L

LBOX

LBOX began as a judgment database, and the AI came later as LBOX AI. The company rebuilt it as an agent that runs every step from the question to the answer, calls this its most fundamental product change, and claims it as Korea's first legal AI agent. It now sells LBOX as a single AI workspace for search, AI answers and drafting. Beside the AI, LBOX offers a Korean case law and statute database with search, projects, folders and links between instances of a case, and the company treats that data as its core asset.

The agent is limited to verified professionals and supervised staff, so some subscribers use the platform without it. LCUBE, a Korean legal language model the company released with KAIST at NeurIPS 2022, is a research artifact, not the shipped product.

LBOX grounds answers in its own legal data and links every cited precedent and statute so a reader can open it. It states this reduces the hallucination risk of general purpose AI. Where an answer draws on a commentary from its LBOX Scholar imprint, the original text opens from the answer, and authors see how often the AI cites them. No accuracy figure, error rate, test set or evaluation is published for the agent, search or drafting, and nothing says how often answers carry support or what the system says when it finds none.

Press coverage reports the company claiming its agent outperformed human bar exam candidates, and that claim is not published with a test set.

LBOX limits who may run the agent. LBOX AI is open to members verified with documents as lawyers, judicial scriveners, labor attorneys, tax accountants, patent attorneys or accountants, and to staff of courts, prosecution offices, police and legal research bodies it recognizes. Other employees may use it only with a qualified professional's prior approval and under their supervision and review, and public bodies use it on the Public plan, which works by IP address.

The company frames this as keeping legal AI use lawful. The agent itself acts broadly, planning and running the whole sequence from question to answer, and drafting. No modes, confidence threshold, stopping or escalation rule, review step between generation and use, or plan for what happens when it is wrong is described. Opening the cited authority is the user's own check.

Users quoted on the pricing page are identified only by role, with competitor names removed. The Google Play listing shows 10,000 plus downloads and a 4.6 rating from 155 reviews. LBOX Scholar names its authors, who are suppliers rather than customers. No named law firm, company, court or public body, case study or outcome figure is published on LBOX's own pages. Press coverage says LBOX serves ten of the largest Korean law firms, companies and judicial institutions, and an aggregator reports about 23,000 lawyers. Neither figure is published by LBOX or tied to a named customer.

Personal information in queries and uploads is not used to train models, LBOX states. Queries and uploads are used only while the answer is generated and then deleted, with a 30 day ceiling at each overseas processor. Documents are visible only to their creator and to Business colleagues given sharing rights, and material is held encrypted in customer dedicated storage. The privacy policy names OpenAI, Anthropic, Google, Amazon and Microsoft as recipients of LBOX AI input, with purpose and retention for each.

Privilege, professional secrecy and work product are not addressed, though verified lawyers upload case documents, and nothing says what happens if that material is demanded. The no training statement covers personal information in queries rather than the content itself.

Who may use the AI agent is stated and enforced with documents. Verified lawyers, judicial scriveners, labor attorneys, tax accountants, patent attorneys and accountants may use it, as may staff of recognized courts, prosecution offices, police and legal research bodies. Other employees may use it only with a qualified professional's prior approval and under their supervision and review, and public bodies use it on the IP based plan.

The company frames this as keeping legal AI use lawful, which engages Korean rules on who may do legal work without naming them. No statement of what the product is and is not appears, no advice disclaimer appears on the home, AI or help center pages, and no jurisdiction limit is stated, though the content is Korean law throughout. The company's consumer lawyer directory is a separate product.

No AI governance position is published. LBOX documents data protection governance in detail, with a named protection officer (the chief executive), a named handler and department, an internal management plan with inspections, a dedicated team, staff training and a grievance route. None of it covers AI. No AI policy, acceptable use position, owner of model behavior, testing before release or evaluation result is published, and bias is not addressed, although the agent chooses which precedents to show.

The company published a benchmark and model with an academic partner in 2022, and no evaluation of the shipped agent is published. The help center and policies say nothing on this.

Retention, deletion, access control and processors are set out in detail, as Korean data protection law requires. Query text and uploads are used only while an answer is generated and then deleted, with a ceiling of 30 days at each overseas processor. Usage logs are kept until a member leaves, and statutory periods are listed. Electronic records are destroyed unrecoverably and paper shredded or burned, and verification documents are destroyed once checked.

Access controls include rights management, an access control system, encryption, security software, inspected access logs and physical controls on server rooms. All processors are listed, domestic and overseas, including those they delegate to, and LBOX commits to publish changes promptly. No breach notice commitment, deadline or incident response description is published.

No published page states who bears the loss when output is wrong. A customer agreement exists in three parts, the integrated terms, the paid service terms and the operating policy, all linked from LBOX's footer and help center. Notices on the help center set refunds if a paid plan is unused within seven days, or thirty days after a switch from Standard to Business or Public. They give no fee reduction if a Business plan loses users mid term, and fee changes come with notice and an objection window.

No integration with other legal systems is published. Search, AI answers and drafting all happen in LBOX's own interface, with projects and folders for matters and sharing within a Business plan. No practice management, document management, billing or CRM system is named, and no public API, developer documentation or connector catalog is published. There is no integrations page in the navigation or help center. The iOS and Android apps are the same product on another device, and the OCR and payment providers are LBOX's own suppliers. How work leaves the platform is not described.

Each overseas recipient of text and files sent to LBOX AI is listed in the privacy policy, by name, country, method, purpose and retention. The recipients are OpenAI, Anthropic, Google, Amazon and Microsoft in the United States, with transfers to Amazon and Microsoft encrypted in transit, and retention capped at 30 days except Google at 180. The policy states that refusing the transfer abroad means the service cannot be used.

Material is held encrypted in customer dedicated storage, and documents are visible only to their creator and to Business colleagues given sharing rights. No data center, region or cloud provider is named for the main platform, nothing separates storage from processing for data in Korea, and no residency or on premises option is offered.

No certification held by LBOX and no trust center are published. LBOX's home page says all data is processed on verified infrastructure with global security certification, which describes the infrastructure provider, not LBOX. No LBOX certificate or audit report under ISO 27001, ISO 27701, SOC 2 or Korea's ISMS-P is published, and no auditor, certificate number, penetration test summary or security page exists. LBOX describes its own controls in detail: administrative, technical and physical measures, an internal management plan with inspections, a dedicated team, training, access management, access control, encryption, security software, inspected access logs and controlled server rooms.

It asserts compliance with the Personal Information Protection Act and names a protection officer. Neither is an independent attestation.

The privacy policy names every provider that receives what users type into LBOX AI. It lists OpenAI LLC, Anthropic PBC, Google, Amazon and Microsoft by legal entity and contact address, each used to generate answers, with Microsoft also handling optical character recognition of uploads. Upstage is the domestic OCR processor. Each has a retention period, 30 days after use for all but Google, at 180. LBOX commits to publish any change of processor or scope without delay, and further delegation needs its consent.

No model or version is named, nothing says which provider handles which task or how requests are routed, and nothing separates LBOX's own retrieval layer from the outside models.

The plans are Standard for individuals, Business and Enterprise for firms and legal departments, Law School for students, and Public for government bodies on IP authentication. Members of bar associations and of the labor attorney and loss adjuster bodies get partnership discounts. The unit is per user per month for Standard, per seat with volume discounts for Business and Enterprise, and institution wide for Public.

LBOX's fee change notice set the Standard rate moving from 29,900 won to a six month rate of 39,900 won and then to 69,900 won a month. That figure comes from a notice, not a current rate card, and Business and Enterprise are quoted. Refund and fee change rules are published in the operating policy.

An enforced eligibility rule defines who LBOX serves. Professionals include lawyers, judicial scriveners, labor attorneys, tax accountants, patent attorneys and accountants, each with a verification route. Institutions include courts, prosecution offices, police and legal research bodies, plus government bodies on the Public plan. Firms and legal departments use Business and Enterprise plans with administrators, students use the Law School plan, and other staff use it only under a qualified professional's supervision.

Content is Korean: court judgments, statutes and administrative rules, with LBOX Scholar commentaries on top. No practice area is named as supported or not, nothing says which courts or years the judgment database covers, and nothing says whether the agent covers the whole corpus. Korea is the only jurisdiction and is never stated as a limit.