D

Darrow

The models are the product and the agreement says so in terms. Section 8.3 states that the AI features are mandatory and integrated by default, and that a customer who does not accept the AI service providers' terms has no remedy other than to stop using the service. The published architecture is four layers of model work: ingesting raw signals at scale, interpreting them through legal context, reasoning across the result to prioritize and orchestrate action autonomously, and surfacing it to the teams responsible.

Published throughput of more than 5 million signals detected monthly is not a volume a system without models reaches. Remove the models and there is no product.

Grounding is asserted without a mechanism anyone can inspect. The knowledge base is described in principle as connecting the laws that create obligations, the organizational weaknesses that emerge when they are not met, and the enforcement actions that follow. The inputs are described by category as regulatory filings, incident reports, litigation patterns and market activity. Nothing describes how an output traces back to the input that produced it: no citation, source link or retrieval method.

Hallucination is addressed only as a disclaimer. Section 8.3 records that generative AI involves uncertainties as to quality and accuracy and that the company has no control over output. The trial terms disclaim liability for undetected, misdetected or mischaracterized events, signals, risks or cases. No accuracy figure or test set is published, and section 12.1 expressly disclaims any warranty of accuracy. The Research and Domain Coverage pages were not opened and may say more.

Autonomy is claimed in plain terms and oversight is asserted without a mechanism. The published description of the agentic layer says advanced AI systems reason across the intelligence, identify emerging opportunities, prioritize signals and orchestrate action autonomously. The product is framed as an always on legal red team. The only oversight statements are contractual disclaimers. Section 8.3 makes the customer responsible for evaluating the results of its use of the AI features and says the service is not a substitute for legal advice, legal research and independent review.

Nothing published separates what the system does unattended from what a person approves. No threshold is stated at which it escalates or stops, no review surface inside the portal is described, and nothing addresses what happens when a signal is wrong. The platform, law firms and FAQ pages were not opened and may say more.

Substantial deployment evidence, with the names and the numbers on opposite sides of the page. Roughly thirty customer organizations are shown by name, and they are serious ones in this market: Baron and Budd, Milberg, Girard Sharp, Bernstein Litowitz Berger and Grossmann, Zuckerman Spaeder, Singleton Schreiber, Kahn Swick and Foti, Lynch Carpenter, Bailey and Glasser, Nichols Kaster, Loevy and Loevy, Wolf Haldenstein, Stephan Zouras, Schneider Wallace, Freed Kanner, Kozyak Tropin and Throckmorton and Consovoy McCarthy, alongside Microsoft and Armis on the corporate side.

Figures are published at corporate level: more than 22 billion dollars in legal exposure surfaced, over 80 organizations, more than 5 million signals detected monthly, over 22,000 legal professionals and more than 10,000 active matters. What is missing is the join between them. No figure is attached to any named firm, no case study is published, nothing is dated, and there is no testimonial from a named individual anywhere on the surfaces read.

Nothing published addresses how client confidences are handled, and the terms that do exist run the other way. The confidentiality regime at section 11 defines Confidential Information as business, product, technology and marketing information that is not public, and does not bring Customer Data within that definition, so the mutual confidentiality obligations do not by their terms reach what a customer puts into the service.

Section 5.1 grants the company and its subprocessors an irrevocable, perpetual, sublicensable license over Customer Data that expressly extends to training foundation models. Section 11.3 reserves a broad right to access, read, preserve and disclose any information obtained in connection with the service. Nothing addresses privilege or work product, nothing addresses segregation between customers or matters, and no retention period exists.

What does exist is recorded for completeness: section 7.3 commits to reasonable industry standard technical and organizational security measures to protect Customer Data, which is a security promise rather than a confidentiality one. Section 5.2 separately prohibits the customer from submitting protected health information.

A disclaimer exists inside the terms and the product surfaces do not address the question. Section 8.3 states that the customer acknowledges the service is not a substitute for legal advice, legal research and independent review, and the trial terms go further, adding that it is not a substitute for audit, assessment or any medical, legal or regulatory conclusion and that the customer is solely responsible for obtaining necessary legal, medical, scientific or regulatory advice and for its own due diligence.

Both sit inside the AI features and warranty clauses rather than in a dedicated position. Nothing on the home page or the segment pages addresses the question at all. No competence or supervision language appears, no rule of professional conduct is named, and jurisdiction is handled by disclaimer rather than by limit, with section 12.1 disclaiming any guarantee that output is suitable for the customer's jurisdiction.

The product recommends which matters a firm should pursue, which makes the absence of a supervision position more material than the disclaimer acknowledges.

No governance position is published for a system that decides which potential claims a firm sees. There is no responsible AI statement, governance framework, named owner accountable for model behavior, description of evaluation before release, or published testing result. Nothing addresses bias, which matters here because the system prioritizes signals and so determines which exposures surface and which do not. The company describes itself as an AI lab and publishes a Research page, which was not opened and may say more; a page title is not evidence of its contents.

The agreement moves the other way, recording at section 8.3 that the company has no control over the output of the AI features.

A generic security clause covers the product without addressing what happens to customer content after processing. Section 7.3 commits to reasonable, industry standard technical and organizational security measures during the subscription term, with no control named: no encryption standard, access model, logging or testing cadence. There is no security page anywhere in the site navigation or footer. Retention is not addressed.

Section 10.4 says only that after termination the company may delete Customer Data, which is permissive and sits against the perpetual license granted at section 5.1. Section 8.1 acknowledges that subprocessors exist and names none. No incident or breach notification practice is published. The privacy policy is incorporated by reference at section 7.1 and was not opened, so it may say more. Section 7.1 is headed Privacy Policy and DPA, but no data processing agreement is linked or published.

A real published position, short of the full picture. Section 14.1 gives a narrow but genuine company indemnity covering third party claims that the right to use the service infringes a valid United States patent, with five named exclusions and remedies at section 6.4. The agreement states that these are the sole and exclusive remedy for intellectual property infringement. Section 13 caps aggregate liability at fees paid in the preceding twelve months, dropping to 50 US dollars for trial and prerelease services under section 2.3 and for the drug and device intelligence trial.

What is absent is any warranty a buyer could invoke. Section 12.1 disclaims accuracy, completeness, availability and security outright. Section 8.3 states the company is not liable for the performance of the AI features and does not guarantee the accuracy or reliability of any output. The trial terms disclaim liability for undetected or mischaracterized signals, risks or cases. No insurance position is published.

No integration into practice systems is published. Section 8.4 of the agreement refers to integration with certain third party applications set out in the company's documentation or within the service, then disclaims responsibility for them without naming any. No case management system, document management system, intake platform or CRM appears on the surfaces read, and there is no integrations page or developer documentation in the navigation or footer.

This matters for the segment named first on the site, since a plaintiff firm receiving case signals needs them to land in an intake or matter system. The Platform and Law Firms pages were not opened and may say more.

Nothing is published about where the software runs or where customer content sits. No region, country, hosting provider or data center is named on any surface, and no tenancy model is described: nothing states whether the platform is single or multi tenant or how one customer's data is separated from another's. The agreement says only, at section 8.1, that the service is hosted and made available by certain subprocessors, none of them named.

No deployment option, private tier or residency commitment of any kind is offered. The one geographic signal is indirect, in the export control clause at section 15.1 referring to Israeli, United States or foreign export controls.

No independent security attestation is published. No SOC 2, ISO 27001, HIPAA or any other framework is claimed anywhere, no auditor or certifying body is named, no report is offered at any access tier, and no penetration testing is mentioned. There is no security page and no trust center: the site navigation carries Law Firms, Insurance, Compliance, Research and a Company menu, and the footer carries only a cookie policy, a privacy policy and the terms of use.

The agreement offers section 7.3 alone, promising reasonable industry standard measures without naming a standard. There are no unsupported badges on display either, so the gap is absence rather than overclaiming.

Partial disclosure, with the providers named and change notification expressly refused. Section 8.3 identifies the AI service providers as third parties including Anthropic Claude and OpenAI, both misspelled in the published text, and makes clear that the AI features are mandatory and integrated by default. The disclosure sits in the agreement rather than in marketing. The same clause reserves the right to use different AI service providers at any time without prior notice, and a customer who objects to a current or future provider has no remedy but to stop using the service.

The word including leaves the list open. No specific model or version is named, no location is given for inference, and no subprocessor list is published; section 8.1 acknowledges subprocessors without identifying any.

No pricing information is published at any level, including the unit of charge. There is no pricing page, no tier names, no feature split, no indication of whether charging is per user, matter, signal or case, and no free trial or self-serve route. Every call to action leads to a demo request or a booking with the team. The agreement shows the shape of the arrangement rather than its price. Fees are set in an Order Form in US dollars and paid annually in advance.

They cannot be canceled or refunded, renew automatically unless canceled 30 days before expiry, and carry overage fees for excessive use. A banner states that 78 percent of production is already reserved, which suggests a commercial model limited by capacity.

Segment coverage is described with substance across three distinct buyers, and the boundaries are left open. Each segment has its own page and stated job: law firms identifying emerging litigation earlier and building case portfolios, insurers detecting exposure and pricing risk, and corporate compliance teams surfacing exposure across their external digital footprint. Practice breadth is put at more than 50 legal exposure categories, and a Domain Coverage page in the footer was not opened and may say more.

The named customers, overwhelmingly plaintiff and class action firms, corroborate the primary segment. What is missing is the edge. No individual practice area is named on the surfaces read, firm size is not addressed, no jurisdiction of coverage is stated, and nothing says which exposure types or industries fall outside the system.