Norm Ai vs Red Marker: how they compare in 2026
Norm Ai builds agents from legal and institutional standards for recurring compliance work. Regulated content review sits alongside questionnaire completion, where approved answers and supporting materials can be reused across submissions. The AI Legal Index identifies source excerpts, staged approval and exports in the questionnaire's original format as useful parts of that broader workflow. Customer review decisions become part of the institution's reusable knowledge. Red Marker has a more focused content inspection sequence: scan an asset, identify configured risks, consider a suggested rewrite and obtain professional approval. Its website reporting also covers owned and partner content after publication. The AI Legal Index identifies that recurring web reporting as an additional surface beyond draft review. Norm's legal engineering approach serves several institutional workflows, while Red Marker combines a defined marketing review process with authoring integrations. The choice depends on whether the recurring work centers on advertising assets or extends into producing sourced responses for other compliance processes.
At a glance
All 15 axes, side by side
The same grid applied to every vendor in the index, graded from public sources. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
The AI is the product, and the company is organized around building it. Regulations are converted into executable AI agents through a proprietary domain specific language. Agents traverse decision trees to reach compliance determinations, and the entire platform, LEAP, exists to build, evaluate and deploy those agents. The vendor describes itself as the Regulatory AI agent company. Remove the models and what remains is a representation of regulations with no ability to apply them. The company also created a job function, Legal Engineer, to build AI agents, staffed by former attorneys given intensive language model training.
Machine learning identifies risky language and images within marketing assets, while RiskGPT generates alternative wording for selected passages. Natural language processing, optical character recognition and sentence embeddings work alongside customer specific logic and rule libraries. The service also scans websites and produces reports about regulatory and brand concerns. Users can route content through sequential approvals and follow its review status. Those workflow and rule management functions have value independent of generated wording. AI drives the interpretation and revision of content within a broader compliance platform that also provides conventional controls, reporting and structured coordination between marketing and legal teams.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
Grounding is real, enforced by the architecture and documented, but no measurement is published. Regulations are encoded through a proprietary domain specific language into decision trees that a person can read and a machine can execute. An agent follows that tree step by step to reach a determination rather than generating an answer from model memory. The vendor states every determination carries an explanation identifying what may be problematic and under which regulation. A compliance team can therefore see the legal basis for the outcome and what would need to change. Because the reasoning path is the encoded regulation itself, the output traces to a provision rather than to a retrieved passage. LEAP is stated to include automated evaluation pipelines, so evaluation is built into deployment. Searches of the platform pages, the resources section, the company blog and the trust center found no accuracy figure, error rate, test set, published evaluation method or independent benchmark participation. The founder co authored a widely used legal reasoning benchmark.
RiskGPT generates proposed replacements for content that Red Marker's detection models have flagged. The vendor acknowledges that natural language generation is probabilistic and allows users to request a different suggestion. That warning does not quantify error rates or identify a test set for legal accuracy. Rule libraries name relevant regulatory provisions, but the output description does not promise an openable primary source for every suggested correction or test subsequent legal treatment. Reviewers receive contextual risk feedback and retain responsibility for approval. No independently reproducible evaluation establishes the frequency of unsupported regulatory assertions, missed issues or incorrect replacement language in this workflow.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
A real published commitment with a described division of labor, short of thresholds. The vendor states the operating model plainly: an agent conducts the initial compliance review of, for example, marketing communications against SEC or FINRA rules, and a human professional then reviews the findings and completes the determination. That allocates the decision rather than asserting human involvement. Supporting surfaces are described: explanations attached to every determination, and collaboration tooling through which teams tag each other, review AI judgments and centralize decision history. Oversight is also a staffing structure, with Legal Engineers building and supervising the agents and adjusting them to client specific guidelines. The vendor is separately building supervisory agents that monitor other AI systems for compliance, which is an oversight product rather than an oversight policy. Not located: any threshold at which an agent defers, what it does when a determination is genuinely ambiguous, and what the vendor commits to when a determination is wrong.
RiskGPT is enabled by customer choice and leaves each proposed change under user control. A marketer can insert the suggestion, reject it or request another version before sending content for compliance review. The separate Approvals function routes an asset to named individuals or teams in sequence and displays its current stage. Contract terms require trained legal or compliance professionals to check and approve content before publication. These controls establish review responsibility and visible intervention points. The service does not publish a confidence threshold that stops processing, a mandatory automated escalation rule or a defined recovery process after a mistaken compliance conclusion.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
Institutional signals stand in for deployment evidence. Published material describing a Legal Engineer's working day refers to a client meeting with a top ten global asset manager, and the vendor states a focus on Fortune 100 customers, but no customer is named. Vanguard, Blackstone, Citi and TIAA are strategic investors from the regulated industries the product serves; this is context, not evidence of a deployment. Searches of the platform pages, the resources section, the company blog and the news announcements found no named customer with figures and a date, no case study with an assessable method, and no adoption count.
Angle Auto Finance describes combining Red Marker with IntelligenceBank's repository and workflow platform for a network of more than 800 dealerships and other partners. Its November 2024 account reports a 30 day deployment, two minute asset reviews and 45 internal and external users. Dealers submit advertising for diagnostic feedback before final approval, while websites receive monthly light scans and quarterly deep scans. Named customer staff describe the process and its benefits. The numerical results lack a comparable baseline and a reproducible calculation for the claimed labor savings. The account therefore supports an operating deployment without isolating the contribution of Red Marker from the combined platform.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
Confidentiality is asserted through a trust program without specific commitments. The trust center states a commitment to rigorous security practices including SOC 2 compliance, continuous monitoring, and a company wide culture of data protection. That is a general assurance rather than a set of terms. Searches of the trust center, the platform pages, the resources section and the company blog found no statement on whether customer content may be used to train or improve models, no retention or deletion terms, no segregation model between customers, and no treatment of privilege or work product. The platform reviews internal communications, draft marketing and investor materials, and agreements before they are issued. It sees regulated firms' content at the point where a compliance problem would still be undisclosed. The trust center renders client side, its control detail was not read, and it may say more.
The customer retains ownership of uploaded data, and both parties undertake confidentiality obligations covering employees, agents and subcontractors. Third party model training is prohibited, while a separate clause permits deidentified customer data to improve service accuracy. Purchased custom models require consent and must benefit the particular customer's use. The service also prohibits storage of personally sensitive information, including financial identifiers and health records. It is therefore not presented as a repository for unrestricted client confidences. Attorney client privilege, legal work product and matter level retrieval barriers are not directly treated, and conditional provider retention language does not promise universal zero retention.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
Norm Ai answers the advice question through structure rather than a written position. It builds on both sides of the boundary between software and legal advice: the platform performs compliance analysis for enterprises, and in 2026 the company launched Norm Law, which it describes as the first fully AI native law firm for institutional clients. Norm Law is chaired by the former chairman of Sidley Austin and is recruiting partners. Legal advice is therefore delivered by a law firm with admitted attorneys while the software delivers analysis, which is a real separation rather than a disclaimer. In the operating model, an agent performs initial review and a human professional completes the determination, and in the law firm an experienced attorney decides what happens next. The team includes former regulators, among them a former SEC Commissioner. Searches of the platform pages, the resources section and the company site found no statement on advice versus tooling, no treatment of competence or supervision duties, and no jurisdiction limits.
The contract expressly treats the service as a business tool for competent personnel and denies that it supplies legal or regulatory advice, opinions or signoff. Trained compliance or legal professionals must still check and approve material before it is published. Product guidance allows marketers and content creators to use the tool without a legal qualification, with expert reviewers responsible for final decisions. This establishes the intended professional boundary and a supervision requirement. It does not map lawyer competence or client consent duties to named jurisdictions, or describe separate disclosures for consumers receiving generated guidance. The principal use remains internal marketing compliance review.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
There is a governance framework with real substance built into the product, without certification, published results or bias disclosure. Several elements are mechanisms rather than principles. LEAP is stated to include automated evaluation pipelines as part of taking agents into production, so evaluation is a gate. Every determination carries an explanation, and the decision tree is readable by a person, so a lawyer can audit an agent's reasoning without reading code. Legal Engineers build and supervise agents and maintain them as regulations change. The company also builds supervisory agents to monitor other AI systems against laws and policies, and convenes a forum on AI, law and policy involving legislators and regulators. Not found: an AI management certification such as ISO 42001, a named owner accountable for model governance, published evaluation results as distinct from the existence of pipelines, and any disclosure about uneven output across firms, content types or populations.
Red Marker acknowledges variability in generated suggestions and keeps acceptance of AI output with the customer. Rule configuration is tailored with implementation staff and optimized through continuing support. Its security engineering principles concern software and infrastructure protection, while claims of more objective review concern the consistency of compliance feedback. A separate AI governance framework does not identify release approval criteria, an accountable model risk owner or test results for uneven performance across languages and industries. The expansion into multiple languages is not accompanied by comparative reliability measurements. Customer supervision and customization are visible, but a vendor model assurance process remains unspecified.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
A general security posture is stated without operational detail. The trust center states SOC 2 compliance, continuous monitoring, and a company wide culture of data protection and integrity. The trust center sits at a stable URL on a recognized compliance platform, which gives a self serve route. Searches of the trust center, the platform pages and the company site found no retention period, deletion control, encryption specifics, access control detail, named subprocessor list, hosting provider or region, or incident or breach notification practice. The trust center renders its contents client side; they were not read and may say more.
Encryption, customer controlled accounts, backups and restoration commitments govern service data. The privacy policy promises notice of a confirmed personal data breach within 24 hours and distinguishes account records, aggregated usage and uploaded service content. Paid service data remains for at least 30 days after the last transaction, subject to audit or legal needs; active prompt and output lifetimes are not fixed. Terms name several model providers, but the wider service provider inventory largely identifies functions instead of companies. Some optional tools process information in other regions. These policies describe operational safeguards without a complete subprocessor inventory or a universal deletion schedule.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
No published indemnity, liability cap, carve out, warranty on output or insurance position was found, and no customer terms of service is published on the site. This product makes compliance determinations about content a regulated firm is about to publish. A wrong determination can therefore lead to a regulatory finding against the customer rather than merely a bad draft, and nothing published addresses who carries that exposure. The law firm entity, Norm Law, would carry professional liability of its own, which the software vendor's silence does not cover.
IntelligenceBank promises material conformity to agreed service specifications, supplies response and restoration targets and indemnifies customers for specified intellectual property infringement and unlawful acts. Aggregate liability is generally capped at payments made during the relevant 12 month period, with consequential losses excluded. Technology professional indemnity, cyber and other insurance categories are identified without policy limits. A customer terminating for an unremedied qualifying breach can receive unused prepaid fees under the stated procedure. These are contractual remedies, but the terms expressly disclaim responsibility for detecting every legal breach and do not warrant the accuracy of individual compliance suggestions or generated replacements.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
Integration is described at workflow level without named connectors. The vendor's stated design is compliant by design, embedding compliance checks into business activities rather than running them separately. It covers content generated by AI, internal communications, agreements, marketing content and sales materials, and the platform is described as monitoring workflows and alerting when something drifts out of compliance. Searches of the platform pages, the resources section and the company site found no integrations page, no named connector for content management, communications archiving, document management or customer relationship systems, and no API documentation. The product's value depends on intercepting content before it is published, and no integration surface is named.
Word and PowerPoint integrations let authors invoke a scan and receive contextual compliance findings while creating material. The privacy notices explain that authorized document content is extracted, analyzed and returned as annotations. RiskGPT then displays suggested changes in the application or office add in, where a user can insert a revision or request another. This specifies the input, returned result and user's control over writing back to the original asset. The public integration list separately marks Jira, Red Oak, Seismic and Veeva connections as forthcoming or proposed. Those planned links do not carry the same operational status as the described authoring integrations.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
Nothing was found on the deployment model. No hosting provider, named region, residency choice for customers or tenancy model is published, and nothing states where processing happens as distinct from where data is stored. The customer base is regulated financial institutions, for whom data location is often a supervisory requirement.
The service uses regional cloud hosting, with Red Marker customers assigned to United States, Australian or European infrastructure. Its FAQ identifies AWS regions in Northern Virginia, Sydney and London, with disaster recovery locations in Oregon, Tokyo and Ireland respectively. Advanced AI rules use private models in named regional markets, and a model outside the customer's data geography requires prior consent. Some separately purchased IntelligenceBank services have their own processing locations. The published information does not map every RiskGPT operation, model version and subscription option to a complete processing route. Storage regions and conditional model geography are clearer than the full feature level residency matrix.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
A trust center exists, and the certification is claimed without scope or evidence. The trust center sits at a stable URL on a recognized compliance automation platform and states a commitment to rigorous security practices including SOC 2 compliance and continuous monitoring. The portal is a real self serve route. Not found: whether the SOC 2 is Type 1 or Type 2, any coverage period, audit scope, report date, named auditing firm, other certification, or published request flow for the report. The trust center renders its contents client side, and they were not read. That is a limit of the research, not a finding about the vendor, and the portal may say more.
Red Marker states that it is ISO 27001 certified and describes secure engineering, authentication and infrastructure protections. The common service agreement also specifies annual external penetration testing and an ISAE 3402 or SOC 2 compliance audit, with topline results available to customers on request. Hosting provider compliance is identified separately from the service's own certification. The linked security portal was unavailable at verification, and no current certificate with scope, audit period and assessor was accessible through that link. Consequently the public materials identify assurance standards without exposing the complete evidence needed to establish their coverage of every Red Marker AI component.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
The architecture is described in detail, and the model layer is not identified. Agents are described as driven by language models, traversing decision trees encoded in the vendor's proprietary domain specific language, with proprietary prompt optimization and structured reasoning frameworks in LEAP. A buyer can see that the regulatory logic is the vendor's own and that a general purpose model executes against it. Searches of the platform pages, the resources section, the company blog and the trust center found no named model or model provider, no statement of where models run, no subprocessor list, and no commitment to notify customers when the model supply chain changes.
RiskGPT's FAQ identifies OpenAI's GPT 3.5 family and explains that selected risky sentences and instructions are sent through the API, rather than the entire asset. The wider agreement names Microsoft Azure, OpenAI, AWS Bedrock and Google for third party AI capabilities, with private regional processing and consent for exceptional geographic changes. It also permits purchased custom models under customer consent. These disclosures identify providers and part of the architecture, but do not establish the model version serving each current feature. The general right to substitute service components does not provide a specific commitment to notify customers of every model or provider replacement.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
No pricing page was found, no rate is published, no unit of charge is stated and no tier structure appears. Every commercial path found ends in a request for a personalized demo. No free trial or self serve entry point was found, and no third party pricing figure either. The customer base is large regulated institutions.
Document Scanning and Web Reports are separately described commercial offerings with private quotes. The former includes configurable risk detection, integrations, support and rule library options; Web Reports supplies recurring reports for selected sites and requirements. The agreement invoices access fees annually in advance and permits upgrades for additional users, data allowances, modules and features. It does not publish a rate, a definite charge per scan or rule, or a standard allowance attached to a named price. Implementation and custom configuration are scoped with the customer. The product split is visible, while actual pricing and the selected charging units depend on the order.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
Coverage is described with substance, and the regulatory focus is named at the level of sources. Regulatory scope is stated through the regimes the Legal Engineers track and encode: SEC, FINRA and CFPB, with GDPR referenced in comparison material. The vendor states the approach extends to anything a company is subject to rather than being limited to those regimes. The buyer is the large regulated enterprise, with chief compliance officers named as the main role and financial services the focus of the named regimes and investors. Functional coverage is listed by workflow: review of regulated content across marketing, investor relations and internal communications, questionnaire and information request completion, contract review, and supervision of other AI systems. Not found: an industry list beyond financial services, segmentation by organization size, jurisdictional coverage outside the United States, and any statement of what the platform is not built for.
Red Marker serves legal, compliance and marketing teams in regulated enterprises. Named sectors include financial services, insurance, healthcare, pharmaceuticals, telecommunications, automotive and food businesses. Rule library modules cover particular financial advertising requirements, and organizations can add their own brand standards and risk logic. The product checks drafts before publication and reviews owned or partner websites afterward, with authoring tools and structured approvals supporting both legal and marketing users. It also advertises expanded language coverage for international teams. A complete jurisdiction and language exclusion list is not supplied, and the service is not described as general legal research or client matter management.
The 12 legal signals, side by side
Recorded rather than graded. These are the questions a practitioner has to answer before a tool touches a client matter, and the answers are taken from public material only.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
No material found states whether customer content may be used to train or improve models, either way. The vendor describes LEAP as creating a compounding layer of institutional judgment that captures firm specific standards and continuously improves how those standards are applied. That is a claim about learning from firm material, and nothing says whether the learning stays with the firm it came from. The trust center renders client side and was not read; it may say more. Searched the trust center, the platform pages, the resources section and the company blog on 29 Aug 2026.
The agreement's accuracy improvement license permits use of deidentified customer data without restricting that permission to a named technical method. Separate provisions prohibit training third party models and require customer consent for purchased models tailored to that customer's use. Those narrower protections do not expressly remove the broader service improvement license for the vendor's own systems. RiskGPT's policy also excludes OpenAI API training.
The permission recorded here concerns the residual contractual improvement right; it does not mean that third party training is allowed or that customer specific model training occurs automatically.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
No public material states how long submitted content, compliance determinations, explanations or decision history are kept, whether a customer controls the window, or whether deletion is available. The product centralizes decision history as a feature, so the record builds up by design. It includes determinations that content was non compliant before it was corrected. Searched the trust center, the platform pages, the resources section and the company site on 29 Aug 2026.
Paid service content is kept for at least 30 days after the last customer transaction, with auditing and legal exceptions. Account data and anonymized aggregated usage may remain indefinitely, while other contact records have separate periods. The contract also describes nightly database backups retained for 30 days and customer download options before expiry. These are backup and exit arrangements, not a fixed active lifetime for every prompt and output.
Advanced models use zero day retention only where available, so that phrase does not establish a universal no storage policy.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
No vendor material addresses segregation between customers, users or business units. A large financial institution operates information barriers between deal teams, research and trading as a regulatory requirement, and this platform reviews internal communications and investor materials across the firm. Nothing found states whether agents, determinations or decision history respect those barriers. Collaboration tooling is described in terms of teams tagging each other and centralizing decision history, and nothing states whether access is shared or separated. Searched the trust center, the platform pages, the resources section and the company site on 29 Aug 2026.
Customers administer authorized user access and can provide a customer success manager with a support license. Approvals can be directed to specified teams or individuals, and the agreement defines a dedicated customer platform with its own settings and data allowance. These arrangements describe account administration and workflow participation. They do not explain whether model retrieval checks permissions on each query, inherits a source system's access rules or separates individual client matters inside an organization. A reviewer assignment is not itself a restriction on what information an AI component can retrieve.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
No published customer agreement or data processing agreement was found. No clause committing to notify a customer of a government or law enforcement request for its data was found, and no transparency report. This platform holds records of compliance determinations, including determinations that a regulated firm's content failed a rule before it was fixed. Nothing published addresses what the vendor would do on receiving a demand for them. Searched the trust center, the platform pages, the resources section and the company site on 29 Aug 2026.
The privacy policy allows disclosure without consent when legal process requires it, including court orders, subpoenas and tax investigations. Its promise to notify applies only where notice is possible and appropriate. That qualification leaves a discretionary judgment beyond a simple prohibition imposed by law. The confidentiality clause separately permits disclosure required by law or securities exchange rules, without adding an unconditional customer notice obligation.
No published transparency report explains how often requests occur or how disputed demands have been handled for customers.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
Sources are named at the level of regulators and the maintenance process is described, but no license basis is stated. The source material is the body of regulation itself, and the vendor names where it comes from. Legal Engineers review regulatory updates from sources including the SEC, FINRA and CFPB and identify relevant changes for the agents, and regulatory logic is built and maintained inside LEAP as laws change.
The updating is done by staff rather than automated. No rights basis is stated, though United States federal regulations are in the public domain, so the license question largely does not arise. Also not found: a coverage list by jurisdiction, a completeness statement for any regime, or a stated lag between a rule change and the agent being updated.
Rule modules identify FINRA Rule 2210, SEC advertising rules, Regulation Z, MiFID II, SFDR and other named regulatory frameworks. Customers add internal requirements and custom risk rules for their content. This identifies the legal standards the compliance checks apply, but not a complete set of source publications, a licensing or public domain basis for each text, or a stated update delay across the collection. Customer configured logic and generated replacement language also remain distinct from an open library of authoritative legal materials with documented provenance.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
No material was found addressing whether authority carries a treatment signal or whether subsequent history is checked, and no commercial citator license was found. This product's source material is regulation rather than case law, so a citator in the usual sense is outside its design. The closest equivalent for a regulatory product is whether the encoded rule is current. The vendor describes Legal Engineers reviewing regulatory updates and maintaining the decision trees as laws change.
That keeps its own rules current but is not a treatment signal on cited authority. Searched the platform pages, the resources section and the company blog on 29 Aug 2026.
The service detects problematic claims, missing disclaimers and other advertising risks against configured requirements. No commercial citator or proprietary method for reviewing the later treatment of judicial authority is described. Website rescanning and rule maintenance can address changing content, but neither establishes that an opinion cited in a legal explanation remains valid. The RiskGPT process rewrites selected risky sentences rather than presenting a described legal history analysis.
Human legal review is required before publication, without a separate product function that verifies subsequent case treatment.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
No published material describes what an agent does when a determination is ambiguous or when the encoded rule does not reach the situation presented. No explicit path for declining to answer and no confidence signal shown to the user was found. Traversal of the decision tree is designed to end in a compliance determination, so what happens at a node the tree does not anticipate is an open design question. The published human review step, where a professional completes the determination, is the stage where a person sees the result, and nothing states that the agent flags uncertainty rather than resolving it. Searched the platform pages, the resources section, the company blog and the trust center on 29 Aug 2026.
RiskGPT warns that probabilistic generation can return varying suggestions and offers another attempt when a user dislikes the result. It does not describe an explicit refusal when a compliant rewrite lacks support, a confidence cutoff or a no answer response for an unresolved legal question. The user can decline a suggestion and send material to compliance, but that is human intervention rather than model abstention.
The published workflow therefore explains revision and review controls without establishing what the AI returns when it cannot justify a proposed correction.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
No court order, opinion or disciplinary record naming this product was found as of 29 Aug 2026. The search used the AI Hallucination Cases database maintained by Damien Charlotin, which tracks court decisions worldwide involving hallucinated content generated by AI and records the tool implicated where known. Published 2026 sanctions summaries and secondary sanctions trackers were also checked. The entries found name filers, and in some rows other products, rather than this one. This is a statement about the public record on the date shown, not a clearance.
The current AI Hallucination Cases database has no matching entry for Red Marker, RiskGPT or IntelligenceBank concerning fabricated legal citations as of October 16, 2026. Red Marker is used primarily for marketing compliance analysis and suggested changes to advertising content. Its own terms still require trained professionals to approve material and disclaim detection of every legal breach. Absence of a matching court record does not validate each compliance finding or generated sentence. It concerns fabricated citations specifically and carries no conclusion about the product's overall reliability.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
No engagement with any named ethics opinion or bar guidance was found, including ABA Formal Opinion 512 and state bar guidance. This company launched a law firm in 2026, describing it as the first fully AI native law firm for institutional clients and appointing a former Sidley Austin chairman to lead it. A law firm is directly bound by professional conduct rules, so the company has an entity subject to the guidance, and nothing found sets out its position.
The company also convenes a forum on AI, law and policy involving legislators and regulators. That forum engages with policy formation rather than with the conduct rules that bind its users. Searched the platform pages, the resources section, the company blog and the news announcements on 29 Aug 2026.
The service contract requires trained legal or compliance professionals to check material before publication and treats the software as a tool used with competent business judgment. These statements engage with supervision and responsibility in general terms. The vendor does not map the product to a named lawyer ethics opinion or specify how client consent and competence obligations differ among jurisdictions. A general FAQ quotation defining law technology does not supply that mapping.
Regulatory advertising rules in the rule libraries address content standards, rather than the professional conduct duties of a lawyer using AI.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
No record of AI assisted work kept per matter for fee purposes was found, and no guidance on billing, fees or disclosure to clients. No quantified time or cost savings claim was found either. The vendor's published framing is coverage and speed of compliance analysis rather than hours displaced. Norm Law, the related law firm, bills institutional clients directly, and no material found addresses how work done with AI is treated in those fees. Searched the platform pages, the solutions pages, the resources section and the company blog on 29 Aug 2026.
Marketing and compliance departments buy Red Marker to reduce their own content review effort and coordinate approval inside an enterprise. Advertised time savings concern that internal process, including work by marketing teams and reviewers. The service is not described as producing legal invoices, measuring outside counsel fees or turning reduced hours into a client charge. Its software subscription is paid by the organization using the workflow.
The Angle Auto Finance example concerns dealer advertising and operational capacity, with no outside lawyer to client billing relationship specified in the deployment.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
A trust center exists at a stable URL on a recognized compliance platform, stating SOC 2 compliance and continuous monitoring. It is a self serve route to whatever diligence material sits behind it. Searches of the trust center entry point, the platform pages and the company site on 29 Aug 2026 found no subprocessor list, no statement naming which model providers see customer content, no published data processing agreement, and no consent or notification material for clients.
The portal renders its contents client side and they were not read, so what a requester would receive is not known and the portal may say more.
The service agreement names Microsoft Azure, OpenAI, AWS Bedrock and Google for AI capabilities, and describes other optional services involving Zapier or processing in particular AWS regions. The RiskGPT FAQ adds a named model family and the limited sentence content sent to its API. That supplies a public model provider list, although it does not map all providers to each subscription or offer a complete inventory of support vendors. A standard client consent letter or outside counsel disclosure package is not included with those public materials.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
Much of a defensibility record exists and is central to the product. Every determination carries an explanation identifying what is problematic and under which regulation. The decision tree encoding each rule is readable by a person, so a lawyer can inspect the reasoning path without reading code. Decision history is centralized, with human review recorded through the collaboration tooling. A regulated firm asked by a supervisor to justify why content was cleared would have the rule applied, the path taken, the explanation given and the person who signed off.
Two elements are missing. No single export per document combining these with the model used was found, and no model is named in published material. The forum here is a regulatory examination rather than a court.
Approval status identifies where an asset sits in a sequence of reviewers, and the common service agreement provides for returning workflow history and database records as CSV files when applicable. Web Reports can also deliver findings in CSV or PDF form. These artifacts can help explain compliance review to a regulator or examiner. They do not form a described export combining the exact model, retrieved legal sources and human verification for every generated passage. The available operational history therefore covers part of the review account without a complete AI disclosure record.
The questions both sides leave open
Derived from the records above rather than written, so it cannot favor either vendor. Take these into both conversations and ask each side the same question.
- Good Law Verification
- Refusal and Uncertainty Behavior
Which one fits
Choose Norm Ai if
- The workload includes questionnaires assembled from approved institutional answers and policies.
- Review stages must preserve citations, edits and source excerpts before a questionnaire is exported.
- Legal engineers should encode standards into agents used across multiple compliance processes.
Choose Red Marker if
- Teams primarily need risk detection and revision suggestions for marketing assets.
- Website reporting should surface advertising concerns across selected partner domains.
- Content creators should scan and revise material within familiar office authoring tools.
In summary
Norm Ai
Norm Ai applies institution specific agents to regulated content and other legal workflows, including sourced questionnaire completion.
Red Marker
Red Marker organizes draft scanning, proposed revisions, approvals and recurring web reports around marketing compliance.
Questions buyers ask
How does Norm handle gaps in questionnaire answers?
Its questionnaire workflow marks gaps for reviewer attention and distinguishes approved answers, generated responses and items needing action. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.
Does Red Marker support staged approval?
Yes. Its Approvals tool can direct an asset to specific people or teams in sequence and display the current review stage. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.
Are generated revisions final legal approval?
Red Marker's contract says the service does not provide legal or regulatory signoff and requires trained professionals to approve content before publication. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.
Neither vendor paid for inclusion, placement or a grade, and neither reviewed this page before it published. Everything on it comes from public material on the dates shown. How the index grades.
Norm Ai's technology is compared with the Red Marker product. Services supplied separately by Norm Law are outside this software comparison.