L

LawVu

LawVu sold a legal workspace for about a decade before its AI layer, and its intake, matters, contracts, spend, reporting and document modules run as workflow and record keeping without a model. The AI now reaches most of those modules. LawVu Intelligence covers an Assistant for in house legal users and a legal assistant for business users in the Business Portal. It also covers AI intake that routes requests by risk and urgency, contract extraction, bulk contract import, invoice extraction and billing guideline review.

LawVu Lens turns executed contracts into structured data on obligations and risk, and LawVu Draft, acquired as ClauseBase in December 2025, drafts and redlines inside Word. The June 2026 LegalOS launch recast the platform around these agents, and the homepage describes LegalOS as designed with AI as a foundational layer. In the help center in October 2026 the Assistant and the Business Portal assistant were in a beta open by invitation, and the workflow builder was marked coming soon. The record keeping product is still the base the AI reads from and writes to.

LawVu's AI answers from the customer's own records and points back to them. LawVu Lens reviews clauses side by side with citations back to the source contracts, and the Assistant may cite the LawVu records an answer came from. The Business Portal assistant answers business users from knowledge content available to them and shows excerpts from the source where available, so the user can verify the response. It says when it cannot find a reliable answer rather than generating one.

LawVu Draft reviews contracts against the customer's own clause library, precedents and imported playbooks, so a reviewer can trace a redline to the standard behind it. LawVu's AI service terms say outputs may be incomplete or inaccurate and must be reviewed before use. The help center says the Assistant may return incomplete or incorrect information and that important information should be verified. The figures LawVu attaches to its AI measure speed, such as up to five times faster reviews in Draft, rather than accuracy, error rates or results on a test set.

In LawVu the AI proposes and a person approves. The Assistant asks for approval before it creates or updates a record, and it cannot delete records, approve or reject contracts or invoices, or fully automate complex workflows. It acts only on information the user already has permission to see. Assistant supported actions are labeled in the product and recorded in a full audit trail, and actions taken through the MCP server land in the same activity log as actions taken by people.

Agentic workflows run on events, schedules or on demand inside guardrails the legal team sets, and the homepage promises human in the loop guardrails on all agentic capabilities. The AI service terms say outputs cannot be relied on for decision making without human review. The acceptable use policy bars fully automated decisions with legal or similarly significant effects on individuals without human oversight, testing or prior risk evaluation.

A help article describes the coming workflow builder as running autonomous workflows for the Assistant without human intervention, and states no limit on what those workflows may change.

LawVu's customer stories name the organization and the person speaking, and several carry figures. At Sizzling Platter, LawVu bulk created more than 700 matters from the legal team's spreadsheets during a three month implementation, which corporate counsel Samuel Gray says saved up to 175 hours of data entry. Dentsu has centralized more than 10,000 contracts in LawVu across more than 40 markets. The AES legal team says its use of AI rose from 30 percent to 80 percent in 2024, with LawVu Draft a large part of that.

A healthcare legal operations lead, whose organization is not named, says the average master services agreement went from 21 business days to six. The stories carry no publication date, and each figure is the customer's own account without a stated method. The June 2026 LegalOS release names Discord, Etsy, Employment Hero, The Pokémon Company and Estée Lauder among customers. The plans page adds modeled returns, such as 344 percent a year for a team of five.

LawVu states its training position in its contract and in its AI FAQ. The AI service terms bar third parties from using customer data or outputs to improve or train AI and machine learning models, including LawVu's AI services. The AI security and privacy FAQ says LawVu trains no models on customer data, directly or indirectly, and that inputs and outputs to the AI services are not used for training. LawVu operates under an exemption from Microsoft's standard Azure OpenAI monitoring, so Microsoft may not access or monitor its usage, and interactions with the AI tools are transactional and retain no data.

Each customer's data is logically segregated from other customers' data. Restricted matters are visible only to members added to them, and the Assistant, the Business Portal assistant and the MCP server all work within each user's existing permissions. The SaaS terms let LawVu collect anonymized statistical data about use, such as session data, page loads and which features are used, to improve services and develop new ones.

The SaaS terms protect customer data through a mutual confidentiality clause, which allows disclosure to a party's lawyers and other professional advisors and does not mention legal privilege.

LawVu draws the advice line in its terms and in the product. The AI service terms say outputs cannot be relied on as any form of legal or other advice. The acceptable use policy, which every user of the generative AI features must acknowledge, bars using the AI services as a substitute for licensed legal advice. It also bars letting unqualified individuals generate or rely on outputs such as legal documents without appropriate professional legal supervision, and relying solely on AI output for legal or regulatory determinations without human review.

Business users reach AI directly through the Business Portal assistant, whose help article says it does not provide legal advice and that legal advice comes from the customer's legal team. LawVu sells to in house legal departments, and the legal team decides who can use the Assistant and what business users can see. The policy applies one standard everywhere LawVu sells and sets no jurisdiction specific limits.

LawVu's trust center carries an AI Governance page and a set of AI Principles covering AI used inside LawVu and AI in the product. The six principles are user centric, transparent, reliable, safe and secure, trustworthy, and privacy and data governance. They commit LawVu to be transparent about its AI practices, technology, suppliers and data usage, and to monitor AI tools to reduce adverse impacts. The principles are reviewed annually.

The AI FAQ says LawVu completes privacy impact assessments for all new AI features, and that its AI systems inherit the security and privacy controls of its hosted software inside the ISO 27001 certified program. Generative AI features are switched on by opting in, and organization administrators enable or disable new features at any time. On ISO 42001, the AI product pages say LawVu is certified, while the FAQ, updated March 2026, says it is aligned and pursuing independent audit and certification.

The framework is written as principles and assessments, without a named owner of AI governance or reported testing or bias results.

LawVu puts retention, deletion, access, subprocessor and incident terms in its published contract documents. The data processing addendum commits to breach notice without undue delay and, where feasible, within 72 hours. It gives 30 days' notice of a new subprocessor with 15 days to object on data protection grounds, and requires return and deletion of personal information at termination. The SaaS terms give the customer a month after termination to request a copy of its data and let backups hold it for up to a year.

The subprocessor list, last updated 4 August 2026, names nine entries with the activity and processing country for each, including Microsoft Azure for hosting and Azure OpenAI for AI services. AI calls are transactional and keep no data, while Assistant logs stay visible in the product for 30 days and are available from LawVu after that on request. Access runs through roles and permissions, restricted matters, SAML single sign on with SCIM provisioning and enforceable multifactor authentication.

Data is encrypted at rest with AES 256 and in transit with TLS 1.2 or higher, and LawVu keeps a 35 day point in time restore plus a daily backup to a secondary subscription.

LawVu publishes the contract that allocates loss. The SaaS terms, which apply to order forms signed after 13 May 2024, cap each party's liability in a calendar year at the fees paid or payable for that year. They exclude indirect and consequential loss, lost profits and loss of data, and lift the cap only for personal injury, death or fraud. LawVu indemnifies the customer against third party claims that its use of the services or platform infringes intellectual property.

The indemnity excludes unauthorized use or modification, breach of the agreement, materials LawVu did not supply, and third party or personal data. The AI service terms, effective 30 April 2026, carve AI output out. LawVu does not warrant that outputs are complete or accurate, accepts no liability for loss relating to them, and requires the customer to review every output before use. The services are provided as is. New Zealand law governs, or Delaware law for customers in the United States, with arbitration in each.

LawVu documents its integrations at the level an implementer needs. Microsoft's own connector reference lists LawVu for Power Automate, Power Apps, Copilot Studio and Logic Apps. It documents 26 actions, such as creating a matter or uploading a file, and 14 triggers, such as a contract changing state. It also sets a limit of 100 calls per connection a minute and a separate sign in for LawVu's region for United States government customers.

The REST API uses OAuth clients, covers matters, contracts, files, users and invoices, and supports webhooks. The MCP server lets Claude, ChatGPT and Microsoft Copilot read and write LawVu data within each user's access, and every action goes to the activity log. LawVu Draft is a Word add in. Outlook and Gmail sync turns email into structured requests, intake also runs through Teams and Slack, and DocuSign, Adobe Sign, Dropbox Sign and Formstack are embedded for signature and document generation.

An iManage integration, built and supported by partner Blue Car Technologies, mirrors files and folders between LawVu and iManage and syncs edits both ways. Help guides cover SharePoint, Box and Google Drive.

LawVu runs on Microsoft Azure, with each customer's data logically segregated from other customers' data. Customers choose one of five regions, in Australia, the United States, Europe, Canada or the United Arab Emirates. LawVu contractually agrees to store data in the chosen region, with primary and secondary data centers inside its boundaries. Microsoft's connector reference also lists a LawVu region for United States government customers.

AI processing can leave the storage region, and the subprocessor list says where. Azure OpenAI processing follows the SaaS agreement for United States and European data stacks, runs in Europe for Australian and UAE customers, and runs in the United States for Canadian customers. The AI FAQ says data processed outside the region is handled only transiently to produce the output, while the AI product page says data stays in the chosen region at rest.

A 99.95 percent monthly uptime commitment sits in the service level addendum, with support around the clock through in app chat and response times set by severity.

LawVu has held ISO 27001 certification since April 2019, maintained through annual internal and external audits. Its compliance page dates its first SOC 2 audit to January 2020 and its first SOC 1 audit to February 2021. It was certified in 2025 against the Dubai Electronic Security Center's standard for cloud providers serving UAE government and semi government entities, and it holds AssuranceLab seals of compliance for HIPAA, CCPA and GDPR.

The ISO statement of applicability and certificates, the SOC reports, penetration test reports and the business continuity plan sit in the LawVu security pack. A visitor gets the pack through a request form after accepting a notice of confidentiality, or by email under a nondisclosure agreement. Annual penetration tests come from CREST certified vendors, and Qualys scans the application for new vulnerabilities daily.

AssuranceLab is the only assessor named on the open pages, so the ISO and SOC auditors, report types and periods are in the pack. LawVu's AI product pages say it is certified to ISO 42001, while its AI security and privacy FAQ, updated March 2026, says it is aligned with the standard and pursuing certification.

LawVu names its AI providers feature by feature. Its AI FAQ lists Microsoft Azure AI Foundry, using Azure OpenAI and Foundry models, for contract extraction, bulk import, billing guidelines and drafting and review. Azure Document Intelligence handles invoice extraction, Azure Content Understanding joins it for Workspace Intelligence, and Azure AI Search supports drafting. The Copilot integration uses the customer's own Microsoft Copilot licenses.

The subprocessor list states where Azure OpenAI processing runs for each data region, and the data processing addendum gives 30 days' notice before a new subprocessor. A help article says LawVu Draft uses Azure GPT 4 by default and lets administrators add Anthropic Claude or OpenAI GPT models with their own API keys, stored encrypted on Draft servers. The AI FAQ says customers cannot bring their own model to LawVu, which provisions and manages every model. Model versions outside Draft, and notice when a model inside Azure changes, are not part of the published terms.

LawVu's plans page sets out the structure of its pricing without figures. Three LegalOS plans build on each other. Matters covers intake and matter management, Essentials adds contract management, and Ultimate adds spend management. Price depends on the plan chosen and the number of users. LawVu Draft is sold as an add on or on its own, and the agentic workflow builder is a paid add on. Each plan carries a standard onboarding fee in its first year, support and customer success are included, and a few integrations cost extra.

Spend management is priced in tiers by the number of law firms a customer works with rather than by its legal spend. Bulk contract import is included once at implementation and quoted separately after that. The Assistant is free to explore during its beta, and the help center says LawVu expects to add usage tracking and consumption based pricing tiers, with advance notice before any change.

LawVu is built for in house legal departments. Its industry pages cover healthcare, higher education, software and technology, financial services, government, energy, manufacturing and insurance. Role pages address general counsel and chief legal officers, legal operations, IT teams and teams with no legal technology yet. Customer stories filter by Asia Pacific, North America, the United Kingdom, Europe and the United Arab Emirates.

Data regions cover Australia, the United States, Europe, Canada and the United Arab Emirates, and Microsoft's connector reference adds a LawVu region for United States government customers. LegalOS covers intake, matters, contracts, spend, reporting and documents, with contract management in the Essentials plan and spend in Ultimate. Law firms appear as outside counsel, submitting invoices and seeing their matters, invoices and billing guidelines through a self service portal.

LawVu Draft supports multilingual drafting, which the AES legal team, half of whom speak Spanish, cites as a reason for adoption. Law firm practice management, litigation support and legal research sit outside the product.