B

Blue J

Blue J says it does not build or train its own generative models and uses large language technology from OpenAI and Google. What it owns is the curated tax database: full US federal and state coverage, case law and primary and secondary sources, and licensed Tax Notes and IBFD material, updated daily. Without the AI, a licensed tax content collection remains, the kind of product buyers already get from Checkpoint and CCH.

Every answer carries inline citations and a source list, the relevant section of each source is highlighted, a user can ask for more sources, and a user can question a single source on its own. The corpus is named: primary tax authority plus licensed Tax Notes and IBFD content, updated daily. No accuracy figure, test set or evaluation result appears on any Blue J page. A 90 percent accuracy claim in third party directories refers to Blue J's earlier outcome prediction product and appears on no Blue J page. ValsAI is listed for benchmark testing, and no results are published.

Section 7 of the Subscriber Agreement makes users responsible for judging whether output is suitable and for consulting their own legal, tax and accounting advisors before using it. Section 12 of the Terms of Use calls the platform an information tool only. The privacy notice says no automated decision making of the GDPR Article 22 kind takes place. In the product, users get inline citations, source lists, highlighted passages and questions to a single source.

Nothing describes what the system does on its own: no modes, thresholds or escalation, and nothing on what happens after a wrong answer.

Blue J names about twenty customer firms, most with a named person and title, including Crowe, RSM US, Adams Brown, GreerWalker, Barnes Dennig, Perelson Weiner and the National Association of Tax Professionals. It publishes figures too: three hours saved per user per week, 75 percent less research time, more than 70 percent of users logging in weekly, and one named partner finishing four to five hours of work in fifteen minutes. The percentages are averages across users rather than measured results at a named firm, and no dates appear.

Blue J is opted out of abuse monitoring at OpenAI and Google, holds signed agreements barring both from training on Blue J data, and says no customer files are used for training. Uploaded files older than 24 hours are deleted automatically, and any present or past client can have all data erased on written request. The Terms of Use carry a mutual confidentiality article at section 10. Nothing describes separation between customers, users or matters, and nothing addresses privilege or work product beyond saying no solicitor client relationship arises with Blue J. The contract also qualifies the training position: section 3 of the Terms of Use licenses what users enter for purposes that include improving the platform.

Section 7 of the Subscriber Agreement says Blue J does not give legal, tax, accounting or other professional advice, that the product is not a substitute for a lawyer's or accountant's judgment, and that users must check output and consult their own advisors. Section 12 of the Terms of Use repeats it and says no solicitor client relationship is formed. No jurisdiction limits for advice are stated, and no professional guidance is named, neither ABA Formal Opinion 512 nor AICPA standards.

CTO Brett Janssen is named as owner of security compliance. Fifteen security policies are listed and reviewed yearly, risk assessments run yearly on the Cloud Security Alliance CAIQ, and Drata monitors more than a hundred controls. The subprocessor table lists ValsAI for benchmark testing of AI responses. No AI governance framework, owner of model behavior, description of what is tested before a change ships or what the benchmark measures, or ISO 42001 certification is published, and nothing addresses uneven output across taxpayer types or entity structures.

The subprocessor table names thirty one entities with role and location, including OpenAI, Google and Microsoft for AI services, Pinecone for vector search, Elastic Cloud, Exa Labs for web search and ValsAI for benchmark testing. Uploaded files older than 24 hours are deleted automatically, and any present or past client can have all data erased on request, with confirmation. Access control includes enforced two factor authentication, least privilege, annual access reviews, Auth0, and BastionZero with SSH disabled.

An incident response plan is tested yearly, with prompt reporting to required parties. Data is encrypted with AES-256 at rest and at least TLS 1.2 in transit, backed up daily, and tested by annual penetration tests and quarterly scans. No fixed breach notice deadline to customers is published.

Section 13 of the Terms of Use disclaims all warranties, including accuracy and completeness, excludes damages of any kind, and caps total liability at ten US dollars however many claims are made. On a $1,498 annual plan, that is under one percent of one user's fee. Section 14 has the customer indemnify Blue J, including for use in legal activities, and no indemnity runs the other way. The Tax Analysts terms in section 13 commit Tax Analysts to defend reasonable claims that the licensed content infringes someone's rights. No remedy applies when an answer is wrong.

No integration is published, and none is claimed. The home page, how it works, the pricing page and feature matrix, the security page, the Subscriber Agreement, the Terms of Use and the privacy notice show no integrations page, connector, API or developer documentation, and no mention of document, practice, tax preparation or workflow software. Answers export to PDF and Word, and team plans offer single sign on, which are export and login rather than integration. A 2023 announcement described planned API integrations, and nothing current shows they shipped.

All data is stored and processed in the AWS us-east-1 region in North Virginia. Blue J states it does not currently offer storage in any other jurisdiction, or an on premises option. Hosting is named as Cloudflare and AWS, every listed subprocessor is in the United States, and the privacy notice covers transfers of European and UK personal data. Nothing says whether the platform is multi tenant or how one customer's data is kept apart from another's.

An independent auditor maintains a SOC 2 Type 2 report annually, Drata monitors more than a hundred controls, penetration testing runs yearly and vulnerability scans quarterly. A trust center is linked by full URL. Blue J states it provides the SOC 2 report to customers after a signed nondisclosure agreement, so a prospect cannot reach it freely. No auditor, report date, coverage period or trust services criteria are published.

Generative models come from OpenAI and Google, since Blue J does not build or train its own. The subprocessor table adds Microsoft for cloud AI, Pinecone for vector search, Elastic Cloud for search and Exa Labs for web search, all in the United States, with the platform on AWS us-east-1. Abuse monitoring is switched off at OpenAI and Google, and signed agreements bar both from training on Blue J data. No specific model is named, so which model answers, and when it changes, is not stated, and no notice of model or provider changes is promised.

The individual plan is published at 1,498 US dollars per user per year, with what it includes, a seven day free trial with no credit card, and an online purchase path. A feature matrix of about twenty five rows shows what separates sole practitioner and team access, including support, analytics and single sign on. The page promises no add ons and no extra fees, and plans are annual, changeable at any time, with access kept to the end of a canceled period.

The team price, which is what most firms buy, is contact for pricing, and enterprise plans go through sales. Canada and United Kingdom pricing pages exist; the figure is the US one.

The practice area is tax only. Four firm sizes have their own pages, from sole practitioner to national, and four use cases are described: advisory, compliance, tax writing and training. The United States, Canada and the United Kingdom each have a separate site with their own pricing, security and contracts, and the US product covers federal, state and local tax. Most named customers are accounting and tax firms rather than law firms. Nothing addresses in house tax departments or government use, and nothing states what the tax content does not cover.