Clio

AI Centrality

How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.

An eighteen-year-old practice platform with an AI workspace built on top, and the vendor frames it that way itself: the marketing line is that the 18-year foundation now powers the legal AI. Clio Manage, Grow, Draft and Accounting are conventional software, and the entry tier is sold on practice management rather than models. Clio Work is genuinely AI-native and is sold as a separate product with its own trial, and Grow AI and Manage AI sit inside the older modules. Remove the models and the system 400,000 professionals run their firms on still works. B on the band. Pages read 1 September 2026.

Citation Accuracy and Hallucination Disclosure

Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.

Grounding is real and doubly sourced, and no accuracy figure was located. The pricing page states the AI is grounded in the firm's matters and cites its sources; the home page describes it working from matters, clients, filings, communications and financial data combined with over a billion legal documents across 100-plus countries, which is the vLex library Clio acquired in June 2025. That is a described retrieval method over identifiable corpora, and the subprocessor list corroborates the architecture by naming a vector database provider. What holds it at B is the absence of published measurement, and the Terms cut against any implied one: clause 14.2 states Themis does not review Output for accuracy or completeness and that Output may be incomplete or inaccurate, and clause 17.2 says the same of the legal Materials, disclaiming accuracy, completeness and currentness. Clio publishes an accuracy resource at /resources/ai-for-lawyers/ai-accuracy-legal/ which was not opened and is the rebuttal route toward A.

Autonomy and Oversight Model

What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.

A blanket review commitment stated in marketing and made binding in the contract, without the finer structure the top band asks for. The pricing page says the firm reviews and approves everything before it reaches a client or the court, which is the right commitment for the highest-stakes outputs. Terms clause 14.2 converts that into an obligation running the other way: the subscriber agrees to use AI Services and Output only with human oversight, and is responsible for reviewing Output for accuracy, completeness, appropriateness and compliance with legal, regulatory and professional requirements before disclosing or using it. Clause 14.4 leaves the subscriber in full control of how AI Services are implemented, configured and presented. B rather than A because no modes are described, no thresholds are published, and nothing sets out what the product does on its own versus what it waits to be asked.

Operational and Outcome Evidence

Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.

One named firm with a figure and a period, against portfolio numbers with no method. King Law is named on the home page with a 275% increase in revenue over four years, attributed to visibility and tooling across the firm. Named individuals appear with their firms: Angela Lennon at Koenig | Dunne, Danielle Harvey-Jacob at Harvey-Jacob Law. Platform figures are 400,000-plus legal professionals, 130-plus countries and 300-plus integrations. Nothing is dated, no method is described for the King Law figure, and the 4.7 from 12,000-plus reviews is directory material excluded under the ground rules along with the vendor's own comparison page. B: real deployment evidence with substance, short of the dating and method the top band requires.

Privilege and Confidentiality Posture

How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.

Substantive on every limb but the one the band names last. Terms clause 4.2 binds Themis and its third-party vendors and hosting partners to hold Content in strict confidence and not use or disclose it outside the agreement. Clause 21.3 goes further than most: only Themis, with strict business reasons, may access and transfer Content, and only to provide the Service, with reasonable efforts to notify the subscriber before doing so. Clause 14.6 states use of AI Services grants no right to use confidential information to train generalised LLMs. The security page states AI data is encrypted and processed in the customer's region, that AI tools process in real time without storing or reusing, and that outputs are generated only for the authorised user requesting them. What is missing for A is express treatment of privilege and work product, absent for a platform holding the entire matter file, and any documented segregation between matters within a firm.

UPL and Professional Responsibility Posture

Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point.

Every limb is covered and all of it is contractual. What it is not is stated at the top of the Terms in bold: Themis is not a law firm and does not provide legal advice, through the Service or otherwise, with clause 12.1 adding that provision of the Services, Output or Materials creates no attorney-client relationship. Who may use it is scoped: the Service is intended only for use by legal professionals and those working under their supervision, with a named exception for academic access participants. Competence and supervision are addressed directly in clause 14.2, which requires human oversight and makes the subscriber responsible for reviewing Output against professional organisation requirements and applicable fiduciary rules. Jurisdiction limits are named three ways: the Service is intended for North America with separate EMEA terms, Materials are limited to the country associated with the account, and clause 2.16 warns that Themis runs one code-base for all jurisdictions and the subscriber must configure and verify settings for its own. The client-facing limb is met by clause 14.4, which requires the firm to give its end-users disclosures covering the use of AI, the nature and limitations of AI-generated responses, and any human oversight processes.

AI Governance and Bias Disclosure

Published governance over model behaviour: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.

Principles are published, the mechanism behind them is not. A dedicated AI Principles page sets out five commitments, attributed to Chief Technology Officer Jonathan Watson, covering AI as collaborator, transparency of AI actions, high-quality data, relentless refinement and uncompromising security. Bias appears once, as a claim that diverse top-tier data minimises it, rather than as anything measured or found. Nothing names an individual or committee accountable for the AI, describes what is tested before a feature ships, or discloses a single evaluation result. The one auditable trace of a testing function is indirect and sits elsewhere: the subprocessor list names Braintrust Data as an AI analytics, evaluation and testing provider across five products. That is evidence a pipeline exists, not a published regime a buyer could examine. C on the band's own words.

AI Safety and Data Stewardship

Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.

One limb short of a full set, and the limbs it clears are clearer than anything else in this pull. Incident practice is contractual and specific: clause 5.5 requires Themis to report any event it reasonably believes represents unauthorised access to, disclosure of, use of or damage to Content within 72 hours, with clause 5.6 setting out cooperation, investigation and mitigation duties. Deletion is stated with a period: 90 days to retrieve Content after termination, after which all Content is irrevocably deleted, with escrowed data held six months under a separate escrow agreement the customer controls. Subprocessors are published in full and dated. Access control is covered by clause 21.3, limiting Themis access to strict business reasons with advance notice. Encryption, geo-redundancy and at least annual third-party penetration testing are stated. The gap is retention during the term: no period is published for AI inputs and outputs, and clause 14.6 permits de-identified aggregated Content and Output to be kept for quality improvement without limit.

AI Liability and Recourse

What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.

A real and unusually two-sided position that stops short of the output itself. Clause 11.1 excludes liability generally but carves out breaches of confidentiality, security and managed backup, so those obligations remain live. Clause 11.2 caps liability at the total paid in the six months before the claim arose, and expressly disapplies that cap to the indemnity. Clause 13.2 gives the subscriber a genuine indemnity on two grounds: third-party intellectual property claims against the Service, and, more unusually, claims arising from a violation by Themis of its own confidentiality or security obligations. Carve-outs are itemised in 13.3. What keeps this at B is that none of it reaches AI output. Clause 13.2(a) expressly excludes Output from the IP indemnity, clause 14.2 provides Output as is with no representations, and clause 12.2 disclaims any warranty as to results. No insurance position is published.

Practice Systems Integration Depth

How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.

Breadth is stated and documented, depth is not. Clio publishes 300-plus integrations through an app directory, runs a developer hub and partner programme, and the Terms treat API access as a governed feature in clause 3.9, setting out that API use is bound by the agreement, that excessive use may lead to suspension with a reasonable attempt to warn first, and that access may be modified or discontinued. Third-party services are addressed squarely in clause 18, which states they are not Services under the agreement, carry no warranties, indemnities or service commitments from Themis, and may be replaced, disabled or restricted at any time without notice. That is honest about where the boundary sits. B rather than A because no page read on 1 September 2026 describes what any specific integration moves, in which direction, or what a firm must configure; the app directory was not opened and is the rebuttal route.

Deployment Model and Data Residency

Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.

The most detailed residency disclosure located in this pull, held off the top band by one absence. Regions are published and real: hosting options in the European Union, Australia, the United States and Canada, five regional site variants, a separate EMEA instance at eu.app.clio.com with its own terms, and separate North American and EMEA agreements. Processing is distinguished from storage rather than conflated: the security page states all data used by the AI is encrypted and processed in the customer's own region, naming US, Canada, EMEA and APAC, and the subprocessor list gives a data location for every provider individually, including each AI processor. Infrastructure is named by provider and product. What is absent is the tenancy model, which is stated nowhere, and any statement of whether residency options vary by plan, which is what the top band asks for alongside the regions.

Security Certifications and Trust Center

Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.

The only attestation in this pull that states its coverage period. The trust centre at trust.clio.com announces that the 2025 SOC 2 Type II report has been issued for the period 1 June 2024 to 31 May 2025, and the security page states Clio completes annual SOC 2 Type II and SOC 1 Type II examinations with both reports available through that trust centre. The route to the report is not only a portal but a contractual right: clause 5.4(d) obliges Themis to provide a SOC 2 or SOC 3 report, or a comparable description of security measures, within thirty days of a subscriber request. At least annual third-party penetration testing is stated, and Clio's own help centre names Deloitte as the independent auditor, albeit for the earlier Type I engagement. Weaknesses a buyer should still note: the trust services criteria are not enumerated, the auditor for the current Type II is not named, the penetration testing firm is described only as a leading cybersecurity firm, and clause 5.4(d) requires entering an agreement with the report's third-party provider.

Model Supply Chain Disclosure

Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.

By a distance the best evidence on this axis in the pull, and still short of the top band on two limbs. The subprocessor list, last modified 20 August 2026, carries a dedicated AI Service Providers table naming five AI processors with the products each serves and the data location for each: AWS Bedrock, Anthropic, OpenAI, Google Vertex AI and Microsoft Azure Foundry, spanning Clio Manage, Grow, Draft, Work, Vincent AI and Clio Operate. It also names Turbopuffer as the vector database and Braintrust Data for AI analytics, evaluation and testing, and Vapi for the Grow voice agent. A buyer can therefore answer whose model sees their content, per product, and where it runs. Two things keep it at B. The specific models are never named, only the providers. And no change-notification commitment was located on the page; the Themis Data Protection Addendum, cited as the clause under which the list is published, was not opened and is the rebuttal route toward A.

Commercial Transparency

Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.

Part of the range is priced and the rest is a conversation. The pricing page publishes a starting figure of $49 USD per user per month and names four tiers, Starter, Core, Signature and Elite, with the feature split described tier by tier and a bundle saving of over 15% advertised. Above the entry tier a buyer is routed to a custom quote, and large firms to a bespoke process. The Terms make clear that the published number is not the whole cost: clause 9.5 refers to setup fees, implementation charges and Metered Features fees as separate non-refundable items, and clause 9.6 gives purchasers of setup or professional services a sixty-day window to start them or lose them. None of those amounts is published. B on the band's first limb, real pricing published for part of the range with the upper tiers withheld. Note the tier names have changed generation again and third-party trackers still report the previous set.

Firm and Practice Coverage

Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.

The widest published coverage in the pull, with the limits drawn jurisdictionally rather than functionally. Sixteen practice areas carry their own pages, from bankruptcy and criminal to intellectual property and real estate, and the segmentation runs across four firm sizes from solo to enterprise and Big Law, plus seven role-specific pages. Both buyer types the band asks about are addressed by name: in-house counsel and government law each have a page. Real limits are stated, though they concern where rather than what: the Terms scope the Service to North America with separate EMEA terms, restrict Materials to the country associated with the account, and warn in clause 2.16 that a single code-base serves all jurisdictions so the subscriber must configure and verify settings itself. B rather than A because the in-house, government and firm-size pages were not opened on 1 September 2026, and nothing states which practice types the product handles poorly.