Filevine

AI Centrality

How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.

The AI portfolio is the widest in this pull and the platform beneath it is a complete practice management system. Twelve or more distinct AI products are named and separately marketed: MedChron for medical chronologies, DemandsAI for demand letters, Depo CoPilot for live deposition assistance, Depo Summaries, AIFields, AI Doc Review, AI Data Mapping, ValidationAI, ImmigrationAI, Leads AI, Ask LOIS, LOIS for Word and the LOIS Console. AI has its own top-level navigation entry and its own free tier. Several of those are the engine of a capability a firm actually buys, most obviously the medical chronology and the demand letter, which are the two most labour-intensive documents in a personal injury practice. What sits underneath is the business Filevine sold before any of it: matter management, document management and assembly, intake and lead conversion, billing and time-keeping, e-signature, analytics and deadline generation. Strip the models out and every one of those remains and the firm keeps running. The commercial structure confirms the reading, with the AI products sold as packages and extensions on top of a core platform rather than as the platform itself.

Citation Accuracy and Hallucination Disclosure

Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.

Grounding is claimed consistently across products and no measurement is published anywhere. The pricing page describes Ask LOIS as returning grounded, traceable answers, LOIS for Word as producing source-linked recommendations, AI Drafting as delivering fact-level accuracy and human-verified output, and Depo Summaries as carrying page and line references, and the free LOIS Explore tier is described as drafting content with every result cited to source. A legal research capability with an opinion reader sits alongside it, so a user can open the authority rather than take the citation on trust. The failure modes are named in the agreement rather than in a footnote, and that is rare: output may be incomplete, may contain factual or legal errors or omissions, may reflect biases present in training data, and substantially similar inputs may produce different output. What is absent is any number. Searched the AI features page, the pricing page and the subscription agreement on 31 Aug 2026 and located no accuracy figure, no test set, no evaluation and no error rate, set against a marketing claim on AIFields inviting buyers to stop struggling with AI hallucinations. One hedge belongs in the record: MedChron's verifiable output is described as pointing back to source documents when applicable, which is not the same as always. The individual product pages were not opened.

Autonomy and Oversight Model

What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.

The review obligation is written into the contract and it is specific about the act required. Section 3.2 of the subscription agreement makes the subscriber solely responsible for reviewing, verifying and determining whether and how to use any output, and then names what that means: independently confirming citations and legal conclusions before relying on output or sharing it with any third party, including a client or a judicial body. Few vendors name the court as the audience. It is reinforced by an AI Acceptable Use Policy incorporated into the agreement and governing permitted and prohibited uses of AI-enabled features, by a product page describing AI drafting as producing human-verified output, and by outputs described as structured for human review with hyperlinks into the underlying material. What is not published, checked across the AI features page, the pricing page and the full agreement on 31 Aug 2026: no abstention behaviour, no confidence or uncertainty indicator surfaced to the user, no threshold at which a feature declines, and no route to report or correct a wrong output. The agreement discloses non-determinism, that similar inputs may produce different output, which is honest and is a warning rather than a control. The AI Acceptable Use Policy was not opened and is the rebuttal route.

Operational and Outcome Evidence

Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.

Volume claims stand where customer outcomes should be, on the surfaces read. What is published: approximately 100,000 demand letters drafted by Filevine customers every month, a claim to host the largest and most accurate repository of personal injury case management data in the world, and a case study headline naming an individual, a shareholder said to have brought 125 active cases under control and recovered his evenings. The agreement carries a customer reference clause permitting Filevine to use a subscriber's name and logo, with a withdrawal right, which tells a buyer the logos are consented to rather than assumed. What was not established is any measured outcome attributable to a named organisation: the case study headline gives a person and a caseload figure without naming the firm, and no other quantified result was located on the pages read. This is the weakest-evidenced row on this record and the limit is worth naming precisely: a dedicated customers and case studies library exists at a public URL and was not opened on 31 Aug 2026, and it is the obvious home for named, quantified deployments. Anyone revisiting this record should open it first.

Privilege and Confidentiality Posture

How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.

Substantive published commitments on confidentiality and training use, in the agreement, short of matter-level segregation. The training position is the most carefully drafted in this pull: Filevine engages third-party AI providers under written agreements prohibiting them from using subscriber data to train or improve their models, and under which they do not retain subscriber data beyond the applicable request, with a single named exception for temporary retention for abuse-monitoring or trust-and-safety purposes. Naming that exception rather than leaving it implicit is the mark of a drafter who expected the clause to be read. Ownership is stated clearly, with the subscriber owning its data including output generated from it, and subscriber data defined as confidential information under a mutual confidentiality clause surviving seven years, with trade secrets protected indefinitely. A separate clause commits Filevine not to reduce its confidentiality or security commitments mid-term without written consent. Tenant separation is addressed obliquely, in a provision stating that other subscribers' queries and output are not the subscriber's data. What is missing is the matter-level question: nothing describes a wall between two matters inside one firm, which for a plaintiff practice running adverse cases is the live issue. The Security Addendum and Data Protection Agreement are published and were not opened.

UPL and Professional Responsibility Posture

Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point.

The most complete advice-line clause located in this pull, and no engagement with the authorities behind it. The agreement states that Filevine is not a law firm or provider of legal advice and that use of output does not create an attorney-client relationship, repeats in the disclaimer that Filevine is not a law firm and does not provide legal advice, and then goes further than any comparable clause by specifying the professional act required: the subscriber must independently confirm citations and legal conclusions before relying on output or sharing it with any third party, including a client or a judicial body. That names the duty, the object of the duty and the audience, which is the competence and supervision dimension most vendors omit. An AI Acceptable Use Policy is incorporated into the agreement and controls permitted and prohibited uses of AI features. What holds this below the top band: no bar or ethics authority is named anywhere located, including ABA Formal Opinion 512, and no jurisdictional limit on the product's output is stated, which matters for a platform serving immigration, criminal defence and prosecution work across every state. The AI Acceptable Use Policy was not opened on 31 Aug 2026 and is the rebuttal route.

AI Governance and Bias Disclosure

Published governance over model behaviour: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.

The first vendor in this pull to address bias at all, and it does so twice. Six AI principles are published and named: Fairness, stated as fighting against the threat of bias in its legal AI tools so the technology works for all legal professionals and their clients; Reliability and safety; Privacy and security; Inclusiveness, framed around building tools across practice areas and fostering equity in the profession; Transparency, committing to explain how the AI works in understandable language; and Accountability, committing to take full responsibility for the impact of the technology. More importantly the point is repeated where it binds, with the agreement disclosing that output may reflect biases present in training data, which is a contractual acknowledgement rather than a marketing sentiment. Governance has real apparatus around it: an AI Acceptable Use Policy incorporated into the agreement, a commitment to maintain a list of permitted models for use in AI-enabled features, and a clause preventing Filevine from reducing confidentiality or security commitments mid-term without consent. Named roles exist in a Head Legal Futurist and a Legal Futurist. What is absent is testing: no pre-release evaluation regime is described, no result of any kind is published, no bias audit or fairness measurement appears, and the Fairness principle is a single sentence. Owner accountability is implied by role rather than assigned.

AI Safety and Data Stewardship

Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.

The Data Protection Agreement, last updated 14 Jan 2026 and read in full, closes the two gaps that held this row down. All five elements this axis asks for are now published and specific. Retention: personal information is retained for the duration of performance of the Services, and on termination or expiry Filevine will destroy it or return it if the subscriber so directs in writing. Deletion: where law compels retention Filevine must notify the subscriber in writing with the documents involved, the legal basis, and a specific timeline for destruction once the requirement ends, and it commits to certify in writing that destruction is complete within thirty days of completing it. Access control: access is limited to employees who require it and to the parts they strictly require, under confidentiality commitments, with privacy training and background checks where lawful. Subprocessors: each is engaged under a written agreement with obligations not less protective than the DPA, the current list sits in Annex C, a subscribe-by-email mechanism gives notice of new ones, the subscriber may object within ten business days on reasonable grounds, and Filevine is liable for a subprocessor's acts as if it had performed them itself. Incident practice: Filevine will notify the subscriber promptly and without undue delay on becoming aware of a security breach, describing the categories of information affected, the approximate number of data subjects, the steps taken to investigate and remedy, and a named contact, with phased disclosure permitted and Filevine bearing the reasonable costs. One softness rather than a gap: the notification duty is expressed as promptness rather than a fixed number of hours. The Security Addendum was not opened.

AI Liability and Recourse

What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.

The first A on this axis in the pull, and it is earned on four separate limbs rather than one strong clause. Indemnity: Filevine will defend the subscriber against third-party claims that the services infringe a United States patent or copyright or misappropriate a trade secret, and will indemnify for damages, costs and fees awarded or agreed, with named remedies of procuring the right to continue, modifying the services, or terminating and refunding. Cap: total liability is limited to the greater of the fees paid in the twelve months before the claim or two hundred thousand dollars, which is a floor rather than a ceiling for smaller subscribers and is the highest published floor located in this pull. Carve-outs: the cap expressly reaches claims arising from a security breach affecting subscriber data caused by breach of the Security Addendum or the DPA and from breach of confidentiality obligations, gross negligence and intentional misconduct sit outside the limitation where law prohibits limiting them, and the infringement indemnity sits outside the cap entirely. Insurance: the agreement commits Filevine to maintain industry-standard insurance from carriers rated A minus, VI or better by A.M. Best, which is a stated quality floor and the only insurance commitment located in any agreement in this pull. Alongside those sit an affirmative warranty that the services will substantially conform to documentation, not knowingly infringe and comply with applicable law, and a 99.0 per cent uptime commitment with a published three-tier credit table. Output itself carries no warranty and is carved out of the indemnity, which the note records so the picture is complete.

Practice Systems Integration Depth

How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.

Real integrations exist and are named, with the depth left to a page that was not opened. The most substantive is LOIS for Word, which puts drafting and standards-enforced redlining inside Microsoft Word with source-linked recommendations, so the AI reaches the application where the document is actually written rather than requiring a trip to a separate system. Microsoft 365 integration is reported, DataBridge is published as a package extension giving secure real-time access to Filevine data, Vinesign has a public API for embedding e-signature into other workflows, and the platform advertises native and partner integrations as a purchasable extension. The agreement confirms API access is granted and makes the subscriber responsible for activity through it. Deposition scheduling includes court reporter booking and automated Zoom link generation, which is an operational integration into how the work is actually run. What is not established is what any of these move, in which direction, or what a firm must configure: the dedicated integrations and API page was not opened on 31 Aug 2026, and no developer documentation, endpoint list or connector catalogue was read. Nothing was located for iManage, NetDocuments or e-billing.

Deployment Model and Data Residency

Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.

Reading the Data Protection Agreement supplied the processing location and the cross-border framework that were missing. Delivery is cloud, hosted on Amazon Web Services, which the vendor names on both the case management page and the pricing FAQ, and separate United States and Canadian login domains imply a distinct Canadian instance. The DPA adds what the marketing did not. Annex A identifies the data importer as Filevine, Inc. at 1260 Stringham Avenue, Suite 600, Salt Lake City, Utah, so a European or British subscriber can see which entity in which jurisdiction receives its data, and a Data Protection Officer is named as the contact point. Cross-border transfers are governed rather than assumed: the European Commission's Standard Contractual Clauses and the UK Information Commissioner's international data transfer addendum are both incorporated, with the operative provisions completed, the docking clause disapplied, and competent supervisory authorities enumerated for EU member states, the United Kingdom via the ICO, and Switzerland via the Federal Data Protection and Information Commissioner, with the CNIL as the default. Government access requests are to be notified to the subscriber only, not the data subject. What is still not published is the residency choice itself: no list of available regions or data centre locations, no option a subscriber can select, no tenancy model, and no statement distinguishing where data is stored from where model inference runs, which matters because third-party AI providers process subscriber data. The Security Addendum was not opened.

Security Certifications and Trust Center

Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.

Reading the Data Protection Agreement moved this row. The certification claim was always broad, covering SOC 2 Type II, SOC 3, HIPAA, CJIS, HITECH and GDPR, with a structured security page reached from the platform navigation under governance and risk, industry compliance, access and identity security, and data protection. What was missing was any way for a buyer to get behind it, and the DPA supplies that contractually. Filevine commits to retain an independent third party at least once per year to audit its data processing practices and its information technology and information security controls for the facilities, infrastructure and systems used to process personal information, which is a stated scope and a stated cadence. On the subscriber's written request it will make the relevant audit reports available for review, subject to confidentiality, which is a route to the report rather than a promise of one. It commits to address any issues or exceptions raised in those audits through a management corrective action plan. If it has not conducted an audit in the past year, or declines to share the reports, the subscriber acquires a direct audit right on 21 days' notice, extending to records, systems, facilities and meetings with relevant personnel. And separately it agrees to respond in writing to a subscriber security questionnaire once a year, within six weeks of receipt. What is still absent is the paperwork a buyer would ideally see without asking: no auditor is named, no report date or coverage period is published, and the certification claims themselves carry no scope statement. The security page and Security Addendum were not opened.

Model Supply Chain Disclosure

Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.

The agreement confirms third-party models are in the stack and never says whose. Section 3.1 states that AI-enabled features use artificial intelligence including models provided by third-party AI providers, and section 4.3 commits Filevine to maintaining a list of permitted models for use in those features. A commitment to maintain a list is not a commitment to publish one, and no model, provider or version was located on any page read on 31 Aug 2026. One tension belongs on the record: the AI principles page states that Filevine's AI is proprietary, while the agreement describes models provided by third-party AI providers, and nothing published reconciles the two. What is disclosed instead is the contractual treatment of those providers, which is strong on its own terms, prohibiting them from training on subscriber data and from retaining it beyond the applicable request except temporarily for abuse monitoring. No change-notification commitment specific to models was located, though the general update clause requires thirty days' notice for material changes and bars reduction of security or confidentiality commitments mid-term. A Subprocessors page is published at a public URL and was not opened; it is the most likely place a provider is named and could move this grade.

Commercial Transparency

Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.

The shape of the purchase is published in unusual detail and no figure appears anywhere. The pricing page sets out the full modular structure: a LOIS tier with seven named components, and four platform packages covering Matters, Intake, Depositions and Signatures, each broken into named features, plus five Matters extensions for analytics, deadline management, a client portal, data access and integrations. A buyer can therefore see exactly what is bought separately, which is the practical question in a modular product. A genuinely free tier is published with its limits stated, LOIS Explore, requiring no credit card, offering document upload and questioning, AI drafting with results cited to source, legal research and the opinion reader, and expressly excluding the case management connection. The agreement adds real commercial mechanics: interest at the lesser of 1.5 per cent per month on amounts more than ten days overdue, suspension rights at ten days, a ten-day window to dispute a charge or waive it, usage telemetry with retroactive invoicing at list rates if entitlements are exceeded, and non-refundable fees outside a warranty or breach termination. One cost disclosure is unusual and creditable: implementation, configuration and data migration are stated not to be provided by Filevine at all but by separate certified Implementation Providers under their own agreements and fees. What is nowhere published is a number, at any tier, and every route to one is a demo or a custom quote.

Firm and Practice Coverage

Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.

The most extensively documented segment coverage in this pull, and no boundary anywhere. Seventeen dedicated segment pages are published across four dimensions. By practice area: personal injury, family law, mass torts, immigration, insurance defence, criminal defence and estate planning. By government tier: prosecutors, public defenders, states and municipalities, attorneys general, and federal agencies, which is the widest public-sector treatment located in the pull and is reinforced in the agreement by clauses addressing sovereign immunity, anti-indemnification statutes, constitutional limits on multi-year obligations, and FAR and DFARS commercial software designations. By corporate use: in-house counsel. By firm size: solo, small, mid-size and big law, each with its own page. Product coverage is equally specific, with ImmigrationAI stated to handle documents in 170 languages and Timely generating court deadlines for any jurisdiction in the country. What is absent is any statement of limits: no practice area, matter type, jurisdiction or scale is identified as unsupported, and the deadline claim of any jurisdiction in the country is asserted without a coverage table behind it. The individual segment pages were not opened on 31 Aug 2026.