AI Legal Index: Regulatory & Compliance Counsel changes https://ailegalindex.com/categories/regulatory-and-compliance-counsel Material product changes at Regulatory & Compliance Counsel vendors, tracked by AI Legal Index. Every entry is dated and cited to a public source. en-us Free to reuse with a visible link to ailegalindex.com. Terms: https://ailegalindex.com/use-this-data Sat, 26 Sep 2026 12:00:00 GMT 720 Mitratech: Collaborati 5.6, the eBilling portal that feeds TeamConnect, adds a linked resubmission workflow for rejected invoices across manual… https://ailegalindex.com/changelog/mitratech ailegalindex.com:change:6ab917f94f0d70b4bff6a102 Sat, 26 Sep 2026 12:00:00 GMT Product / capability Legal Ops & Spend General Legal Assistants Regulatory & Compliance Counsel Collaborati 5.6, the eBilling portal that feeds TeamConnect, adds a linked resubmission workflow for rejected invoices across manual, LEDES and PDF submission paths, replacing the old unlinked Copy action with a Resubmit button. Resubmitted invoices now carry the Original Invoice primary key and the TeamConnect Invoice primary key automatically, and a flagged LEDES resubmission is blocked when the file's client does not match the client on the original rejected invoice.

Why it matters: Legal ops and AP teams get a traceable chain from each rejected invoice to its corrected version across Collaborati and TeamConnect, which cuts manual relinking and duplicate invoice risk during bill review. The client match check stops a firm's resubmission from being attached to another client's rejected invoice.

Impact: Medium. Verification: Verified. Type: Product / capability.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Epiq acquired Canopy, maker of the patented Data Breach Response platform and the agentic Auto Review feature that automates first level… https://ailegalindex.com/changelog/canopy ailegalindex.com:change:6ab917f94f0d70b4bff6a0fc Fri, 25 Sep 2026 12:00:00 GMT Acquisition / corporate Regulatory & Compliance Counsel Litigation & eDiscovery Epiq acquired Canopy, maker of the patented Data Breach Response platform and the agentic Auto Review feature that automates first level data mining review. Epiq states the Canopy platform will be integrated into its Epiq AI suite and made accessible through Epiq Service Cloud, with Canopy engineers joining to build Epiq AI for Cyber. Former Canopy COO Adi Elliott becomes Epiq VP, Product Management, Cyber.

Why it matters: Breach counsel, review providers and insurers using Canopy now contract with Epiq, and access and roadmap move into Epiq AI and Epiq Service Cloud, so buyers should confirm standalone availability, data handling terms and regional AWS deployments under the new owner.

Impact: High. Verification: Verified. Type: Acquisition / corporate.

Evidence: Vendor announcement

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Athennian's September 25, 2026 release lets admins restrict individual structure chart views to specific teams, adding a layer of access… https://ailegalindex.com/changelog/athennian ailegalindex.com:change:6ab917f94f0d70b4bff6a0fb Fri, 25 Sep 2026 12:00:00 GMT Product / capability Legal Ops & Spend Regulatory & Compliance Counsel Athennian's September 25, 2026 release lets admins restrict individual structure chart views to specific teams, adding a layer of access control beyond entity level permissions. The control requires the Enterprise plan or the Enterprise Charts add on.

Why it matters: Legal teams can limit who inside the organization sees a given ownership view without reworking entity level permissions. Because it is gated to Enterprise packaging, plan tier decides whether a buyer gets it.

Impact: Medium. Verification: Verified. Type: Product / capability.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Athennian's 25 Sept release lets organizations decide whether pending transactions count in ownership calculations and structure charts… https://ailegalindex.com/changelog/athennian ailegalindex.com:change:6ab917f94f0d70b4bff6a0fa Fri, 25 Sep 2026 12:00:00 GMT Product / capability Legal Ops & Spend Regulatory & Compliance Counsel Athennian's 25 Sept release lets organizations decide whether pending transactions count in ownership calculations and structure charts, with ownership views now showing issued, pending, reserved and available amounts. The same release adds expiration dates on documents, with email or in app reminders a week before expiry, on the day, or both.

Why it matters: Corporate secretarial teams get ownership figures that match how their organization treats pending deals, and can retire the spreadsheets they use to track expiring certificates and licenses.

Impact: Medium. Verification: Verified. Type: Product / capability.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> TrustArc: The Mobile App Consent SDK now reads each region's consent model from the server and, in opt in regions, applies the configured default… https://ailegalindex.com/changelog/trustarc ailegalindex.com:change:6ab917f94f0d70b4bff6a0f7 Thu, 24 Sep 2026 12:00:00 GMT Product / capability Regulatory & Compliance Counsel Legal Research Legal Ops & Spend The Mobile App Consent SDK now reads each region's consent model from the server and, in opt in regions, applies the configured default category consent at app start without showing a banner, while regions with GDPR in scope, opt out regions and accounts with no default category are skipped. Three new iOS APIs (setAttOptOutLevel, setShowAttOptOutWindow, setAttOptOutLockCategories) control which categories are rejected and locked when a user declines Apple's App Tracking Transparency prompt, and a new getWebCookie() function returns consent cookie values on Android, iOS, Flutter and React Native.

Why it matters: This changes what the SDK decides on a user's behalf without any user action, so legal teams should confirm their per region consent models and default categories match their own legal position before the new behavior takes effect in their apps.

Impact: Medium. Verification: Verified. Type: Product / capability.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> TrustArc: Individual Rights Manager release 2026.09.2 adds Due Date Countdown Rules that start the data subject request deadline clock from either… https://ailegalindex.com/changelog/trustarc ailegalindex.com:change:6ab917c2a328a2163b304e18 Wed, 23 Sep 2026 12:00:00 GMT Product / capability Regulatory & Compliance Counsel Legal Research Legal Ops & Spend Individual Rights Manager release 2026.09.2 adds Due Date Countdown Rules that start the data subject request deadline clock from either the Request Received Date or the Request Verified Date, set per intake form, request type and brand, with the most specific rule applied and the global setting as fallback. The same release adds a Bulk Verify action that moves multiple Unverified requests to In Progress, excluding requests that require Evident or IDology identity checks.

Why it matters: Privacy counsel handling access and deletion requests under different laws can encode each statute's deadline trigger in the system instead of tracking exceptions by hand, which lowers the risk of missed statutory response dates.

Impact: Medium. Verification: Verified. Type: Product / capability.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Relativity's developer changelog lists a new Review Center API that returns a review queue's current statistics, the same figures shown in… https://ailegalindex.com/changelog/relativity ailegalindex.com:change:6ab917c2a328a2163b304e17 Wed, 23 Sep 2026 12:00:00 GMT Integration / interoperability Litigation & eDiscovery General Legal Assistants Regulatory & Compliance Counsel Relativity's developer changelog lists a new Review Center API that returns a review queue's current statistics, the same figures shown in the Review Progress section of the Review Center dashboard. It is dated for both Relativity aiR and Relativity aiR Government.

Why it matters: Firms and service providers tracking review against budget or deadline can pull live queue progress into their own reporting or matter systems instead of reading it off the dashboard.

Impact: Medium. Verification: Verified. Type: Integration / interoperability.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Casepoint released its first two Casepoint IQ agents, the Relevance Determination Agent and the Issue Coding Agent, now live in its… https://ailegalindex.com/changelog/casepoint ailegalindex.com:change:6ab917c2a328a2163b304e0c Wed, 23 Sep 2026 12:00:00 GMT Product / capability Litigation & eDiscovery Regulatory & Compliance Counsel Casepoint released its first two Casepoint IQ agents, the Relevance Determination Agent and the Issue Coding Agent, now live in its eDiscovery application for early access customers. The Relevance Determination Agent assigns each document a relevance or responsiveness likelihood score with its reasoning, and the Issue Coding Agent codes documents against matter defined issues with an optional post run QC that reports recall and precision per issue code. Both use a multimodel cross check and require users to validate performance on a sample set before the agent runs across the full document set.

Why it matters: Review teams get AI first pass relevance and issue coding with a sample validation gate, per document rationale and an audit trail of every human and AI decision, which is what a defensibility challenge will ask for. The agents run inside the existing platform security boundary under current permissions, so adopting them does not add a new environment to vet.

Impact: High. Verification: Verified. Type: Product / capability.

Evidence: Vendor announcement

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Reveal made a unified corporate eDiscovery suite available that combines Reveal Hold, Onna and Logikcull across legal hold, preservation… https://ailegalindex.com/changelog/reveal ailegalindex.com:change:6ab9178d421c0bed64772f1b Tue, 22 Sep 2026 12:00:00 GMT Pricing / packaging Litigation & eDiscovery Regulatory & Compliance Counsel Reveal made a unified corporate eDiscovery suite available that combines Reveal Hold, Onna and Logikcull across legal hold, preservation, collection, early case assessment, review and production. Reveal says many Onna data sources now feed directly into Reveal Hold preservation and collection workflows, and Onna targeted collections move into Logikcull with context, metadata and file relationships intact. Preferred pricing applies to organizations that buy the suite through Dec. 31, 2026.

Why it matters: In house legal teams can cover hold through production under one vendor relationship instead of stitching together point tools, with a year end deadline on the preferred price. The Reveal AI orchestration layer across the suite is only promised from 2027, so buyers should not count it as shipped.

Impact: Medium. Verification: Verified. Type: Pricing / packaging.

Evidence: Vendor announcement

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Reveal Hold Build 76908 lets legal teams collect Slack Enterprise Grid and Zoom Workplace content directly from Reveal Hold, with full… https://ailegalindex.com/changelog/reveal ailegalindex.com:change:6ab9178d421c0bed64772f1a Tue, 22 Sep 2026 12:00:00 GMT Integration / interoperability Litigation & eDiscovery Regulatory & Compliance Counsel Reveal Hold Build 76908 lets legal teams collect Slack Enterprise Grid and Zoom Workplace content directly from Reveal Hold, with full collection available now and channel selection to follow in a later deployment. The build also adds user configurable legal hold and compliance dashboards (custodians in scope, acknowledgment progress, questionnaire status, new holds over time) and lets the Microsoft Purview integration wizard accept multiple domains.

Why it matters: Preservation and collection of chat and meeting data can now run from the hold tool itself rather than through a separate collection step. Buyers should note the stated limits: no channel level selection yet, and Slack collections with a date range exclude data from the end date.

Impact: Medium. Verification: Verified. Type: Integration / interoperability.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Credo AI added the AIUC-1 AI agent standard to its AI Governance Platform, mapping AIUC-1 requirements to the specific agents they apply to. https://ailegalindex.com/changelog/credo-ai ailegalindex.com:change:6ab9178d421c0bed64772f14 Tue, 22 Sep 2026 12:00:00 GMT Regulatory / guideline Regulatory & Compliance Counsel Credo AI added the AIUC-1 AI agent standard to its AI Governance Platform, mapping AIUC-1 requirements to the specific agents they apply to. Its GAIA assistant turns those requirements into owned controls, captures evidence as work happens and builds a reviewable history that can be reused for ISO/IEC 42001, the NIST AI RMF and the EU AI Act. Credo AI states it does not issue AIUC-1 certification; AIUC and accredited auditors such as Schellman do.

Why it matters: Legal departments and firms vetting agentic tools get one place to track AIUC-1 requirements against the agents they buy and build (the post names Harvey as the first legal AI platform to certify), which replaces bespoke vendor questionnaires with a shared standard and current evidence.

Impact: Medium. Verification: Verified. Type: Regulatory / guideline.

Evidence: Vendor announcement

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Relyance AI's 21 Sept release tightened Strict InHost mode so sampled record values and error text stay out of scan results. https://ailegalindex.com/changelog/relyance-ai ailegalindex.com:change:6ab9178d421c0bed64772f10 Mon, 21 Sep 2026 12:00:00 GMT Privilege / confidentiality Regulatory & Compliance Counsel Legal Ops & Spend Relyance AI's 21 Sept release tightened Strict InHost mode so sampled record values and error text stay out of scan results. InHost runs the Relyance scanner in a cloud account the customer owns and copies only the results back to Relyance. The same release adds sanitized supporting context to data classification findings, which previously showed no context at all.

Why it matters: Teams that keep scanning inside their own cloud can now be sure raw record values never leave it, even in error messages. Sanitized context also makes findings easier to check without exposing the data behind them.

Impact: Medium. Verification: Verified. Type: Privilege / confidentiality.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Relativity removed the option to switch off GenAI mode when ingesting data into Data Breach Response, so every DBR ingestion now runs… https://ailegalindex.com/changelog/relativity ailegalindex.com:change:6ab9178d421c0bed64772f0f Mon, 21 Sep 2026 12:00:00 GMT Product / capability Litigation & eDiscovery General Legal Assistants Regulatory & Compliance Counsel Relativity removed the option to switch off GenAI mode when ingesting data into Data Breach Response, so every DBR ingestion now runs through the generative AI workflow that identifies, extracts and links personal information to individuals. The release note lists support in the US, Canada, Brazil, Australia, United Arab Emirates, Asia, Europe Data Zone, United Kingdom, Switzerland and Africa regions, with the Relativity aiR Government date still TBA.

Why it matters: Teams whose client, insurer or regulator terms bar generative AI on breach data can no longer run DBR in a non GenAI mode and must settle AI use terms before ingestion. Relativity's own DBR documentation says all outputs need human review because the model can omit or fabricate PI.

Impact: High. Verification: Verified. Type: Product / capability.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Phaselaw: Full page redaction was reworked so users select one or more pages to redact in a single action, mirroring area redactions, instead of… https://ailegalindex.com/changelog/phaselaw ailegalindex.com:change:6ab9178d421c0bed64772f0e Mon, 21 Sep 2026 12:00:00 GMT Product / capability Regulatory & Compliance Counsel Litigation & eDiscovery Full page redaction was reworked so users select one or more pages to redact in a single action, mirroring area redactions, instead of redacting only the visible page. A new toggle on finalized exports excludes fully redacted pages so blacked out pages no longer appear in the export bundle. Both changes apply only to full page redactions made from 21 September 2026 onward, because of a change in how those redactions are stored.

Why it matters: Reviewers producing large disclosure sets no longer need to delete blank redacted pages after export or redact pages one click at a time, which cuts manual clean up of the final production. The export toggle has no effect on full page redactions created before the change.

Impact: Medium. Verification: Verified. Type: Product / capability.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Phaselaw added a Case Activity page that logs significant events in a case: case creation, status and deadline changes, uploads, and… https://ailegalindex.com/changelog/phaselaw ailegalindex.com:change:6ab9178d421c0bed64772f0d Mon, 21 Sep 2026 12:00:00 GMT Product / capability Regulatory & Compliance Counsel Litigation & eDiscovery Phaselaw added a Case Activity page that logs significant events in a case: case creation, status and deadline changes, uploads, and document status changes. It opens from a new icon beside the case title and is described as an audit log of who did what, and when. It only appears for cases created from 21 September 2026 onward, because it relies on newly stored case data.

Why it matters: Teams answering DSARs or public records requests often have to show how a disclosure was handled, and a built in per case log reduces reliance on manual notes for that record. Cases created before the change do not get the log.

Impact: Medium. Verification: Verified. Type: Product / capability.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> DataGrail extended IP allowlisting beyond user sign in to API keys, Agents and external MCP clients such as Claude Desktop and Cursor… https://ailegalindex.com/changelog/datagrail ailegalindex.com:change:6ab9178d421c0bed64772f0b Mon, 21 Sep 2026 12:00:00 GMT Security / compliance Regulatory & Compliance Counsel Legal Ops & Spend DataGrail extended IP allowlisting beyond user sign in to API keys, Agents and external MCP clients such as Claude Desktop and Cursor, with a separate set of approved IP ranges for each access path. Enforcement is continuous and every allowlist is off by default until an admin turns it on.

Why it matters: Privacy and legal teams connecting AI agents and MCP clients to a system holding data subject request records can now restrict each path to known networks, which limits exposure from a leaked key or token.

Impact: Medium. Verification: Verified. Type: Security / compliance.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> BigID launched AgentIQ, an agentic automation layer that lets customers run data security, privacy and compliance work from a prompt… https://ailegalindex.com/changelog/bigid ailegalindex.com:change:6ab9178d421c0bed64772f0a Mon, 21 Sep 2026 12:00:00 GMT Product / capability Regulatory & Compliance Counsel BigID launched AgentIQ, an agentic automation layer that lets customers run data security, privacy and compliance work from a prompt inside BigID or from Claude, Copilot, GPT, Gemini and custom enterprise agents over BigID's secure MCP. Agents can report, investigate and act on findings, including revoking access, quarantining data, applying retention and fulfilling data subject requests, with four prebuilt agents at launch: Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis and Privacy Operations. Agents inherit the requesting user's permissions enforced at the API and MCP layer, every action is logged and attributable to a person, and revoke, quarantine and delete actions can be set to require human approval.

Why it matters: Legal and privacy teams can now let agents take remediation and data subject request actions across 200+ connected systems autonomously, so deciding which workflows run without review becomes a governance setting they must own and audit. Permission inheritance at the API layer, not the prompt, limits what an attorney's Copilot or Claude session can reach or change through BigID.

Impact: High. Verification: Verified. Type: Product / capability.

Evidence: Vendor announcement

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> Relativity aiR now connects to ChatGPT Enterprise through the Model Context Protocol. https://ailegalindex.com/changelog/relativity ailegalindex.com:change:6aaea9fcafa54bf67064faa5 Thu, 17 Sep 2026 12:00:00 GMT Integration / interoperability Litigation & eDiscovery General Legal Assistants Regulatory & Compliance Counsel Relativity aiR now connects to ChatGPT Enterprise through the Model Context Protocol. Administrators can use plain language in ChatGPT to create matters, align workspaces to the structure of their data and manage access and workflows in Relativity. The same kind of connection went live for Google's Gemini Enterprise for Legal on 25 August.

Why it matters: This is administration, not review: the substantive analysis stays inside Relativity aiR. That is the right boundary for a platform holding privileged productions. Litigation support teams get a faster way to stand up matters without handing document content to a general assistant.

Impact: Medium. Verification: Verified. Type: Integration / interoperability.

Evidence: Vendor announcement

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> CUBE's regulatory intelligence now powers a new Regulatory Horizon Scanning capability inside IBM watsonx.governance. https://ailegalindex.com/changelog/cube ailegalindex.com:change:6aaea9fcafa54bf67064fab1 Wed, 16 Sep 2026 12:00:00 GMT Integration / interoperability Regulatory & Compliance Counsel CUBE's regulatory intelligence now powers a new Regulatory Horizon Scanning capability inside IBM watsonx.governance. It monitors AI related developments from regulators, legislators and standards bodies and surfaces them in the governance workflow, where teams can map a change to an AI use case and keep a record of how it was assessed.

Why it matters: AI governance teams have been tracking EU AI Act and NIST changes by hand, next to their model inventory. This puts the regulatory feed beside the inventory, with a trail of each assessment. It lives in IBM's product, so it only helps buyers already running watsonx.governance.

Impact: Medium. Verification: Partially Verified. Type: Integration / interoperability.

Evidence: Trade press

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> DataGrail added automatic high risk detection for data protection impact assessments, which fills Records of Processing Activities forms… https://ailegalindex.com/changelog/datagrail ailegalindex.com:change:6a9c2c3cec4ad2f765994254 Fri, 04 Sep 2026 12:00:00 GMT Product / capability Regulatory & Compliance Counsel Legal Ops & Spend DataGrail added automatic high risk detection for data protection impact assessments, which fills Records of Processing Activities forms by identifying AI use, biometric data and targeting of vulnerable individuals. The same release adds custom system naming in the Live Data Map, optional fields in the Privacy Requests API, and version 1.3.0 of the Request Manager Agent with JMESPath support.

Why it matters: RoPA upkeep is the compliance task most teams are quietly behind on, because it is tedious rather than difficult. Automatic detection of the categories that trigger an assessment is worth more than the form filling, since missing a trigger is the failure that carries a penalty.

Impact: Medium. Verification: Verified. Type: Product / capability.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> CUBE added three agentic coworkers to RegPlatform: a Priorities Coworker that scores regulatory updates for relevance, an Analysis… https://ailegalindex.com/changelog/cube ailegalindex.com:change:6a9c2c3cec4ad2f765994251 Wed, 02 Sep 2026 12:00:00 GMT Product / capability Regulatory & Compliance Counsel CUBE added three agentic coworkers to RegPlatform: a Priorities Coworker that scores regulatory updates for relevance, an Analysis Coworker that answers natural language questions against laws and rules, and an Enforcements Coworker that consolidates global enforcement actions. The agents run on Microsoft Azure and are listed on the Microsoft marketplace.

Why it matters: The relevance scoring is the load bearing piece. Regulatory monitoring platforms have never struggled to find updates, they have struggled to tell a compliance team which of the several hundred this month actually apply to it. A live marketplace listing also means the deployment path is documented rather than negotiated.

Impact: High. Verification: Partially Verified. Type: Product / capability.

Evidence: Trade press

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> RelativityOne now integrates with Microsoft Copilot over the Model Context Protocol. https://ailegalindex.com/changelog/relativity ailegalindex.com:change:6a9c2c3cec4ad2f76599424c Mon, 31 Aug 2026 12:00:00 GMT Integration / interoperability Litigation & eDiscovery General Legal Assistants Regulatory & Compliance Counsel RelativityOne now integrates with Microsoft Copilot over the Model Context Protocol. Users can run administrative reporting against their RelativityOne environment using natural language prompts issued from Copilot.

Why it matters: Administrative reporting moves into the Microsoft 365 surface legal teams already sit in, which removes a context switch for work that was never worth opening a second platform for. The value here depends on an existing Copilot deployment.

Impact: Medium. Verification: Verified. Type: Integration / interoperability.

Evidence: Vendor announcement

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]> RelativityOne can now collect Claude Enterprise data directly from the source using Anthropic's Compliance API. https://ailegalindex.com/changelog/relativity ailegalindex.com:change:6a9c2c3cec4ad2f76599424b Thu, 27 Aug 2026 12:00:00 GMT Integration / interoperability Litigation & eDiscovery General Legal Assistants Regulatory & Compliance Counsel RelativityOne can now collect Claude Enterprise data directly from the source using Anthropic's Compliance API. The connector maps, preserves and processes conversation prompts, responses, chats and uploaded files into a reviewable form, including normalization into Relativity Short Message Format.

Why it matters: Legal and compliance teams get a defensible collection path for conversational AI evidence, with context and metadata intact rather than reconstructed from exports. For any organization that has rolled out Claude Enterprise, this is the difference between an eDiscovery source that is reviewable and one that is not.

Impact: Medium. Verification: Verified. Type: Integration / interoperability.

Evidence: Vendor documentation

Source: AI Legal Index change log. Free to reuse with a link back. Terms.

]]>