DigitalOwl

AI Centrality

How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.

The models are the entire product and there is nothing underneath them. DigitalOwl does one thing, converting unstructured medical records into structured data, and every part of that is model work: extraction from conventional and electronic health records, chronology construction, impairment and body part classification, identification of soft medical terms, condition status change detection, and a chat interface over the record set. The vendor states the AI is proprietary, built by in house experts and trained specifically for these use cases rather than adapted from a general tool. Connect exposes the model output as an API for other systems to consume, which is the clearest possible statement that the extraction is the asset. Remove the models and there is no product, only a file upload. Fifth consecutive A on this axis in this category. Entered under brief ruling 2 as an acquired product still sold under its own name, with Datavant named as owner.

Citation Accuracy and Hallucination Disclosure

Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.

THE FIRST PUBLISHED ACCURACY FIGURE IN THIS CATEGORY, and it is short of the evidence that would make it checkable. The vendor states the platform is third party tested at over 98 percent accuracy. In 45 records almost nothing on this index publishes a number here at all, and this vendor publishes one and attributes it to independent testing, which is materially more than its four category peers. What is missing is everything that would let a reader test it: no evaluator is named, no methodology, no sample size, no test corpus, no date, and critically no definition of what accuracy means for this task. Extraction accuracy could mean correctly transcribed values, correctly classified pages, correctly ordered events or correctly identified providers, and those are very different measures producing very different numbers. Held at B on that basis rather than A. The number is credited as a real disclosure and the note records that a figure without a definition or an evaluator cannot be verified or compared. Checked the self serve page, the SSP product page, the home page, the View and Connect product pages and the blog material on 29 Aug 2026.

Autonomy and Oversight Model

What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.

A clear positioning statement exists and no operational boundary does. The vendor states plainly in published material that the platform is a tool to support legal professionals rather than replace them and that it cannot substitute for legal professionals' judgment, decision making or expertise. That is an unusually direct disclaimer of substitution and is more than most of this index offers. It is a statement about role rather than a description of the oversight model. Nothing published states whether any extraction or classification is applied without human review, whether a low confidence result is surfaced differently, what happens when the chat interface answers a question the records do not support, or what review the Self-Serve pipeline receives before output is delivered inside 24 hours. Checked the self serve page, the SSP product page, the View and Connect pages and the blog material on 29 Aug 2026.

Operational and Outcome Evidence

Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.

Independent recognition and a corporate outcome are both dated and checkable, and no customer is named. Independent and verifiable: the Self-Serve legal platform was named an Innovative Product Winner in the 2026 BIG Innovation Awards, a named programme with a dated announcement, and the company was acquired by Datavant in 2025, which is an arm's length transaction by a major health data company and is the strongest single validation event on this record. Published operational figures are specific: up to 72 percent of medical record review time saved, review time reduced by up to 50 percent, page count reduced by 90 percent, and a thousand page record reviewed in minutes. Held at B rather than A because no law firm, carrier or customer is named anywhere in located material, no case study with methodology exists, and every efficiency figure carries an up to qualifier with no baseline, sample or period. Same treatment as Exterro, which reached B on independent analyst placement with no named customer.

Privilege and Confidentiality Posture

How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.

A strong instrument set, and a structural conflict question this vendor raises more sharply than anything else on the index. Published: SOC 2 Type II, HIPAA and GDPR compliance, a business associate agreement offered to customers and covered entities, secure storage of uploaded records, and customer controlled manual deletion at any time. That is the second BAA on the index and a genuine set of protections for the claimant health information at stake. THE UNADDRESSED QUESTION: this vendor sells to both sides. Its legal offering serves plaintiff personal injury, medical malpractice and mass tort firms, and its insurance offering explicitly includes streamlining review of inbound settlement demand packages and bodily injury claims for carriers. Those are the same disputes viewed from opposite ends, and nothing published describes what separates a plaintiff firm's uploaded records and case insights from the carrier side of the business. No treatment of attorney client privilege or work product was located either. Held at B on the strength of the instruments, with the conflict question named rather than buried.

UPL and Professional Responsibility Posture

Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point.

The claim is made and no framework sits behind it. The vendor publishes an explicit statement that the platform is a tool to support legal professionals and not replace them, and that it cannot substitute for their judgment, decision making or expertise, made in the context of addressing attorney resistance to adoption. That is a direct and relevant position and it is the reason this grades above the D that most of this category receives. What is absent: no statement that output is not legal advice, no positioning on the supervising attorney's duty over machine extracted medical facts that will support a demand, no guidance on verification before reliance, and no engagement with any bar guidance. A sentence in a blog post addressing adoption anxiety is a claim rather than a professional responsibility framework. Checked the blog material, the self serve page, the product pages and the site navigation on 29 Aug 2026.

AI Governance and Bias Disclosure

Published governance over model behaviour: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.

The vendor tells buyers to demand exactly the disclosure it does not make, which is the third instance of this pattern in the pull after LinkSquares and FinregE. Its own published buyer guidance advises firms evaluating medical chronology software to ask whether the platform has undergone independent bias and accuracy testing, and states that reputable providers will be transparent about their validation processes and able to demonstrate their AI produces reliable, unbiased results across different case types and medical conditions. DigitalOwl publishes an accuracy figure and nothing on bias. No bias or fairness testing, no validation methodology, no AI policy, no model card, no evaluation output, no accuracy monitoring, no named governance body and no ISO 42001 were located. The untested risk is concrete for a product extracting clinical facts: documentation quality and diagnostic language vary systematically across providers and patient populations, and an extraction model's performance differences across those populations would shape which injuries appear in a demand. Fifth consecutive D on this axis in this category.

AI Safety and Data Stewardship

Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.

The best data control disclosure in this category, and the training question remains unanswered. Published and specific: records uploaded to the Self-Serve portal are securely stored and the customer can manually delete their data at any time, which is a user exercisable control rather than a policy assurance and is the only such control located in this category. Alongside it a business associate agreement, SOC 2 Type II, HIPAA and GDPR compliance, and a published trust page. GDPR compliance carries data subject rights machinery that matters here because the individual whose records these are is a third party to the customer relationship. Held at B rather than A because nothing states whether uploaded medical records, generated chronologies or extracted structured data are used to train or improve the proprietary models, no retention period is published for data the customer does not delete, and nothing describes what happens to derived structured output when the source records are deleted. A deletion control is a strong answer to how long, and not an answer to what for.

AI Liability and Recourse

What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.

No published position located beyond the BAA, which allocates HIPAA obligations between the parties rather than product liability. Nothing was found on liability for AI output, warranty, service levels or remedy. The exposure is asymmetric in a way particular to this product: a missed diagnosis, an omitted provider or a misdated treatment in an extracted chronology understates an injury, and on the plaintiff side that flows into a demand that settles low while on the carrier side it supports a denial, so the same extraction error harms a claimant in both directions. The published 98 percent accuracy figure implies a residual error rate by its own arithmetic and no published position addresses who bears it. Checked the self serve page, the product pages, the trust page references and the site navigation on 29 Aug 2026.

Practice Systems Integration Depth

How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.

A real integration product exists and it is aimed at the other half of the customer base. Connect is a medical data API allowing clients to retrieve and integrate structured output into rules engines, workbenches and custom workflows, and it is sold as a named product rather than mentioned as a capability, which is genuine integration substance. The language and the named destinations are insurance systems: rules engines and workbenches are carrier claims and underwriting infrastructure, not law firm systems. No legal case management system is named anywhere in located material, no document management connector, and no integration with the platforms a personal injury firm runs on. A plaintiff firm gets a self serve upload portal and an API it would need to build against itself. Compare Tavrn at B, naming Filevine, Litify, Clio and Smokeball alongside API access. Checked the Connect product page, the self serve page, the SSP product page and the site navigation on 29 Aug 2026.

Deployment Model and Data Residency

Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.

Nothing located. No hosting provider is named, no region or data residency commitment is published, and no single tenant or dedicated instance option is described. Stated GDPR compliance implies the vendor handles European personal data and says nothing about where it is processed or stored, and a company holding United States claimant medical records under HIPAA alongside European obligations is exactly the case where residency would be stated if it were designed for. Compare Supio at B, which names data centres in three countries. Checked the self serve page, the SSP product page, the trust page references, the product pages and the site navigation on 29 Aug 2026.

Security Certifications and Trust Center

Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.

Three regimes, a trust page, and the second BAA on the index, held below A on currency alone. Published: SOC 2 Type II, HIPAA and GDPR compliance, a business associate agreement offered to customers and covered entities, and a dedicated trust page published as Trust at DigitalOwl and linked from product pages. Offering a BAA is the instrument HIPAA actually requires rather than a claim about compliance, and it puts this record alongside Tavrn as one of only two on the index to do so. Held at B rather than A on the same absences that separate the tiers: no auditing firm is named, and no examination period, scope or certificate date is published for the SOC 2, so currency cannot be established at all. That is the specific gap EvenUp closes with a dated April 2026 recertification to reach A, and it is the only material difference between the two records on this axis. Correction candidate: the trust page itself was not read in this pass and is the surface most likely to carry dates and scope.

Model Supply Chain Disclosure

Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.

Nothing located. The AI is described as proprietary and built by in house experts, which is an ownership statement rather than a supply chain disclosure, and no foundation model provider, model family or version is named. No subprocessor list was found. The acquisition adds an unaddressed dimension rather than resolving one: Datavant is a health data platform company and nothing published describes what data or processing relationship now exists between the two, which for a business associate handling protected health information is a question a covered entity is entitled to have answered. Checked the product pages, the self serve page, the blog material including the acquisition post and the site navigation on 29 Aug 2026.

Commercial Transparency

Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.

No pricing published by the vendor at any level. No price, no range, no unit of charge, and no indication of whether the Self-Serve portal prices per case, per page, per record set or by subscription, which matters because a self serve product is precisely the configuration where a firm expects to see a price before engaging. An independent review platform reports a starting figure of $7,500 per month, which is third party reconstruction rather than disclosure and is recorded as context rather than credited, and if approximately right it places the product well outside small firm reach. The contingency fee point recorded across this category applies: case costs are advanced against a claimant's recovery, so undisclosed cost is undisclosed cost to an injured person. Checked the self serve page, the SSP product page, the pricing navigation and independent review material on 29 Aug 2026.

Firm and Practice Coverage

Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.

The broadest coverage in this category by a wide margin, spanning both sides of the market. Legal coverage names personal injury, medical malpractice and mass tort. Insurance coverage names underwriting, claims review, post issue audits, long term care application review for material misrepresentation, workers compensation, property and casualty claims, bodily injury, and review of inbound settlement demand packages. Record coverage extends to both conventional and electronic health records, which is a meaningful technical distinction since EHR exports and scanned paper files present different extraction problems. Held at B rather than A because breadth is asserted rather than characterised: no statement of which record formats, provider systems or document types the extraction handles reliably, no jurisdictional scope, and no indication of whether the 98 percent accuracy figure holds evenly across record types or was measured on a favourable subset. Breadth without a characterised boundary is the same gap as everywhere else on this axis.