A
Aptus.AI
Aptus.AI is an AI research, drafting and regulatory monitoring platform for legal and compliance work, sold as Next-OS since 30 June 2026. Lawyers ask questions in plain language and receive answers drawn from a database the company curates: more than 70 million legislative and regulatory provisions and more than 7 million Italian court decisions from over 200 issuing bodies in Italy, the EU and several financial centers abroad.
Each source opens as an AI summary, as full text and through a link to the official publisher. Texts are converted into a patented machine readable format based on the Akoma Ntoso standard, which lets the platform track amendments and build consolidated versions. Around research sit document analysis, drafting, a workspace for each matter, connectors to SharePoint, OneDrive and Outlook, and daily regulatory alerts with impact and gap analysis.
Self serve plans are sold to lawyers and law firms, with enterprise editions for large firms, in house legal departments and compliance functions. Named customers include Intesa Sanpaolo, Generali Investments and Banca Agricola Popolare di Sicilia. Data is hosted on AWS in Ireland. The company was founded in 2018 in Pisa, has offices in Milan and Luxembourg, and is independent and venture backed.
Capability grades
All 15 axes, graded from public sources on the date shown. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
The metered unit is the AI conversation: Standard includes up to 50 AI messages a month and Professional sells use without limits. The assistant performs the research, document analysis, version comparison, drafting of filings and opinions, and the agents inside matter workspaces. Article 1.1 of the general terms describes the platform as making regulatory texts machine readable through artificial intelligence algorithms, and the pricing FAQ calls that patented conversion the key to letting the AI read legal documents.
Next-OS, launched 30 June 2026, adds iterative reasoning and actions in connected tools. Without generative models, Aptus.AI would still offer a curated database of more than 70 million provisions and 7 million decisions, automatic consolidated versions, daily alerts on the first working day after official publication, and Next Drive storage. That is the regulatory information service the company launched for financial compliance in 2021.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
Aptus.AI built its own benchmark, LegalITA: 107 real tasks in civil, labor and tax law drawn from more than 17,000 Court of Cassation decisions, including 40 trap questions that presuppose a document never uploaded. A citation counts only when court, section, number and year are right and it supports the issue. The post of 2 September 2026 reports 87.0 percent of questions passed in full, 86.1 percent with at least one aligned citation and 93.3 percent recognition of missing documents; a July 2026 post compares eleven systems on the same test.
Three model judges score the results (Claude Sonnet 4.6, GPT-5.5 and Claude Opus 4.8), and one of them is also a compared system. Competitor products go unnamed, the task bundle is available on request, and the README says the citation grounding pipeline cannot be reproduced from the repository. Each source opens as a summary, full text and a link to the official publisher.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
Article 7.1 of the general terms says the services are technical support that do not replace the team's users, who alone hold decision control. Article 7.2 places use under the user's own responsibility, and article 5.3 asks the user to evaluate every output carefully because content may be outdated or approximate. Next-OS reasons before producing an output and, in the vendor's words, does so on its own while showing the process in real time so each step can be followed.
When a request presupposes a document that was not uploaded, it flags this and asks for it before analyzing. The Studio Legale Spadoni case study describes a lawyer who verifies each output and keeps professional responsibility. The enterprise assistant page says the chat can send emails, create calendar events, tidy folders and run scheduled tasks, and no page says whether each action needs confirmation, what limits apply, or how a mistaken action is reversed.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
The enterprise pages quote Enzo Battaglia of Banca Agricola Popolare di Sicilia, Donato Varani and Luca Gandolfi of RbyC, and Tommaso Tovaglieri of General Finance, and show the Intesa Sanpaolo logo. Coverage of the Next-OS launch on 8 September 2026 says Intesa Sanpaolo and Generali Investments use the platform. Case studies describe Avv. Daniele Spadoni of Studio Legale Spadoni in Latina, running contract, business crisis and civil litigation matters through workspaces, and Avv.
Fabio Francesco Franco of E-Legal in Rome and Milan, managing serial litigation for a public administration. The Rome Bar Association adopted the platform for its offices in October 2025. The published figures name no customer: 50 to 60 percent less time per opinion and over 1,300 hours a year for an unnamed large organization's legal team, and a DORA exit strategy check cut from three or four hours to about five minutes for an unnamed regulated fintech. No case study is dated, and none pairs a named customer with a measured result.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
Article 5.4 of the general terms says the AI system respects data segregation criteria and carries out no specific training on data the user provides, without prejudice to Aptus.AI's ability to use that data to improve the services. The security page says customer data is never used to train AI models, and describes logical isolation between organizations and users and role based access in which collaborators see only what the account holder shares.
Article 14.3 binds both parties to keep confidential all information and documents exchanged and, at termination, to return or destroy them immediately with proof. Article 14.2 requires a data processing agreement where personal data is uploaded, offered as an addendum and not published. Secrecy under the rules of the legal profession, privilege and work product are never mentioned. The improvement use is not defined, and nothing states what the third party AI provider in article 3.3 may retain.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
Article 1 of the general terms says the platform is not aimed at consumers as defined by article 4 of Legislative Decree 206/2005. The pricing FAQ says it is not designed for private users or people without legal or compliance expertise, and states plainly "Non forniamo consulenza legale." The free Academy course covers the rules on AI use in a firm, how the models work and where they fail, and a method running from the request to checking the sources, with a certificate the firm can keep as a documented measure.
The same plans are sold to accountants, labor consultants, public administration and compliance officers, who can draft opinions with no guidance on what a reader without legal training should do with legal output. The coverage is Italian, European and financial regulatory, while Spanish and German editions sell the same plans with no statement of where coverage stops.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
Aptus.AI measures releases against its own LegalITA benchmark across civil, labor and tax law and publishes the evaluation code on GitHub, with the task bundle available on request. It reported scores for successive versions on 31 July and 2 September 2026, and says results stay stable across repeated runs and that the method's limits, including sample size and the need for stratified human validation, are declared in its white paper.
Article 5.5 of the general terms and the pricing FAQ state that the platform is neither a general purpose AI system nor high risk under the AI Act, on an assessment that is not published. According to the FAQ, an internal team of experts trains the algorithms. The governance documents that are published, the Model 231 organizational model, the code of ethics and the information security policies of 10 July 2024, say nothing about AI. No one is named as accountable for model behavior, and no result is broken out by practice area.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
The privacy notice for the Aptus Next platform, last updated 1 July 2026, keeps data processed to provide the services for the contract term plus 12 months and security logs for the term plus six months. It says data is generally not transferred outside the European Economic Area. Article 14.3 of the general terms adds immediate return or destruction of confidential information at termination. The security page lists AES-256 encryption at rest and TLS 1.2 or later in transit, role based access on least privilege, logical tenant isolation, a penetration test at least once a year by external providers, and automated SCA and SAST code scanning.
The notice names cloud, AI and payment providers only by category, the data processing agreement is an unpublished addendum, and no breach notification period is stated; incident notification is something a DORA regulated client negotiates. The two exit rules differ: 12 months in the notice against immediate destruction in the terms.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
Article 7.3 of the general terms says that, except for intent or gross negligence, Aptus.AI is not liable for any activity or decision taken through the platform or on its content, for any failure to achieve a result, or for any direct or indirect damage from using the platform. Article 9 says errors do not in themselves breach the contract. Article 11.2 has the client indemnify Aptus.AI for breaches of articles 4.2, 6.1, 8.1, 10.2 and 14.3.
Article 12 states that Aptus.AI holds professional civil liability insurance for the contract term with a limit of 5,000,000 euros, for Enterprise clients. The insured events, exclusions and any right of a client to claim are not stated, and the contract it backs leaves ordinary negligence and a wrong citation outside Aptus.AI's liability.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
The Next-OS launch post of 30 June 2026 lists SharePoint, OneDrive and Outlook mail and calendar as live, with Google Drive, Gmail and Google Calendar announced. The enterprise assistant page says the chat can read and analyze documents and communications in connected tools and take actions such as sending emails, creating events and tidying folders and files. The Professional plan lists Google and Microsoft Office suite integrations, article 3.3 of the general terms names Microsoft Teams as an optional third party service, and documents can be revised in track changes inside the platform.
No documentation describes the permissions a connector takes, whether anything writes back to SharePoint, what an administrator configures, or whether Word itself is supported beyond editing files in the platform. No document management, practice management or electronic billing system is named, and MAAT LegalPaperless is a discount on a separate anonymization tool rather than a data connection.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
The security page says the infrastructure runs on AWS in Ireland with confirmed EU data residency. It says customer data is segregated in a multi tenant architecture with logical isolation between organizations and users, and is encrypted at rest and in transit. The platform privacy notice of 1 July 2026 says personal data is generally not transferred outside the European Economic Area and that any transfer would rest on article 46 GDPR safeguards.
A company post of 25 February 2026 says Aptus.AI implemented Anthropic's Claude models for drafting, and article 3.3 of the general terms relies on an unnamed AI provider, yet nothing says in which region that inference runs or whether the provider is bound to EU processing. The enterprise pages promise custom configurations, but no single tenant, private cloud or on premises option is described, and no region other than Ireland is offered.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
The security page says Aptus.AI holds ISO/IEC 27001:2022 certification and applies controls verified by an independent third party. A company post of 11 February 2026 announced the certification and says the company is now maintaining and improving the system. Two information security policy documents, each version 1 dated 10 July 2024 and approved by top management, define the management system's perimeter as all staff, processes, data and technologies within it, with roles for an ISMS manager and a VP of compliance and legal.
The security page adds annual external penetration testing and automated code scanning. The certifying body, certificate number, issue and expiry dates, a scope statement, and a way to request the certificate or a penetration test summary are not published. Aptus.AI has no trust center and no SOC 2 report.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
A company post of 25 February 2026 on Cassazione rulings and drafting says Aptus.AI implemented Anthropic's Claude models, which it calls the best performing on the market, for document drafting. The pricing FAQ says the platform rests on proprietary AI models, with patents granted in Italy in 2023, Europe in 2024 and the United States in 2025 for the method that converts documents into its machine readable format. The December 2025 post on Next5 calls it a proprietary assistant.
Article 3.3 of the general terms and both privacy notices list an AI provider without naming it. Not published: which model serves research and which serves drafting, model versions, where inference runs, whether any other provider is used, and any commitment to notify customers when a model or provider changes. Neither privacy notice carries a subprocessor list.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
On the pricing page, Standard costs 59 euros a month on the annual plan or 69 euros month to month, excluding VAT, for one user with up to 50 AI messages a month and 200 MB of storage. Professional costs 110 euros a month on the annual plan or 129 euros month to month with one user included, 49 euros a month for each extra user up to 50, unlimited AI use and 2 GB of extensible storage. The annual plan can be paid at once or monthly, and a seven day free trial needs no upfront payment.
Article 8 of the general terms refers setup and professional services fees to unpublished particular conditions. Article 13 renews automatically unless canceled ten days before term, and article 16 allows changes on 15 days' notice with a right to withdraw. The enterprise editions for large firms, in house teams and compliance functions are priced in a consultation, with no published figure, unit or tier, and nothing says what implementation adds.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
The lawyers' pages split the offer by size: Standard for individual lawyers and small firms, and Professional for structured firms or teams. The enterprise pages address Italy's largest firms, in house legal departments and compliance functions in regulated sectors. The pricing FAQ lists lawyers and law firms first, then accountants and labor consultants, public administration, in house counsel and compliance professionals, and excludes private users and people without legal or compliance expertise.
The sources page names the issuing bodies: Italian ministries, courts from the Constitutional Court and the Cassazione to the regional administrative and merit courts, more than thirty Italian independent authorities, EU institutions and agencies, and financial regulators in the United States, the United Kingdom, Luxembourg, France, San Marino, Hong Kong and Singapore. No page states depth by practice area, and the benchmark covers only civil, labor and tax law. The Spanish and German editions sell the same plans without naming any Spanish or German source.
9 public documents
The public pages on file for Aptus.AI, with the recorded signals each one supports and the date it was last read. Open any of them and check the reading against the record.
-
Ethical Walls and Matter Segregation, Outside Counsel Guideline Readiness
Read Oct 2, 2026
-
Client Data in Training, Prompt and Output Retention
Read Oct 2, 2026
-
Billing and Fee Posture
Read Oct 2, 2026
-
Good Law Verification
Read Oct 2, 2026
-
Primary Law Corpus Provenance
Read Oct 2, 2026
-
Bar Guidance Alignment
Read Oct 2, 2026
-
Refusal and Uncertainty Behavior
Read Oct 2, 2026
-
aptus.ai/it/privacy-aptus-next1 signal
Third Party Request and Subpoena Notice
Read Oct 2, 2026
-
Fabricated Citation Record
Read Oct 2, 2026
€59/month, Standard (annual plan)EUR, as published, never converted
- The cheapest plan costs 59 euros a month if you sign up for a year, or 69 euros if you pay month by month.
- That plan is for one person and allows 50 AI messages a month.
- The bigger plan costs 110 euros a month for a year and lets you use the AI as much as you need.
- Each extra person on the bigger plan costs 49 euros a month.
- You can try it free for 7 days, and big organizations have to ask for a price.
Standard: 59 euros per month on the annual plan or 69 euros month to month, excluding VAT, for one user, with up to 50 AI messages a month and 200 MB of Next Drive storage. Professional: 110 euros per month on the annual plan or 129 euros month to month, one user included, 49 euros per month for each extra user up to 50 users, AI use without operational limits, 2 GB of extensible storage and Google and Microsoft Office suite integrations.
The annual plan can be paid in one installment or monthly. Seven day free trial with no upfront payment. Enterprise editions for large firms, in house legal teams and compliance functions are priced in a consultation.
Implementation: Not published. Article 8.1 of the general terms provides for a setup fee and fees for professional or recurring maintenance services for Enterprise clients, with amounts set in particular conditions under article 8.2; no figure appears on the pricing page, and the self serve plans list no setup charge.
Confidentiality and data terms: Not applicable in the Italian market; article 14.2 of the general terms requires a data processing agreement under Article 28 GDPR where personal data is uploaded, offered as a contractual addendum.
Note: The Standard card states that VAT is excluded; the Professional card does not say. Contracts renew automatically unless canceled at least ten days before the end of the term (general terms article 13), and article 16 allows changes on 15 days' notice with a right to withdraw without penalty. Enterprise prices, service levels and particular conditions are not published.
Legal Signals
What each signal meansA signal records what public sources say on the date shown. It is not a grade and it is not a recommendation. Where a signal reads Not addressed, it means the index did not locate the material in public sources on that date, which is a statement about disclosure rather than about the product.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
The published terms prohibit training on customer content. Not a policy page, the agreement.
Article 5.4 of the general terms says the AI system carries out no specific training on data the user provides, without prejudice to Aptus.AI's ability to use that data to improve the services; the improvement use is not defined. The security page and the pricing FAQ say customer data is never used to train AI models and that there is no continuous learning on user interactions.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
A specific retention period is published and the customer cannot change it.
Article 14.3 of the general terms requires each party, when the contract ends, to return or immediately destroy the other's confidential information, defined to include the documents exchanged. The platform privacy notice of 1 July 2026 keeps data processed to provide the services for the contract term plus 12 months, and no period or deletion setting is stated for prompts and outputs during the term.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
The product maintains its own permission model, documented, requiring the firm to keep it aligned.
The security page describes role based access on least privilege, in which collaborators see only the data and projects the account holder chooses to share, and logical isolation between organizations and users. The Professional plan lets an administrator define who sees which data, restrict modules by team and assign roles; the firm sets and maintains these permissions, and nothing ties them to a document system's own access rules.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
Published terms or policy address disclosure to authorities or in response to legal process, and no commitment or reservation regarding customer notice is located anywhere. The vendor has told the customer that data can leave and has said nothing about whether the customer hears of it.
The platform privacy notice of 1 July 2026 lists cooperation with competent authorities under a legal obligation among its purposes of processing, and article 14.3 of the general terms excepts legal obligations from the confidentiality duty. No published term or policy says whether the customer is told of an authority's request, and no transparency report is published.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
Sources are identified without stating the license or rights basis.
The sources page names more than 200 issuing bodies, from the Italian Parliament, ministries, Constitutional Court, Cassazione and merit courts to CONSOB, Banca d'Italia, EU agencies and US, UK and Luxembourg regulators. According to the FAQ, alerts go out on the first working day after official publication. Article 4.2 of the general terms says documents come from official public channels, databases Aptus.AI can access, or the client, with no license basis stated.
Counts vary across pages, from one million Cassazione rulings in February 2026 to more than 7 million decisions on the current pages.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
The vendor computes and surfaces subsequent history itself, with the method described.
The pricing FAQ says Next-OS shows amendments highlighted against the previous text and generates consolidated versions integrating all changes, and launch coverage of 8 September 2026 says it checks whether cited provisions are in force and flags repealed or amended ones. Nothing describes a treatment check for case law, such as whether a cited Cassazione ruling has later been departed from.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
The vendor documents an explicit no answer path and it is observable in the product or in published evaluation.
The post of 2 September 2026 says that when a request presupposes a document that was not uploaded, Next-OS flags it and asks for it before analyzing, and reports 93.3 percent recognition of missing documents on the LegalITA benchmark's trap questions. The December 2025 post on Next5 describes clarifying questions where context is ambiguous or incomplete.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
No court order, opinion or disciplinary record addressing fabricated or hallucinated legal citations produced by this product has been located as of the date shown. This is a statement about the public record on that one subject, not a finding about the product, and this signal is not a litigation history.
The AI Hallucination Cases database maintained by Damien Charlotin records no case naming Aptus or Daitomic, and no court order, opinion or disciplinary record naming the product is on the public record. This is a statement about the public record rather than a finding about the product.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
Public materials refer to professional responsibility in general terms without naming guidance.
Article 5.5 of the general terms and the pricing FAQ address the platform's classification under the AI Act, and a February 2026 post cites article 4 of the AI Act on a firm's duty to train its staff, pointing to a free Academy course on the obligations for AI use in a firm. No bar opinion, rule of professional conduct or Law 132/2025 is engaged.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
Public materials claim time savings without addressing billing or disclosure, and the product sits inside a fee relationship between a lawyer and a client where those savings would change the bill.
A lawyer's testimonial on the professionals page says the platform halved the time to write briefs and filings, and launch coverage of 8 September 2026 reports 50 to 60 percent less time per opinion for an unnamed legal team. Nothing addresses how AI assisted work is recorded, billed or disclosed to clients, for a product sold mainly to lawyers and law firms.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
The material exists behind a sales conversation or an executed agreement.
The security page offers a data processing agreement as a contractual addendum, and the pricing FAQ says audit rights and incident notification can be set by addendum for clients under DORA. The privacy notices name cloud, AI and payment providers only by category, no subprocessor list or client facing disclosure material is published, and the one model provider named, Anthropic, appears in a February 2026 company post.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
No located public material addresses court disclosure or verification certification.
The assistant shows its reasoning steps as it works and each source links to its official publisher. Nothing on the AI assistant, use case, security or pricing pages, in the general terms or in the Next-OS launch and benchmark posts addresses recording or disclosing AI use in a court filing.