B
BrandShield

BrandShield is a brand protection and external cybersecurity platform that finds and removes online threats aimed at a company's brand, executives and customers. It monitors marketplaces, websites and domains, social media, paid ads, mobile app stores and the dark web. A product launched in 2026 also checks what generative AI platforms say about a brand: it prompts ChatGPT, Gemini, Perplexity and Grok with brand queries and then acts against the sources those answers cite.

Detection runs on AI.ClusterX, the company's own threat clustering engine, which reads infrastructure, hosting patterns, content signals and behavioral indicators to judge whether a domain or asset is malicious. Image detection catches altered logos and product visuals. The company's own enforcement team coordinates takedowns with platforms, registrars and hosting providers. Customers can buy the platform fully managed, self service or hybrid, so they can run incidents themselves, hand them to a 24/7 security operations center, or split the work.

The company publishes pages for twelve industries and for six buying roles, including legal counsel, compliance and information security. BrandShield Resolve, an entry level product for domain and phishing protection, is sold through AWS Marketplace. The contracting entity is Brandshield Ltd. of Herzliya, Israel.

Compared with

BrandShield, head to head

Side by side on the same 15 capability axes and 12 legal signals: where the two part company, and what neither one publishes.

Build your own comparison

Capability grades

All 15 axes, graded from public sources on the date shown. Hover a grade to see what the letter means on that axis.

BB on AI CentralityThe models are the engine of a core capability, layered on a product that would still function without them as a document or workflow system.

AI Centrality

How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.

Detection is model work end to end. The vendor's AWS Marketplace listing describes AI.ClusterX as a proprietary predictive threat clustering engine that reads infrastructure, hosting patterns, content signals and behavioral indicators. The vendor also names image detection for altered logos and product visuals, AI prioritization, and a 2026 product that prompts generative AI platforms and analyzes their answers. Remove the models and a business still remains: an enforcement desk with a 24/7 security operations center, named enforcement managers, relationships with registrars, hosts and platforms, and a case and evidence workflow.

The models drive detection on top of a workflow platform rather than being the whole product. This rests on the home page, the AWS Marketplace listing and product page text found through web search. The product pages themselves could not be opened.

Source: Vendor Published
BB on Citation Accuracy and Hallucination DisclosureGrounding is real and documented, with linked primary sources and a described retrieval method, short of published accuracy figures an outsider can test.

Citation Accuracy and Hallucination Disclosure

Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.

The product cites no legal authority, so the tests for grounding in primary law and for a citator do not apply. What matters is grounding and measurement. Grounding is described, not just claimed: the marketplace listing sets out what AI.ClusterX reads to reach a verdict on a domain or asset, and states that evidence is collected automatically and cases are structured for takedown readiness, so a reviewer sees the material behind each determination.

What is missing is any measure of whether detections are correct. No precision, recall, false positive rate or test set is published anywhere located. The one figure the vendor does publish, a 98% takedown success rate, measures whether platforms grant removals rather than whether the detections were right. That distinction matters on a product whose errors fall on third parties.

Source: Vendor Published
BB on Autonomy and Oversight ModelA written commitment that the models work alongside a supervising lawyer, with real review surfaces, short of the full control structure: commonly the threshold at which the system stops or what happens after it is wrong.

Autonomy and Oversight Model

What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.

The mode structure is published plainly, and one element is still missing. Three delivery models are sold as a choice: fully managed, self service and hybrid, so the customer sets how much the system does alone. The entry product applies automation across detection, investigation and, in the vendor's words, response if desired, with single click remediation and unlimited self managed takedowns. The listing states the design lets teams keep control and oversight.

The route back to a human is named and staffed: a 24/7 security operations center available to assist, advise or intervene, and named enforcement managers who handle complex premium takedowns directly with registrars and hosts. What is not published is what happens when a detection is wrong. No remediation, appeal or withdrawal path for a wrongly removed asset is published on any readable page.

Source: Vendor Published
CC on Operational and Outcome EvidenceCustomer logos and unattributed testimonials stand in for evidence, or results are quoted with no basis stated.

Operational and Outcome Evidence

Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.

Logos and unattributed claims stand in for evidence on the pages that could be read. The home page shows a band headed Trusted by the world's leading companies whose customer names did not display. Four headline counters (verified takedowns per year, phishing takedown success, customer satisfaction, real time security operations coverage) showed as zeros. A 98% phishing takedown success figure has no basis stated, and one testimonial fragment has no name, title or company.

The vendor cites a G2 category leader position, a Cybersecurity Breakthrough Award and a Frost and Sullivan leader listing, but analyst and award placement is not deployment evidence. A success story library sits in the navigation and could not be opened, so named customer material may exist.

Source: Vendor Published
DD on Privilege and Confidentiality PostureNothing published on how client confidences are handled by a product built to ingest them.

Privilege and Confidentiality Posture

How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.

Nothing is published on how client confidences are handled by a product built to take them in. The customer sends this platform its trademark portfolio, the assets it is protecting, its enforcement instructions and, by the vendor's account of the Takedown Service, the documents needed to authorize cease and desist letters in its name. The privacy policy is limited to the website by its own terms. The data processing agreement is not published and takes effect on entering a Subscription Form, so the data terms cannot be read before subscribing.

No confidentiality clause, segregation statement, retention or deletion commitment for customer material, or position on privilege or work product is published on any readable page or in the parts of the terms of service found through search. The terms of service could not be opened; a confidentiality section is likely in that document and did not turn up.

Source: Vendor Published
DD on UPL and Professional Responsibility PostureNothing published on the advice line for a product that produces legal work, including where it is sold to people who are not lawyers.

UPL and Professional Responsibility Posture

Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.

Nothing is published on the advice line for a product that contracts to do legal work. The terms of service define the Takedown Service to include cease and desist letters to websites, domain holders, registrants, hosting providers and registrars, reports to ICANN on whois inaccuracy and DNS abuse, deindexing requests to search engines, and reports to marketplaces, social platforms, app stores, ad platforms and security companies.

Sending a cease and desist letter on a customer's behalf is legal work by any ordinary description, and it is done by a company that is not a law firm. Even so, no statement is published that BrandShield is not a law firm, does not give legal advice, creates no attorney client relationship, or limits who may use the service. No jurisdiction limits are named, although enforcement runs across registrars and platforms worldwide.

The terms of service could not be opened, and the clauses above were found through search. A disclaimer could sit in a section that did not turn up.

Source: Vendor Published
DD on AI Governance and Bias DisclosureNo governance position published for a system whose output affects legal outcomes.

AI Governance and Bias Disclosure

Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.

No governance position is published for a system that decides whether a named third party's domain, listing or profile is malicious and then acts to remove it. The vendor's navigation and footer list no trust center, security page, responsible AI page or governance page. The footer's legal section holds three items: the privacy policy, the terms of use and a cookie policy. Nothing readable names an accountable owner, describes testing before release, publishes evaluation results, or discloses uneven output across sectors, languages or jurisdictions.

That last gap matters here. False positives on this product fall on third party sellers and site operators rather than on the buyer, and no error rate, appeal statistic or review of who is wrongly flagged is published. The product and solution pages could not be opened, though governance material is not usually carried there.

Source: Vendor Published
CC on AI Safety and Data StewardshipA generic privacy policy covers the product without addressing what happens to documents and prompts after processing.

AI Safety and Data Stewardship

Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.

A generic website privacy policy covers the company without addressing what the platform does with the data it holds. The privacy policy, updated July 2026 and read in full, says it applies only to information collected by the website and in transactions. It covers browsing, registration, cookies, third party ad servers, promotional messages and payment account information. Nothing addresses platform data: there is no retention period for detections, evidence or case records, no deletion commitment on termination, no access control description, no subprocessor list, and no incident or breach notification practice.

A data processing agreement exists but, by its own incorporation language, takes effect on entering a Subscription Form rather than being published, so a buyer cannot read the data terms in advance. The only readable security commitment is that the company takes precautions and runs data security systems, with an express statement that it does not guarantee its systems are immune.

Source: Vendor Published
DD on AI Liability and RecourseNothing published on who bears the loss when the system is wrong.

AI Liability and Recourse

What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.

Nothing is published on who bears the loss when the system is wrong. That matters here because the product's errors do not fall on the buyer. A false positive removes a third party's listing, domain or account. The vendor contracts to send cease and desist letters and platform reports in the customer's name, so a wrong call exposes the customer to the party on the other end. No liability cap, indemnity in either direction, warranty, insurance position, or remediation or withdrawal process is published on any readable page.

The AWS Marketplace listing publishes a payment term rather than a liability term: fees are nonrefundable. The data processing agreement is not published. The terms of service could not be opened. No limitation of liability clause turned up in search.

Source: Vendor Published
CC on Practice Systems Integration DepthIntegrations are listed as logos or marked as coming, with no documentation an implementer could use.

Practice Systems Integration Depth

How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.

What is published is procurement and channel coverage rather than documented integration. The one integration established is the AWS Marketplace listing: software as a service deployed on AWS, bought inside an existing AWS account and billed through the AWS bill. The vendor presents this as removing procurement and deployment friction for security teams already there. Everything else described as coverage is monitoring reach.

Marketplaces, social platforms, app stores, domains, paid ads and the dark web are watched, and registrars and hosting providers are counterparties for enforcement, not systems the customer connects. No API or developer documentation is published, and nothing describes what data moves in which direction or what a customer must configure. No connection was found to an IP portfolio, docketing, trademark management or document management system, which is where an IP counsel's own records sit. The product and solution pages could not be opened.

Source: Vendor Published
CC on Deployment Model and Data ResidencyCloud delivery is implied and neither the tenancy model nor the region is stated.

Deployment Model and Data Residency

Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.

Cloud delivery is stated, and neither the tenancy model nor the region is. The AWS Marketplace listing records the product as software as a service deployed on AWS, and the vendor's own announcement says the listing lets security teams deploy domain and phishing protection inside their existing AWS environment. Nothing else is published: no statement of shared or dedicated tenancy, no list of regions, no choice of region, no split between where data is processed and where it is stored, and no transfer mechanism.

That is a live question for a company contracting from Israel with European and United States enterprise customers. No data processing agreement, where residency terms would usually sit, is published.

Source: Vendor Published
DD on Security Certifications and Trust CenterNo independent security attestation located.

Security Certifications and Trust Center

Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.

No independent security attestation is published. The vendor's navigation and footer list no trust center or security page, and the footer's legal section carries three items and no certification marks of any kind. The footer and full navigation of the home page were checked, and a targeted search for an ISO 27001 or SOC 2 attestation naming this vendor returned only aggregator profiles and market data pages, nothing from the company.

The one readable assurance statement is in the privacy policy. It is a statement of precautions rather than an attestation, with an express caveat that the systems are not absolutely immune to unauthorized access.

Source: Vendor Published
CC on Model Supply Chain DisclosureThe vendor refers to advanced or proprietary models without identifying what sits underneath.

Model Supply Chain Disclosure

Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.

The vendor names its engine and not what sits underneath it. AI.ClusterX is named as a proprietary predictive threat clustering engine, and its inputs are described: infrastructure, hosting patterns, content signals and behavioral indicators, used to decide whether an asset is malicious and how it connects to known threat activity. Image detection and AI prioritization are named as capabilities. What is missing: no model is named, no model provider is identified, nothing states where inference runs, and no commitment to tell customers when any of this changes is published. The AWS deployment on the marketplace listing describes infrastructure, not the models.

Source: Vendor Published
BB on Commercial TransparencyReal pricing is published for part of the range, with enterprise tiers withheld, or the unit and structure are stated without the figure.

Commercial Transparency

Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.

Real pricing is published for part of the range. The vendor's AWS Marketplace listing is BrandShield's own: the company is the seller of record, the listing copy is its own, and the listing carries its own end user license agreement. It publishes a twelve month contract at $22,000 for the BrandShield Managed Anti-Phishing Solution. That covers unlimited standard takedowns, a capped allowance of managed premium takedowns and 24/7 security operations support.

It is billed by units on a single dimension, and the price scales with units committed rather than with threat volume or takedown count. The refund position is published and absolute: nonrefundable. The figure prices only the entry product, BrandShield Resolve. The two enterprise products, Online Brand Protection and External Cybersecurity, carry no published price, and the vendor's own site has no pricing page.

Source: Vendor Published
BB on Firm and Practice CoverageSegment and practice coverage is described with substance, short of the boundaries: what is supported is clear, what is not is left open.

Firm and Practice Coverage

Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.

Coverage is segmented precisely and the boundaries are left open. The vendor publishes pages for twelve industries (pharmaceuticals, financial services, cryptocurrency, fashion and apparel, retail, online gaming, luxury, SME and SMB, manufacturing, sports and entertainment, technology and internet, travel and hospitality, plus an enterprise page) and for five use cases. It also publishes pages for six buying roles: founders, legal counsel, compliance teams, IT managers, CISO threat intelligence and information security teams.

A legal counsel page beside a CISO page tells a buyer plainly that both are addressed. The entry product is positioned for entry level or lean security teams. What is not stated is where coverage stops. The industry and role pages themselves could not be opened; only their published list was read.

Source: Vendor Published
Sources on file

4 public documents

The public pages on file for BrandShield, with the recorded signals each one supports and the date it was last read. Open any of them and check the reading against the record.

Pricing

$22,000 per year

USD, as published, never converted
  • The only published price is on BrandShield's AWS Marketplace page: $22,000 a year.
  • That buys the entry-level product, BrandShield Resolve, which watches for fake domains and phishing sites.
  • It includes unlimited ordinary takedowns, a capped number of harder ones handled by hand, and round-the-clock support.
  • The price goes up with the number of units you commit to, not with how many threats are found.
  • The two bigger products have no published price, there is no pricing page on the company's own website, and fees are not refundable.

One figure is published, for one product, in one place. The vendor's AWS Marketplace listing prices the BrandShield Managed Anti-Phishing Solution, the packaging of BrandShield Resolve, at $22,000 for a twelve month contract. It is billed by units on a single dimension. Each unit bundles unlimited standard takedowns, a capped allowance of managed premium takedowns worked by named enforcement managers with registrars and hosts, and 24/7 security operations support.

The vendor states that price scales with units committed rather than with detection or takedown volume, and that raising the premium allowance means adding units. Fees are nonrefundable. Nothing is published for the two enterprise products, Online Brand Protection and External Cybersecurity, and the vendor's own site has no pricing page, so this is the entry product's price rather than a floor across the range. The terms of service also state that subscriptions renew automatically unless sixty days' written notice is given; that document could not be opened and the term was found through search.

Confidentiality and data terms: A data processing agreement exists and is not published: the terms of service state that entry into the agreement or a Subscription Form is treated as execution of the Standard Contractual Clauses as described in the DPA, and no DPA URL exists in the public index. The confidentiality and data terms are therefore readable only after subscribing. The terms of service itself was blocked to this fetcher on 12 September 2026 and is an operator item.

Note: Figure read from the vendor's AWS Marketplace listing on 12 September 2026. BrandShield is the seller of record, the listing copy is the vendor's own, and the listing carries the vendor's own end user license agreement. The vendor's own website has no pricing page anywhere in its navigation or footer, so this is the only price published for any BrandShield product. The vendor publishes five competitor comparison pages; they were excluded and no figure from any of them appears here.

Legal Signals

What each signal means

A signal records what public sources say on the date shown. It is not a grade and it is not a recommendation. Where a signal reads Not addressed, it means the index did not locate the material in public sources on that date, which is a statement about disclosure rather than about the product.

Confidentiality and Privilege

Client Data in Training

Can material a lawyer puts into this product be used to train a model?

Terms silent

A published agreement or policy exists and none of it addresses the question either way, or the document that would answer it could not be read and the summary names the retrieval limit. The summary states which shape the silence takes: an improvement right granted that never names training, or no improvement right granted at all.

An agreement is published and no training position was located in it. The terms of service could not be opened on 12 September 2026, so they are recorded here from parts found through search. Those parts are substantial: the formation clause, the definitions of the Online Services and Enforcement Services, the Takedown Service scope, the account and login provisions, and the data protection allocation. In them, Your Data is a defined term, and the customer warrants it is entitled to transfer that data and must inform data subjects where required.

BrandShield is designated a CCPA Service Provider and the customer a Business, and a data processing agreement takes effect on entering a Subscription Form. A Service Provider designation limits use of California personal information to the business purpose; that is a real constraint but not a training term. Nothing in those parts, the privacy policy or any other readable page says whether customer material may be used to train or improve models.

Source: Vendor Publishedform a binding agreement between you and BrandShield Ltd.As of Sep 12, 2026Evidence

Prompt and Output Retention

How long does the product keep what a lawyer typed, and can that be set to zero?

Not addressed

No located public material states how long prompts and outputs are retained.

No public material located states how long the platform keeps what a customer puts in or what it generates. The privacy policy, updated July 2026 and read in full, is limited to the website by its own terms. Its deletion provision covers personally identifiable information submitted through the site, handled by written request, with an offer to inspect the records at the company's Herzliya offices within thirty days.

Nothing addresses the material that matters here: the customer's trademark and brand assets, the detection record, evidence collected for takedowns, case history, or the seller and domain intelligence built from them. No retention period, customer control or deletion commitment on termination was located, including in the parts of the terms of service found through search; that document could not be opened on 12 September 2026.

The data processing agreement, which would usually carry a retention schedule, is not published and takes effect on subscribing.

Source: Vendor PublishedAs of Sep 12, 2026Evidence

Ethical Walls and Matter Segregation

Does retrieval respect the firm’s ethical walls, or can the model read across them?

Not addressed

No located public material addresses walls or matter level segregation.

No located public material addresses segregation between users, brands or matters. The platform plainly contemplates multi-brand and multi-user work: a customer console at a dedicated subdomain, a dashboard presenting everything included in a subscription, three delivery models including self-service, and enforcement staff who act on the customer's behalf. Nothing states whether one brand's detections, evidence or seller intelligence are separated from another's inside an account, whether roles or permissions exist, or how access by the vendor's own security operations and enforcement staff is controlled.

The privacy policy is scoped to the website and carries no product access model, and the page inventory contains no security or trust page in which one would sit. Recorded as of 12 September 2026 on the surfaces named in the build log.

Source: Vendor PublishedAs of Sep 12, 2026Evidence

Third Party Request and Subpoena Notice

If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?

Disclosure addressed, notice absent

Published terms or policy address disclosure to authorities or in response to legal process, and no commitment or reservation regarding customer notice is located anywhere. The vendor has told the customer that data can leave and has said nothing about whether the customer hears of it.

Compelled disclosure is addressed and customer notice is not. The privacy policy, updated July 2026 and read in full, lists four cases in which BrandShield may pass personal information to third parties without consent. One is a court order instructing it to give details or information to a third party. The other three are a breach of the user's agreements or unlawful acts, a dispute or legal proceeding between the user and BrandShield, and a corporate reorganization.

No commitment to notify the customer appears in that document, and none was located elsewhere, including in the parts of the terms of service found through search. Two limits apply: the policy covers website information rather than platform data, and the terms of service could not be opened on 12 September 2026, so a notice commitment could sit in a section that did not turn up. As located, disclosure to authorities is contemplated and notice is not promised.

Source: Vendor PublishedIf Brandshield received a court order instructing it to give details or information to a third partyAs of Sep 12, 2026Evidence
Accuracy and Authority

Primary Law Corpus Provenance

Where does the law in this product come from, and does the vendor have the right to use it?

Not addressed

No located public material identifies the corpus behind the product’s answers.

No primary law corpus is identified because the product does not answer from one. The vendor's marketplace listing and product material outline what it reads: domain registrations and DNS and hosting attributes, content signals, behavioral indicators, marketplace and social platform listings, mobile app stores, paid ads, dark web sources, and the answers generative AI platforms give to brand prompts. It matches these against the customer's own trademarks and brand assets.

Nothing published says where that detection data comes from, how it is acquired or refreshed, or on what basis, and no licensing question is addressed.

Source: Vendor PublishedAs of Sep 12, 2026Evidence

Good Law Verification

Does the product tell you when the authority it just cited has been overruled?

Not addressed

No located public material addresses whether authority is checked for subsequent history.

The product cites no legal authority, so nothing located addresses checking subsequent history, and nothing would be expected to. The currency mechanisms it publishes concern threats rather than authority: continuous monitoring, real-time detection and rescreening as new domains, listings and profiles appear.

Source: Vendor PublishedAs of Sep 12, 2026Evidence

Refusal and Uncertainty Behavior

What does the product do when the answer is not in the corpus?

Documented

The vendor describes refusal or abstention behavior in public materials.

The vendor describes a hand-off to a person in public materials, short of anything demonstrable. Automation is stated to run across detection, investigation and, in the vendor's words, response if desired, with the design allowing teams to maintain control and oversight; a 24/7 security operations center is available to assist, advise or intervene when needed; and complex cases are routed to named enforcement managers who work them by hand with registrars and hosting providers.

So the published behavior where the system is not confident, or the case is hard, is that a human takes it. What is not published is any threshold, any rate at which escalation happens, or any evaluation demonstrating it, and the same estate carries an unmeasured accuracy claim alongside.

Source: Vendor PublishedAs of Sep 12, 2026Evidence

Fabricated Citation Record

Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?

None located

No court order, opinion or disciplinary record addressing fabricated or hallucinated legal citations produced by this product has been located as of the date shown. This is a statement about the public record on that one subject, not a finding about the product, and this signal is not a litigation history.

Searched on 12 September 2026, on both the product name and the company name, against published trackers of AI hallucination decisions including coverage of the Charlotin AI Hallucination Cases database, for court records addressing fabricated or hallucinated legal citations in this product's output. None located. This is a statement about the public record on that one subject as of that date. It does not cover enforcement or takedown litigation.

Source: Bar Guidance or Court RecordAs of Sep 12, 2026
Professional Responsibility

Bar Guidance Alignment

Has the vendor engaged in public with the ethics opinions its buyers are bound by?

Not addressed

No located public material engages with bar or ethics guidance.

No public material located engages with bar or ethics guidance. The vendor publishes a legal counsel role page and sells enforcement work that produces legal notices. Nothing readable addresses ABA Formal Opinion 512, any state bar opinion on generative AI, or the professional responsibility of the counsel who directs an enforcement program run on this platform. The terms of service, the document most likely to carry a professional responsibility statement, could not be opened on 12 September 2026.

This finding covers the marketing and policy pages, where engagement with bar guidance is normally published when it exists at all. Recorded as of 12 September 2026.

Source: Vendor PublishedAs of Sep 12, 2026Evidence

Billing and Fee Posture

Does the vendor address what happens to the bill when the work takes an hour instead of six?

Outside the fee relationship

The product does not touch a fee between a lawyer and a client. It operates before an engagement exists, or it is bought by a team that bills no client for the work. Savings claims aimed at the buyer’s own cost are recorded in the summary and do not make the row a savings claim, because no client bill is in the loop.

The product does not touch a fee between a lawyer and a client. It is bought by a brand owner's legal, IP, compliance or security function to enforce that company's own rights, and no client is billed for the work the detection and takedown engine performs. Savings claims are published and aimed at the buyer's own cost rather than at a client invoice: the entry product is presented as saving time, reducing costs and making high-level protection available to businesses of all sizes by automating tasks traditionally handled by threat hunters, and the pricing model is sold on cost predictability, with standard takedowns uncapped so cost does not rise with threat volume.

Source: Vendor PublishedAs of Sep 12, 2026Evidence

Outside Counsel Guideline Readiness

Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?

On request only

The material exists behind a sales conversation or an executed agreement.

The material a firm would need exists behind a signed agreement rather than in public. The terms of service state that where the Standard Contractual Clauses apply under the data processing agreement, entering the agreement or a Subscription Form counts as executing those clauses. They also state that BrandShield is a CCPA Service Provider and the customer a Business. So a DPA exists, and it takes effect on subscribing rather than being published; a search for a public copy found none.

No subprocessor list or model provider statement was located, and there is no trust center or security page where either would sit. A firm asked by its client to evidence this vendor under an AI or data clause would have to get the pack through the sales process. The terms of service could not be opened on 12 September 2026 and are read here only through search results.

Source: Vendor PublishedAs of Sep 12, 2026Evidence

Court Disclosure Support

If a judge’s standing order requires an AI disclosure, can the product produce one?

Partial record

Some elements of the record are available, short of a document level export.

Elements of a record exist, built for platform enforcement rather than for a court's AI disclosure. The vendor states that evidence is collected automatically and that cases are structured for takedown readiness, with remediation workflows triggered from them, and the console shows case status and enforcement outcomes to the customer. That is a per case evidence record assembled by the system. What is missing is the part a certifying lawyer would need: nothing states that the record identifies which model or classifier reached the determination, what it analyzed, or which named person reviewed it before the notice was sent. No disclosure template or court guidance was located.

Source: Vendor PublishedAs of Sep 12, 2026Evidence
Contact

Correct a record, or ask how something was graded

Every grade and every signal on this index is drawn from public sources and dated. If a record is wrong, out of date, or missing an artifact the index did not locate, send the source and it will be reviewed and the record redated. Vendors are welcome to submit documentation. Nothing on this index is for sale, including a listing, a placement, or a grade.

AI Legal Index

The AI Legal Index is an independent index that tracks changes to AI vendors in legal. It holds 462 vendors across 9 categories, each graded on the same 15 capability axes and recorded against 12 legal signals, from public sources. No vendor pays for inclusion, placement, or rating.

Index Status
Last index update
October 21, 2026
The AI Legal Index is an editorial reference. It is not a regulatory body, not a law firm, and nothing published here is legal advice or a recommendation to retain or avoid a vendor. Records are verified against published sources, bar guidance and public court records. Where a record reads not addressed, the material was not located in public sources on the date shown. See the Methodology page for evaluation standards and limitations.
© 2026 AI Legal Index
3801 N Capital of Texas Hwy, Ste E240 · Austin, TX 78746