadline chart. The agreement has no confidentiality clause of the kind that usually carries a compelled disclosure notice; its confidentiality language runs the other way, limiting what the vendor may do with the firm's information. No transparency report is published.
The privacy policy addresses compelled disclosure and commits to no notice. Section nine says data is passed on where LawX is legally obliged under Article 6(1)(c) GDPR, in particular for official requests, court orders and legal proceedings, and separately lists public authorities that receive data under statute. No commitment to inform the customer before or after such a disclosure appears, and no discretion over notice is reserved.
The clause governs the data the privacy policy covers, which is website and sales process data. The policy leaves processing under the customer relationship to an unpublished contract, so nothing published addresses compelled disclosure of mandate data. No transparency report is published.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
The source material is court rules, the jurisdictions are published, and the rule sets are the vendor's own work. A public rule set catalog lists what a subscriber gets, covering thousands of state and federal courts in the United States and Canada and naming practice areas including bankruptcy, patent, family law, probate, estate and administrative rules. The subscription includes up to 20 published rule sets for firms of 20 or more users, anything outside the catalog is quoted, and custom rule sets are built on request.
The vendor says a team of attorneys monitors the courts daily for rule changes. The deadline algorithms are claimed as the vendor's own intellectual property under a patent and a copyright, and the agreement bars reusing them elsewhere. Not stated: which text each rule set is derived from, or on what license, given that court rules are public.
The product works on the firm's own material and on official register data reached through interfaces, drafting from the office's existing templates and reading land register extracts and commercial register entries. Those registers are named as data sources the product connects to, which is an integration fact rather than a training or retrieval corpus. Nothing states what any underlying model was trained on, under what license, or with what update cadence, and no database, publisher or legal collection is named on the home, product, pricing, security or privacy pages.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
There is no case law citator, and the vendor runs its own currency process for court rules. The pricing FAQ says a team of attorneys monitors court rules daily for changes, a blog post explains how the rule sets are kept current, and dated posts track specific amendments, such as the California summary judgment rule changes effective 1 January 2025. Release notes are published. That is a treatment signal for procedural rules rather than case law, and it belongs to the vendor rather than a licensed source.
The agreement, the binding document, warns that the forms and deadline charts may be out of date or built for a different jurisdiction, and disclaims any warranty that the information is correct, complete or up to date. Nothing published says how quickly a rule change reaches a live rule set.
The product does not retrieve or present case law. It runs the operational life of a matter, drafting deeds from the office's templates and register data, handling execution and export, and raising invoices, so no check of subsequent history applies and none is described.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
Nothing on the AI page, the ethics page, or in the agreement or privacy policy describes what the extraction does when it cannot tell. The AI reads an email, attachment or handwritten order and proposes deadlines for the user to review, but no confidence signal, threshold or abstention is described. Nothing says what a reviewer sees when the model finds a date it is unsure of, or an order it cannot parse, as distinct from one it read cleanly.
The vendor's answer to uncertainty is structural. The agreement conditions use of the product on the firm keeping a second independent way of calculating deadlines, and the ethics page says AI hallucinates and makes mistakes and that a licensed person must review everything it produces.
AI checking of incomplete entries flags gaps in the data the office has supplied rather than uncertainty in what the model has produced. Nothing describes an abstention path, a state for having no answer, or any confidence or grounding signal surfaced to the professional before they approve. The published approval principle places a human at the release point, which is a control on the output rather than a description of the system's own behavior when it is unsure.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
The AI Hallucination Cases database maintained by Damien Charlotin records no case naming LawToolBox, and the vendor's site, press and directory profiles record no finding that the product's output was fabricated or inaccurate in a proceeding, a regulatory action or a published account. This is a statement about the public record rather than a finding about the product. The product calculates dates and extracts them from documents, so the failure that would matter is a missed or miscalculated deadline, which is also the malpractice risk the vendor's own marketing names; no account of such an incident is published.
The AI Hallucination Cases database kept by Damien Charlotin, which covers Germany among its jurisdictions, holds no entry naming LawX or LawX GmbH. LawX drafts deeds from an office's templates and register data and does not cite case law.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
A dedicated page of 23 February 2024 sets out seven duties it says are emerging as ethics rules on AI are promulgated around the United States: never submitting privileged work product to a model that trains on it, understanding how any third party AI handles firm data, understanding embedded bias and the data set behind a result, treating generative AI as a higher bar than the semantic search offered by the large research providers, having a licensed lawyer review all AI generated work as they would a new associate's, disclosing to a court the extent of AI use where a jurisdiction requires it, and addressing AI use and billing in the client engagement agreement.
The agreement adds a duty to consult a licensed attorney in the applicable state or venue. No model rule, formal opinion or state bar guidance is cited.
The security page says LawX maintains a close exchange with the Federal Chamber of Notaries and with regional notary chambers and contributes to specialist committees, and links the chamber's published listing of software houses for IT in the notarial office, where LawX appears. Compliance with professional law is stated as a design constraint across the security and pricing pages, and professional confidentiality undertakings are committed once mandate data is processed.
No individual rule, chamber guideline or opinion is cited, and nothing sets out how specific product behaviors meet specific professional obligations.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
The ethics page tells attorneys to say in their client agreements whether they will use AI and how they will bill for it. It says they cannot bill an hour for work the AI did in five minutes, allows billing for time spent drafting and revising prompts, and points to flat or contingent fees as a way to capture the value instead. No record supports it: the vendor says it does not and cannot store any AI generated result, so nothing marks which deadlines or summaries the machine produced, and there is no export to show a client.
The published commercial case is time saved, through an ROI calculator and claims about hours recovered from calculating deadlines by hand, with nothing on what a client is told.
The product raises invoices as a core function, and the pitch is built on efficiency, with routine work automated so an office can handle more matters despite a shortage of qualified staff. No saving is quantified, and no treatment is stated for fees on AI assisted work, whether statutory notarial fees or law firm billing. German notarial fees are fixed by statute rather than billed by the hour, and nothing published engages that point or the position for the law firm segment the company is now entering. No record of AI assisted work for each matter is described.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
Published: the full agreement including the service level terms, the security practices in the privacy policy, and the model provider, Microsoft Azure OpenAI, running inside the customer's own tenant. No subprocessor list exists; the privacy policy refers in general terms to other companies employed to provide hosting, network services, IT support and customer service without naming any. There is no security certification, no penetration test summary, no data processing addendum, no business associate agreement and no stated incident response or breach notification practice, and nothing is offered on request.
The processor list that exists covers the website rather than the product. A full and current processor list is published in the privacy policy, naming Framer, Microsoft Deutschland, Attio, Intercom, Mailchimp, Luma, Typeform, Posthog, Google Ireland, Calendly and TeamViewer, with Article 28 obligations, transfers outside the EU addressed under the Data Privacy Framework and Article 46, and a frank statement of residual United States surveillance risk.
The policy scopes itself to the website and the sales process before a contract, so none of those processors is presented as handling mandate data. No model provider is identified, no subprocessor register for the product exists, and no data processing agreement or forwardable client facing pack is published at any access tier.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
The vendor's ethics page tells attorneys that if they use AI to generate any part of a document filed with a court, they may have to disclose the extent of that use. It notes that some jurisdictions also require certification that confidential information was not shared, and some require every section generated with AI to be identified to the court. Nothing in the product answers this. The vendor says it does not and cannot store any AI generated result, so there is no log of what the machine produced.
Once both sit on the matter calendar, nothing distinguishes an extracted deadline from one a paralegal typed, and no export or format is offered for a filing.
Access logging is published twice, as logging of access under role based rights management and as access control with login logs, so the office has a trail of who did what. Structured export of case files is a published feature, and export to XNP places documents into the official electronic notarial record, which is a formal filing route rather than an internal report. Content drawn from registers is traceable to the register it came from through the named interfaces.
Nothing states that the system records which outputs were generated by AI, no model is identified against an output, no record of what a professional reviewed or amended before approval is described as exportable, and no disclosure guidance for a court, chamber or supervisory authority is published.
The questions both sides leave open
Derived from the records above rather than written, so it cannot favor either vendor. Take these into both conversations and ask each side the same question.
- Security Certifications and Trust Center
- Refusal and Uncertainty Behavior
- Outside Counsel Guideline Readiness
In summary
LawToolBox
LawToolBox, from LawToolBox.com, Inc. of Englewood, Colorado, is court rules deadline calendaring and matter management built inside Microsoft 365. A user enters a trigger date and the platform calculates dependent deadlines from the vendor's rule sets for thousands of US and Canadian courts, syncing them to calendars and case systems. Each matter gets its own Microsoft group, Teams space and SharePoint folders. LawToolBox AI, licensed separately, runs on Azure OpenAI in the customer's tenant to extract deadlines from emails and orders for review. According to the AI Legal Index, LawToolBox's agreement requires a licensed attorney to review every deadline and a second, independent deadline system, and it publishes rates for every firm size.
LawX
LawX, from LawX GmbH of Berlin, is a practice operating system for German notarial offices and, more recently, law firms. It runs a matter from opening to invoice: register data capture, deed drafting in Word from the office's templates, land register reading, execution and XNP export, and invoicing. Its AI checks entries, suggests wording and next steps, and prepares execution, with the professional approving each step. According to the AI Legal Index, LawX charges €159 per license a month, hosts in German data centers and signs professional confidentiality undertakings.
Questions buyers ask
Are LawToolBox and LawX the same kind of product?
No. LawToolBox calculates court rules deadlines and manages matters inside Microsoft 365 for US and Canadian courts. LawX is a practice operating system for German notaries and law firms, covering deeds, registers, execution and invoicing. Both publish their prices in full and integrate deeply with the systems their users already run. From the AI Legal Index, based on each vendor's own published materials as of September 26, 2026. No vendor pays for placement.
Does LawToolBox tell users its deadlines are not legal advice?
Yes, in its agreement. A section headed Duty to Consult a Licensed Attorney states that its output is legal information rather than legal advice and must be verified by an attorney licensed in the relevant state or venue, and requires a competent licensed attorney to review all deadlines and pleadings. The agreement also requires firms to keep a second, independent deadline system. From the AI Legal Index, based on each vendor's own published materials as of September 26, 2026. No vendor pays for placement.
Which AI model does LawX use?
LawX hosts accounts in German data centers. LawToolBox names Microsoft Azure OpenAI, running inside the customer's own Microsoft tenant. From the AI Legal Index, based on each vendor's own published materials as of September 26, 2026. No vendor pays for placement.
How much do LawToolBox and LawX cost?
LawToolBox publishes per user monthly rates by firm size: $35, $33, $23 and $19 billed yearly, or $42, $40, $30 and $22 billed monthly, for every Microsoft 365 mailbox, with its AI priced separately. LawX charges €159 per license a month on annual payment, including onboarding, data migration and support. From the AI Legal Index, based on each vendor's own published materials as of September 26, 2026. No vendor pays for placement.
Neither vendor paid for inclusion, placement or a grade, and neither reviewed this page before it published. Everything on it comes from public material on the dates shown. How the index grades.
Three points to weigh. LawToolBox's agreement caps its liability at a refund of up to six months of fees and warns that its deadline charts may be out of date. Its pricing page says its rules team keeps deadlines current. Both statements are published. LawX publishes no customer agreement, and its privacy policy covers only its website and sales process. LawX states its own ISO 27001 certification is in preparation. Neither vendor reviewed this page.