Luminance vs Oneflow: how they compare in 2026
Luminance is a fit for legal teams that want AI negotiation in Word, analysis across related agreements and more explicitly described checks on model output. Its architecture can use model agreement or a source grounded critic, retry a failed result and return unresolved work to a person. Oneflow provides a different operating center: editable web agreements, CRM populated contract data and administrator configured playbook findings. Oneflow describes human review but does not publish an equivalent retry and escalation structure. For that difference in how questionable output reaches a reviewer, AI Legal Index identifies a concrete control comparison. Luminance's agreement permits customer specific private learning and improvement, while Oneflow expressly prohibits model training on customer data. Oneflow's public Business floor assists budgeting, but AI beta charges and its generative AI confidentiality exclusion remain material to procurement.
At a glance
All 15 axes, side by side
The same grid applied to every vendor in the index, graded from public sources. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
Luminance uses models throughout contract interpretation, negotiation and portfolio analysis. Luna Crescent specializes in extraction, classification and other repetitive legal tasks, while additional models handle work that benefits from broader generative capabilities. A routing layer selects the model for each task, and separate validation models test important answers. The repository connects agreements and amendments into context for later questions, and negotiation uses prior concessions and approved positions to generate markups. Workflows turn those findings into contract actions across legal and business teams. The central service depends on model generated understanding of contractual language and relationships, rather than a template library alone.
AI supports several substantial contract tasks within Oneflow's wider platform. Write with AI drafts, edits and translates text inside an agreement; AI Extract imports participants, dates and duration into editable metadata. AI Review compares terms with a workspace playbook, and AI Insights aggregates the resulting risks across the portfolio. The premium package adds custom rules, dashboard widgets and a report for negotiation follow up. Electronic signatures, editable HTML agreements, permissions, approvals and renewal reminders continue to work without these models. Customers can disable AI, and several review capabilities remain in beta. AI therefore changes how users analyze contracts without replacing the underlying contract system.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
Luna Crescent is tested against ContractIQ Bench, with 189,000 manually annotated data points covering provisions such as liability caps, termination rights and confidentiality. Testing includes unseen concepts and blind review by legal specialists. Luminance claims 5 percent higher accuracy than leading general models without an absolute result or named comparators. Separate validation checks important outputs against model agreement, source evidence and task requirements. A failed check can lead to a retry and a visible request for human review. The model is also trained to identify missing information rather than fill the gap. Public sample tasks, a reproducible evaluation set and detailed error rates are not available.
Review findings connect to highlighted passages in the agreement, with controls for moving between them. Each finding carries the relevant playbook concept, configured feedback and example clause text. A separate view identifies required clauses that the review did not find, while portfolio charts open the corresponding contract list. This lets the reviewer compare a proposed concern with the actual wording and the organization's rule. Oneflow warns that generated text can misstate facts, numbers and law and recommends human correction. No reproducible accuracy study, error rate or jurisdiction specific evaluation accompanies these features. The contract highlighting supports source verification, not validation of legal authority.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
Business users can generate and progress routine agreements under legal approved templates and role permissions, with nonstandard terms routed to legal. Proposed negotiation language appears in Word. For important AI outputs, a separate model or panel checks agreement, supporting evidence and task requirements. Every required critic check must pass; a failed check prompts another attempt using the feedback, followed by a review flag if the problem persists. Customer decisions and workflow actions retain an audit trail. The agreement requires manual interpretation of all results, and the AI terms require interfaces that support human oversight of the system's operation and limitations.
Administrators enable AI Review for a workspace and configure its playbook, including which clauses matter, which findings count as risks or issues, and what feedback appears. Role permissions separately control access to individual reviews and the Insights dashboard. Sent contracts receive continuing analysis; draft contracts require a manual review action. A person can inspect highlighted text, edit the playbook and use example wording when revising an agreement. The AI appendix advises human review before relying on output. No confidence cutoff, mandatory lawyer approval after an AI finding, or correction route for an already approved mistake is specified. Risk colors classify findings rather than stop execution.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
Current customer examples tie specific organizations to contracting work. AMD reports finding precedent language in under two minutes, Emma Sleep reports twice as many contracts reviewed per quarter, and Avianca claims 90 percent less document review time. Repository examples include Yokogawa's 99 percent faster response to business questions and Trench Group's two hour tariff analysis, compared with two weeks and about €11,000. Workflow examples include ProSapient reducing eight steps to three and Hitachi moving from NDA generation to signature in under five minutes. These are vendor presented customer results, without a common study protocol or dated measurement period. The current customer base exceeds 1,000 enterprises.
Puzzel's Sales Operations Manager, Anette Johnsen, describes generating offers and contracts from Salesforce opportunities with items from related CPQ quotes. She identifies a concrete benefit of the HTML format: participants revise one agreement instead of uploading successive files before signature. Other named users include Systembolaget's Head of Indirect Sourcing, Tor Myhrman, and Hedin Bil's HR Business Partner, Elin Skoglund, who describe handling agreements and maintaining oversight. These accounts establish operational use across sales, procurement and HR. They do not isolate AI review performance or supply a measured error reduction, evaluation period and sample for Oneflow's current AI packages.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
Each customer has an isolated environment with separate workloads, data and layered access controls. The agreement treats private learning and outputs as customer property and confidential information, and limits support access to service delivery. It also licenses customer data for product improvements, private learning and usage insights; there is no general prohibition on learning from customer content. Private learning stays with that customer, while nonidentifying usage insights can be retained for improvement. Inputs sent to external models are permitted disclosures directed by the customer. Attorney client privilege and work product are not directly protected by a specific clause, and provider retention limits are not stated in the model list.
The AI appendix expressly prohibits Oneflow from training any AI model on customer data and takes precedence over conflicting general terms for AI features. Ordinary service confidentiality continues while information remains confidential, with restrictions on compelled disclosure. There is a consequential exception: the generative AI section excludes Oneflow's contractual confidentiality obligations along with liability, indemnities and service levels. Review, Insights and Extract have a separate processing section tied to the DPA. Workspace permissions and optional provider controls support access management, but attorney client privilege and work product receive no specific undertaking. The contract therefore requires attention to the exact AI functionality being enabled.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
The master agreement prohibits treating the product as legal advice or a substitute for relevant independent or internal legal advice. All results require manual interpretation, and customers must tell third party users about those limits. AI Systems Terms add human oversight duties and describe the intended use as legal document analysis, research, contract analytics and legal workflows. The product also serves procurement, finance, sales and other business functions, with exceptions routed to legal. Specific lawyer competence procedures and supported jurisdiction boundaries are not stated. The license permits professional services firms to use the software when serving their own clients.
Oneflow's AI appendix says output is not legal advice, legal conclusions, recommendations about legal rights or an application of law to a customer's circumstances. It advises human review because generated content can misstate law as well as facts. A separate UK article maps solicitor responsibilities to SRA standards, confidentiality, client communication and supervision, and describes practical review and pilot controls. North American terms also prohibit treating the platform as a substitute for an attorney. The product nevertheless serves sales, HR and other users without legal qualifications. No comprehensive jurisdiction by jurisdiction set of product restrictions or lawyer competence program is supplied.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
AI Systems Terms require ongoing risk management, records of risks and tests, and data governance that considers bias, representativeness and missing data. The model evaluation process includes task benchmarks, complete workflow testing through ALumNI, blind expert review and a human sign off before a reversible production rollout. Luna Crescent releases must clear ContractIQ Bench and expert review before replacing a current version. These controls extend beyond the information security program and address model behavior before release. An individually accountable AI governance owner and results showing uneven performance across matter types, parties or populations are not specified.
Oneflow promotes human accountability and warns against automation bias in its guidance for UK legal teams. It recommends evaluating missed issues, overrides and review quality rather than relying only on speed, and says its AI performs best in English and Swedish. These are useful limits and principles for customers designing a pilot. The public material does not identify an accountable AI governance owner, publish a model release evaluation, or report bias and performance differences across languages, contract types or populations. General ISO security controls and a list of security policies concern operational protection; they do not describe a separate AI testing and governance program.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
Customers can delete data during use, with removal from active stores within 30 days and backups within a further 30 days; faster deletion can be requested. Routine backups occur every 24 hours, remain within the hosting region and are kept for 14 to 28 days under the master agreement. Access follows least privilege, with multifactor authentication, optional single sign on and isolated customer workloads. The subprocessor list names hosting, model, support and operations services. New providers require 30 days notice and allow 15 days to object. The data agreement requires notice of a personal data breach within 24 hours, mitigation and information about the affected records and likely consequences.
Contract data is encrypted with AES 256 at rest and TLS 1.2 in transit. Customers configure permissions and retention policies; administrators can disable optional providers or AI features. Global DPA terms require breach notification without undue delay, while the North American DPA specifies 48 hours. Daily database snapshots last seven days, and system and authentication logs last 90 days. The DPA permits limited residual backups after deletion without fixing that period. Generative AI history can follow provider terms, while the product page promises removal of temporary review and import data. That leaves no single, specific retention schedule for every prompt and output.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
The October 2026 master agreement provides an IP indemnity for the product, with exclusions for unauthorized combinations, continued infringing use and unsupported versions. A performance warranty allows correction, replacement or a refund of unused prepaid fees. General liability is capped at the previous 12 months' fees, rising to three times that amount for specified data obligations. Confidentiality and IP ownership breaches are outside those caps, and certain legally nonexcludable losses remain protected. Claims require notice within nine months. The agreement separately disclaims losses caused by output errors or omissions and treats customer directed model transmissions as permitted disclosures. No insurance commitment is specified.
Ordinary global service terms include an intellectual property defense obligation, a material performance warranty and a general cap based on 12 months of fees. Those protections do not carry through unchanged to AI. The appendix supplies AI output as is, disclaims warranties and excludes all liability and indemnification undertakings for generative AI functionality, together with confidentiality obligations and agreed service levels. It also permits specified AI suspensions or termination without reimbursing fees. North American terms contain the same generative AI exclusion. A wrong clause, inaccurate summary or reliance on generated advice has no specific affirmative AI remedy in these published terms.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
Negotiation generates context based markups directly in Microsoft Word using approved language, earlier concessions and comparable agreements. The workflow product connects contract actions, tasks and approvals across business teams and lets other assistants access contract capabilities through MCP. Users can initiate analysis, summaries and reviews from connected applications. The platform also names Outlook, DocuSign and LexisNexis connections. Its technical terms allow uploads from document management systems and virtual data rooms. Connector specific configuration, permission inheritance and the exact fields moving in each direction are not explained. These connections bring AI contract work into existing applications while retaining the central agreement record.
The Salesforce integration creates interactive contracts from opportunities and transfers contact, company and opportunity data into them. Its configurable sync sends data from Salesforce objects into Oneflow and returns contract values to Salesforce. Product tables can reflect price books or CPQ quotes, while workflows map contract stages back to pipeline stages. Engagement events and status changes appear in the Salesforce timeline, and returned contract data supports dashboards. Oneflow identifies separate setup guidance for older and newer integration versions and compatibility with Professional edition upward. HubSpot, Dynamics 365 and other CRM connections complement this workflow; Salesforce and Dynamics can require premium integration charges.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
The standard hosted product runs in an isolated customer environment on AWS. Customers choose an available AWS data center through the order form, with backups in the same region and recovery objectives of 24 hours for a complete primary data center failure. Additional inference can run on AWS, Azure or Google infrastructure. Azure and Google processing follows an EU or UK hosting choice; other hosting choices use an unspecified international location. Direct OpenAI API processing takes place in the United States. The complete available hosting region list and routing of each model task are not specified, and a storage choice alone does not fix every processing location.
Production infrastructure uses AWS availability zones in Ireland, with document replication and backups in Sweden. Oneflow's AI FAQ broadly describes data as remaining in the EU, and Insights Premium is described as running within Oneflow's own EU infrastructure. The published subprocessor table gives a more varied picture: optional Legly review operates in Germany, optional OpenAI extraction in the United States, and Postmark email processing also in the United States. Administrators can disable optional services. The public descriptions do not fully reconcile these routes or map every AI function to a processing region. No on premises deployment is offered in the published package descriptions.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
ISO 27001:2022 covers the information security management system for development, sales, support and operation, including the Cambridge technical headquarters, remote workers and cloud processing. SOC 2 Type II examinations cover security, availability and confidentiality, alongside independent penetration tests. Contractual measures include encrypted storage and transport, nightly operating system updates, daily backups, least privilege access and a dedicated data protection officer. Senior leaders review the security program quarterly, and a security advisory board supports it. Audit information and certificates are available through the contractual review process. The auditor names, report dates and examination periods are not specified in the current assurance statements.
A public certificate issued by Qvalify covers Oneflow AB's digital solution for contract automation under ISO 9001:2015, ISO 14001:2015 and ISO 27001:2022. It was issued on June 28, 2024 and remains valid through June 30, 2027, identifying the Stockholm organization and its registration number. A June 2026 statement of applicability lists the security controls and their implementation status. The security center separately identifies SOC 1 Type 1 and SOC 2 Type 1 reports issued by Grant Thornton, available under NDA. Those reports concern control design; neither is identified as a Type II examination of operating effectiveness over a stated period.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
Luna Crescent is a family of proprietary legal models developed from a general foundation model and specialist contract training. It works alongside other models selected by task through benchmarks and expert review. The subprocessor register identifies AWS, Microsoft Azure and Google Cloud for inference inside cloud environments, plus direct OpenAI API processing in the United States. The AI terms distinguish models hosted within infrastructure from requests sent to an external model provider. New subprocessors require advance notice, but the individual foundation models, versions and task routing remain unspecified. No equivalent notice commitment covers every model substitution within an existing provider.
The subprocessor list identifies Legly AB for contract review in Germany and OpenAI for extraction in the United States, alongside AWS infrastructure in Ireland and Sweden. Both AI suppliers are optional and controlled through account settings. The AI appendix directs customers to their Data Management page for the current generative model suppliers and their terms. It does not publish model versions or a complete function to model map. DPA provisions require reasonable advance notice of subprocessor changes to the customer's designated email address and allow a 14 day objection. That process concerns suppliers, without promising notice of every underlying model change.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
Subscription allowances measure the number of files held in the product, and each version counts as a separate document. Annual uploads are subject to a fair use ceiling of twice the contracted document allowance, regardless of later deletion. Fees, payment timing and the initial term are set in the order form rather than a public rate table. Renewal ordinarily repeats the initial term unless either party gives 90 days notice. The standard increase ceiling is the annual Consumer Prices Index change plus three percentage points, unless the order form says otherwise. Assisted implementation and extra module prices are not specified.
Business starts at $292 a month, billed annually, including five users; Enterprise has ten users and a custom quote. Business includes writing, extraction and summary features. Standard AI Review and Insights have conflicting public treatment: the pricing page marks paid beta additions, while September help guidance says they are included in Enterprise during beta. Insights Premium is explicitly a paid addition for Business and Enterprise. SMS, identity verification, premium integrations and enhanced support can cost more. A 14 day trial needs no card. Implementation has no published amount, and global annual renewals can increase by the greater of 5 percent or Swedish CPI.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
Legal, procurement, finance, sales, executive and HR teams use negotiation, repository analysis and workflows across commercial agreements. The license also permits professional services organizations to use the product for their clients and includes terms for United States government customers. The legal suite defines Corporate, Diligence and Discovery applications, while the AI terms describe legal document analysis, research, analytics and related legal workflows. Examples span NDA creation, supplier review, liability positions, tariffs and renewal obligations. Precise firm size segments, supported research jurisdictions, language limits and excluded practice areas are not stated. Current product positioning extends across an enterprise's contract work.
Legal, procurement, sales, finance and HR teams can create and manage agreements in Oneflow. Legal users configure review rules and approve terms; business teams use reusable templates and CRM data for offers, sales agreements and employment documents. Named customers span telecoms, retail, recruitment and public sector purchasing. UK guidance also addresses solicitors using AI for commercial contract review, bringing professional duties into the intended audience. AI is optimized for English and Swedish, with variable results in other languages. The product does not supply a jurisdiction specific research corpus, and its coverage statements do not define supported litigation work or every category of legal agreement.
The 12 legal signals, side by side
Recorded rather than graded. These are the questions a practitioner has to answer before a tool touches a client matter, and the answers are taken from public material only.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
The master agreement licenses customer data for product improvements, private learning, usage insights and outputs. Private learning means recognizing new clauses and contract types from customer training; it belongs to the customer, remains confidential and is not shared across customers. Nonidentifying usage insights may be retained indefinitely for improvement. No general training prohibition overrides those rights. Inputs used with additional model features may also be transmitted to the named provider at the customer's direction.
The AI appendix forbids Oneflow from using customer data to train any AI models and overrides conflicting general terms for AI issues. Inputs and attributable outputs fall within the customer data definition. The general service license permits improvement and anonymized analysis, and AI feedback may improve accuracy, but those clauses do not remove the express training ban. The product FAQ also says underlying models do not train on customer data.
Separate provider processing, retained history and the generative AI confidentiality exclusion remain relevant to handling client material.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
Customers can delete data at any time. Active data stores remove it within 30 days, with backup removal within a further 30 days and expedited deletion available on request. The agreement also provides a 30 day period for retrieving and deleting data after the term ends. Routine backups have a separate 14 to 28 day retention period. No setting guarantees zero retention across application records, logs and external model processing.
Oneflow permits customers to set retention policies for stored contracts, and its AI page says temporary import, review and Insights data is removed after use. Generative AI has a different contractual provision: input questions and output responses may remain as history under the model supplier's current terms. No uniform period covers that history or every provider copy. Daily database snapshots last seven days, system logs last 90 days, and residual backups after termination have no precise DPA deadline. Contract deletion therefore cannot be treated as an immediate purge of all AI processing records.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
Each customer instance isolates workloads and data through logical, technical and access controls. Administrators configure roles, multifactor authentication and single sign on, while support access is limited to service delivery and may follow additional customer policies. The product applies its own access controls around the contract workspace. No current commitment describes inheriting an external document system's permissions at retrieval time or enforcing a law firm's matter level ethical walls.
Workspace roles control access to contracts, and Oneflow provides distinct permissions for AI Review and the Insights dashboard. Administrators enable review for selected workspaces and can disable AI features or optional suppliers. These controls can support departmental separation and limit who sees review results. The descriptions do not specify how retrieval enforces every contract permission within a workspace, how restrictions propagate to generated summaries, or how a law firm's matter wall follows an AI request. Permission controls alone do not establish a complete ethical wall mechanism for confidential client matters.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
The confidentiality clause requires notice of legally required disclosure where lawful, giving the customer a reasonable opportunity to respond. Luminance must cooperate with reasonable efforts to resist, limit or delay disclosure at the customer's expense. A separate clause also requires prompt notice and cooperation when responding to a subpoena or judicial, administrative or arbitral order. No aggregate transparency report is specified.
Global confidentiality terms require reasonable prior notice when disclosure is legally compelled, unless notice is prohibited, and reasonable assistance at the customer's expense in seeking protection. That gives the customer an opportunity to contest or narrow a request involving ordinary confidential service data. The AI appendix expressly removes contractual confidentiality obligations for generative AI functionality, so the same protection should not be assumed across every AI route.
No transparency report accompanies the commitment. North American and global agreements need to be matched to the contracting entity and enabled services.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
Contract answers draw on customer agreements, amendments, negotiation history and the platform's standard legal concepts and clauses. Luna Crescent separately learns from more than 3.4 million proprietary legal data points, with an evaluation set of 189,000 annotated points. The customer retains its data and private learning. The sources and rights behind the general training collection, and any primary law collection used for legal research, are not identified individually or accompanied by an update schedule.
Oneflow's review and portfolio analysis work with the customer's agreements and configured playbook concepts. Example clauses come from the organization's rule setup, and drafting can use selected text as input. No catalog of legislation, reported decisions or licensed legal commentary is supplied for these features. Naming a model provider does not identify the legal sources in its training data or their licensing terms.
The UK educational articles link professional guidance, but those links do not constitute a legal research corpus inside the product.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
Negotiation and repository answers are grounded in contracts, amendments and earlier agreed positions. The AI terms also include legal research among the product's intended functions. No named commercial citator, subsequent history calculation or treatment flag accompanies that research description. Source grounded validation checks whether a response follows the supplied evidence, which is separate from checking whether a legal authority remains valid.
Highlighted review passages let a user inspect contract language, not whether a judicial decision remains authoritative. Oneflow has no published citator connection, treatment history service or automated check of legislation's current status. Teams maintain their own playbooks, including preferred and fallback clauses, so changing a rule after a legal development remains an organizational responsibility. The appendix warns that AI can generate incorrect law and recommends human review. A portfolio risk chart or missing clause flag does not establish that the underlying legal proposition remains valid.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
Luna Crescent is trained to identify information that is absent from the contract rather than invent it. Differential Validation separately checks important responses through independent model agreement or a source grounded critic. A failed check can trigger a retry using the identified problem; continued failure results in a review flag. The current explanation describes those behaviors without a public evaluation of their refusal rate or missed unsupported answers.
The AI Review interface separates findings from a missing clauses view. That view identifies playbook concepts absent from the agreement, giving the reviewer an explicit negative result instead of merely omitting a match. Red and yellow labels distinguish issues from risks; they are not numerical confidence estimates. Oneflow warns that generated facts and law can be wrong, but does not publish a general abstention rule for drafting or summaries. Missing clause handling is described for review, without promising that every unsupported question will be refused.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
The AI Hallucination Cases database contains no court or disciplinary entry naming Luminance as the source of fabricated legal citations as of October 15, 2026. Luminance's principal workflows concern contracts, but its AI terms also include legal research. The AI Systems Terms require human oversight, and the master agreement assigns the customer responsibility for manually interpreting and using output, including checking its relevance to the particular legal task.
Damien Charlotin's AI Hallucination Cases database contained no entry naming Oneflow as of October 16, 2026. The result covers the database's reported court incidents, not every private use of the product or every inaccurate contract response. Oneflow itself discusses court examples involving generic AI tools in educational material; those examples do not identify Oneflow as the tool involved. Contract drafting and risk analysis can still produce incorrect law, which the AI appendix expressly warns about. The absence of a named incident provides no accuracy guarantee.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
Professional services customers can identify mandatory requirements imposed on technology providers by their governing body before the order is signed. The master agreement commits Luminance to meet those requirements when compatible with applicable law, and permits regulatory access and assistance in specified circumstances. All output still requires manual interpretation. The agreement does not map these commitments to a named bar opinion or a particular lawyer ethics rule.
Oneflow's UK contract review guidance maps SRA standards and conduct duties to human supervision, confidentiality, client transparency and practical controls. It also discusses insurance, data protection and the legal team's responsibility for final judgment. This is a jurisdiction specific mapping with suggested review steps, rather than a generic statement that lawyers remain responsible. It is vendor guidance, not regulator approval or an independent finding of compliance. The mapping does not establish equivalent coverage for every jurisdiction in which Oneflow sells its platform.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
Luminance licenses its product both for internal business work and for services delivered to clients. Current customer examples include faster precedent retrieval, shorter review and fewer workflow steps, while corporate deployments also report operational savings. The contract permits customers to earn revenue from the resulting output. No guidance connects the time saved to a law firm's client invoice, and the workflow audit trail is not presented as a legal time billing record.
The vendor's UK AI review material addresses solicitors as well as internal legal departments and promotes faster review with retained professional judgment. Its product pages also describe reducing routine contract work and administrative effort. No accompanying procedure explains how a firm records AI time, adjusts a client invoice, discloses savings or passes through Oneflow charges. Subscription pricing is the buyer's software cost rather than a client billing policy.
Because the audience includes lawyers serving clients, the time savings claims cannot be treated solely as an organization's internal operating expense.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
The current list identifies AWS, Azure, Google Cloud and OpenAI for hosting or inference, plus named support and operations providers. It distinguishes processing inside cloud infrastructure from inputs sent directly to OpenAI and states broad processing locations. The data agreement requires 30 days advance notice of a provider change, with 15 days for objections. No separate client consent or outside counsel AI disclosure template accompanies the legal suite.
Oneflow supplies a public DPA, global and North American service terms, an AI appendix and a subprocessor table with functions and processing locations. Optional AI suppliers include Legly and OpenAI, and administrators can control optional services. A public ISO certificate and statement of applicability support security diligence; SOC reports require an NDA. These materials help counsel explain data handling to a client.
They do not form a dedicated client AI disclosure package, and the generative AI confidentiality exclusion and conflicting regional descriptions require specific attention in any outside counsel approval process.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
Workflows keep an audit trail of actions and decisions, and the AI terms require proportionate event logs retained for the agreement's duration. Important responses can carry a validation result or a request for review, with contract evidence behind the answer. The legal agreement also provides assistance to regulators. A per document export combining the exact model used, retrieved sources and a person's verification is not specified.
AI Insights supports an export of portfolio analysis, and reviewers can inspect the contract passages associated with a playbook finding. Insights Premium adds an action report for internal discussion and negotiation. Enterprise also includes an account audit log, while signing workflows maintain transaction records. The published export instructions do not establish a complete record of model identity, prompt, output and human edits for each AI action.
These are useful contract administration records, but no court disclosure template or complete model provenance export is described for a later filing.
The questions both sides leave open
Derived from the records above rather than written, so it cannot favor either vendor. Take these into both conversations and ask each side the same question.
- Good Law Verification
Which one fits
Choose Luminance if
- Negotiation primarily takes place in Word using approved positions.
- The team needs analysis across agreement families and amendments.
- Published model checks and escalation behavior are important selection criteria.
Choose Oneflow if
- The main workflow runs from CRM opportunity to live agreement and signature.
- Administrators want explicit workspace rules and portfolio charts.
- The initial budget benefits from a published five user package.
In summary
Luminance
Luminance combines negotiation, Spotlight portfolio analysis and automated legal workflows. Its model architecture describes source grounded checks, retries and human escalation alongside customer specific private learning.
Oneflow
Oneflow joins AI review to a shared agreement process involving legal and business users. Its CRM mappings, signature functions and configurable workspace playbooks support contract administration across departments.
Questions buyers ask
Does Oneflow publish the same model checking architecture as Luminance?
No. Oneflow provides review controls and warnings about errors, while Luminance describes independent model agreement or a separate critic, possible retries and human review after unresolved failures. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.
What work does Luminance Spotlight address?
It analyzes the repository, links agreements with amendments and compares contract collections against the organization's standards. Oneflow's portfolio Insights instead organizes risks around configured workspace playbook concepts. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.
Can private learning remain confidential without being prohibited?
Yes. Luminance's agreement treats customer specific private learning as confidential and owned by the customer while permitting it. Oneflow uses a different rule by prohibiting model training on customer data. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.
Which difference is most useful in an AI review pilot?
When testing an ambiguous or unsupported output, AI Legal Index contrasts Luminance's described retry and escalation process with Oneflow's inspectable playbook findings. The pilot can reveal how much judgment still depends on the reviewer's manual intervention.
Neither vendor paid for inclusion, placement or a grade, and neither reviewed this page before it published. Everything on it comes from public material on the dates shown. How the index grades.
Luminance's private learning permission is not a claim that customer content trains models for other customers.