H

Harvey

Agents, Vault review tables, Knowledge research, Contract Intelligence review, Intake triage and Horizon Scanning all produce their output with language models. No document management or workflow system sits underneath that a firm would buy on its own. Vault stores matter documents, and its purpose is extraction, comparison and reporting across them.

In the February 2025 Vals Legal AI Report, a third party benchmark set against a lawyer baseline, Harvey Assistant was tested on six tasks. Its results ranged from 65.0 to 94.8 percent, and it beat the lawyer baseline on five. Document question answering reached 94.8 percent, 24.7 points above the baseline, with responses under a minute. Answers on scanned and badly formatted court transcripts reached 77.8 percent, 24.1 points above it.

That study measured task accuracy rather than citation validity, and Harvey did not enter the later Vals study of citation authority. BigLaw Bench, Harvey's own benchmark, publishes its task categories and judging criteria on a public repository, with hallucination and source results by model. It defines a hallucination as a factual claim that a source of truth can disprove and tracks reasoning errors apart. Harvey reports that its systems hallucinate less often than the foundation models on legal tasks while giving longer answers. Every agent claim links to the source passage behind it, and the full BigLaw Bench dataset is available on request.

Agents show their plan before they run, so a lawyer can adjust the scope and approve the work before Harvey begins. While an agent works, Harvey brings the lawyer back in when a judgment call is needed, logs every step and cites a source for every claim. Intake applies routing rules the legal team defines to send each request to an approved agent, to Contract Intelligence or to a lawyer. Reports and reviews can run on a schedule, and admins govern access through roles and workspace permissions. The point at which an agent stops on its own, and what Harvey commits to when an agent's work is wrong, are not stated.

Customer stories name the firm and give figures. Reed Smith, with about 1,800 lawyers in 34 offices, reports 700 Harvey users a day, 1,400 a month and AI certification for every associate. Repsol's legal division started a pilot in January 2024 with 50 lawyers in 12 jurisdictions and reports cutting the time on one process by more than 90%. CMS reports 95% adoption. Other named customers include A&O Shearman, Gleiss Lutz, Cuatrecasas, Macfarlanes, KKR, PwC and Deutsche Telekom.

The figures are usage counts and time savings as each customer reports them, with no stated method for how they were measured.

Neither Harvey nor its subprocessors may train any AI model on customer content or data, and model providers work under zero data retention. A firm can ask for a bespoke model trained on its own data and used only for that firm. Harvey syncs and enforces the firm's existing ethical wall policies and never creates, modifies or deletes walls, so the walls provider stays the system of record. Workspaces are logically separated, access follows roles, and data is deleted within 30 days of termination.

If the law or a court compels disclosure, Harvey gives advance written notice where it is legally permitted. Attorney client privilege and work product are not addressed as such.

Output is not legal advice and may contain errors, misstatements or gaps, and the Platform Agreement calls the service a research tool. Harvey sells to lawyers, legal departments and professional services firms, and its agent pages leave the judgment on every task with the lawyer. Access credentials belong to one named user and may not be shared. Nothing addresses competence and supervision duties under professional rules, or the jurisdictions where the product may be used.

ISO/IEC 42001:2023 certification covers Harvey's AI management system, and the Statement of Applicability published with it sets out the controls in scope. Its AIUC-1 certification, an AI security and safety standard, was conducted by Schellman and, in Harvey's account, validates its adversarial testing and AI security program. The trust center adds IRAP attestation, an EU AI Act item and AI Governance, AI Monitoring and AI Overview documents, with an AI Acceptable Use Policy among its policies.

An AI Policy dated 26 December 2025 commits to testing the accuracy, reliability and suitability of the AI in the service and to change management for continuing legal compliance. No accountable owner is named, and nothing is published about uneven output across matter types or populations.

Customers choose what to upload, set their own retention policies and can delete data at any time. Within 30 days of termination, Harvey deletes remaining customer data and content unless told otherwise, and the DPA extends return or deletion to every subprocessor. Access runs on role based controls, logical workspace separation, SAML SSO, audit logs and IP allow listing. The Subprocessor List, updated 21 September 2026, names each provider with its purpose and location, and subscribers receive at least 30 days' notice of an addition with a right to object.

Under the Security Addendum, Harvey notifies the customer of a security incident without undue delay and within 48 hours. It then reports the incident's nature, the investigation and the mitigation, and keeps relevant logs for at least a year.

The Platform Agreement, last updated 9 January 2026, sets out what Harvey stands behind. Section 8 indemnifies the customer against third party claims that the service infringes intellectual property. If a claim arises, Harvey may substitute the service, secure a license to continue, or terminate and refund prepaid fees. The indemnity excludes materials Harvey did not provide and output from input the customer knew was likely to infringe.

Harvey warrants that the service conforms to its documentation, is delivered in a professional manner and complies with applicable law. It also commits to carry industry standard insurance with insurers rated A- or better by A.M. Best. Total liability is capped at the greater of 12 months of fees or $250,000. Payment, indemnity and claims the law will not let a contract limit, such as gross negligence, sit outside that cap.

Data breach and confidentiality claims carry a separate cap of twice 12 months of fees or $500,000. After a security incident, the Security Addendum commits Harvey to an independent forensic investigation at its own cost. The agreement states that output is AI generated and may contain errors.

Word, Outlook, Teams and SharePoint all run Harvey inside them, and Vault syncs documents from iManage, SharePoint and Google Drive. The iManage connection is a direct OAuth integration with an embedded web extension, and NetDocuments access follows the firm's existing permissions. Intake takes requests from email, Jira, Slack, ServiceNow, iManage, Google Drive and SharePoint and sends updates back to the source channel.

Command Center syncs employee profiles through SCIM. Aderant and Ansarada integrations are documented in the trust center, and customers can build their own integrations, including through an MCP connector library. LexisNexis content reaches research through Ask LexisNexis.

Microsoft Azure hosts Harvey's cloud environment, with each customer's data logically separated and access set by role. Customers can keep data in region in the EU or Switzerland, the United States or Australia. Customers with localization needs can also have processing in the EU and Switzerland or in Australia, and that commitment extends to Harvey's subprocessors. The Subprocessor List gives each model provider's processing locations.

Where Anthropic or Mistral models are not offered in a chosen region, Harvey reaches them through hosting platforms such as AWS Bedrock and Google Vertex. What changes between plans or tiers is not stated.

Schellman audits Harvey for SOC 2 Type II and ISO 27001 every year, and the 2026 audit and certification renewal are complete. The trust center also lists ISO 27701, ISO/IEC 42001, AIUC-1, IRAP, TX-RAMP, GDPR, CCPA and an EU AI Act item. It publishes Statements of Applicability for ISO 27001, 27701 and 42001. Schellman, NCC Group and Bishop Fox perform external audits, and third party penetration tests run every year.

Reports, the CAIQ v4.0.3, SIG Core and SIG Lite questionnaires and the data flow and network diagrams are released through a self serve access request, with bulk download.

The Subprocessor List names ten AI providers with their processing locations, among them Microsoft, OpenAI, Google Cloud, Amazon Web Services, Anthropic and Mistral. ElevenLabs supplies voice services, DeepL machine translation, and Baseten and Fireworks.ai further model hosting. Claude and Gemini models run through Amazon Bedrock and Google Vertex AI, as Harvey's subprocessor FAQ explains. Model providers work under zero data retention, with no human review and no training on customer data.

Under the DPA, customers who subscribe to the list receive notice at least 30 days before a new subprocessor is added and may object. Which model serves which feature is not stated.

Fees are set in each customer's order form and invoiced under the Platform Agreement. If an order form is terminated early under the agreement, Harvey refunds a pro rata share of prepaid unused fees. Undisputed late amounts carry a finance charge at the Federal Funds Rate plus 1.5% a year. No rate, plan, tier or unit of charge appears on Harvey's site, and buying starts with a contact sales form.

Large law firms, mid sized firms, in house legal departments and professional services firms are the stated buyers. Industry pages cover healthcare and life sciences, technology, energy and utilities, and media, entertainment and telecom. More than 200,000 lawyers at over 3,500 organizations in more than 85 countries use Harvey, including 80% of Am Law 100 firms and five of the Fortune 10. Solutions pages address litigation, transactional work and innovation teams, and research spans legal, regulatory and tax questions across jurisdictions. Firm sizes or practice areas the product is not built for are not stated.