LEAP

AI Centrality

How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.

The models are the engine of a core capability layered on a product that would still function without them. LawY answers legal questions, Matter AI reads a matter's emails and documents, Generator drafts from matter data and AI time recording logs activity; remove them and case management, document automation from jurisdiction-specific templates, accounting, billing, payments and the client portal remain, which is the practice management product LEAP sold for years before the July 2024 AI launch. The vendor's own framing is that the AI supports and complements lawyers rather than replacing their work. Home page, LawY integration page and July 2024 launch coverage read 6 September 2026.

Citation Accuracy and Hallucination Disclosure

Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.

Grounding is claimed to a knowledge base the reader cannot open, and no accuracy figure is published. LawY is described as answering from a jurisdiction-specific legal knowledge base, and the vendor's answer to accuracy risk is procedural rather than measured: an option to have an answer verified by a practising lawyer in the user's state, which is a review mechanism graded on the autonomy axis rather than a disclosure of how often unverified answers are wrong. No test set, benchmark or evaluation is published. A 2024 Australian court matter in which fabricated authorities were generated inside a practice management platform's AI tool is recorded on the fabricated-citation signal, which is held pending operator review. Home page, LawY page and launch coverage read 6 September 2026.

Autonomy and Oversight Model

What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.

A written commitment that the models work alongside a reviewing lawyer with an unusual review surface, short of the full control structure. LawY's answers can be sent, at the user's election, to a qualified practising lawyer in the user's jurisdiction for verification before reliance, which is a human-in-the-loop route the vendor built rather than assumed; Matter AI and Generator produce answers and drafts for a lawyer to work from, and the vendor states its AI is not there to replace lawyers. What is not published is any threshold at which the system acts alone, notably for AI time recording that logs billable activity automatically, or a stated route back after an unverified answer proves wrong. Home page, LawY page and launch coverage read 6 September 2026.

Operational and Outcome Evidence

Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.

Scale claims and third-party reviews stand in for named deployments on the surfaces read. The vendor states more than 61,000 lawyers on the platform globally, which is a customer count rather than an outcome, and the July 2024 launch coverage describes a lawyer using Matter AI to compare two parties' financials in a divorce without naming the firm; no case study or named customer with a figure was located. The customer stories surface was not opened and is the rebuttal route. Home page and launch coverage read 6 September 2026.

Privilege and Confidentiality Posture

How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.

Substantive published commitments on confidentiality and training use, short of the full picture. The US security page states that client matter data is not used to train third-party AI foundation models without the firm's explicit consent, that AI features are designed for data minimisation consistent with GDPR Article 25 and law firm professional obligations, and that third-party AI vendors are contractually bound to the same data protection standards as other sub-processors, with encryption in transit and at rest. Two qualifiers travel with the training statement: it covers third-party foundation models, not LEAP's own models, and it yields to consent. Not located: any statement on matter-level segregation, any treatment of privilege or work product, any retention or deletion commitment, and the subscription agreement itself, which was not opened. Security page and home page read 6 September 2026.

UPL and Professional Responsibility Posture

Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point.

A real position on how the product sits with a lawyer's duties, framed for lawyers and aware of jurisdiction. The vendor states that its AI solutions are not there to replace lawyers but to support and complement their expertise, LawY's verification option routes answers to a practising lawyer in the user's own state, and the LawY page states that availability depends on jurisdiction and area of law, which is a stated limit. The buyer is a law firm. No explicit disclaimer that outputs are not legal advice was located on the surfaces read, and no bar guidance is named. Home page, LawY page and launch coverage read 6 September 2026.

AI Governance and Bias Disclosure

Published governance over model behaviour: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.

A governance statement without a framework, testing regime or accountable owner. The security page states that AI-related security and privacy risks are assessed as part of the standard risk management process and that AI features are designed for data minimisation; no responsible AI framework, ISO 42001 or equivalent, pre-release testing description or statement about uneven output across jurisdictions or practice areas is published on the surfaces read. The trust centre was not opened. Security page read 6 September 2026.

AI Safety and Data Stewardship

Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.

Substantive published policy covering most of the ground. The US security page states TLS 1.2 in transit and AES-256 at rest, continuous infrastructure and application monitoring with anomaly detection and centralised logging, documented incident procedures from identification through recovery with client notification obligations met, high-availability architecture across multiple AWS availability zones with defined recovery time and point objectives, encrypted and regularly tested backups with annual disaster recovery and business continuity tests, and third-party AI vendors bound as sub-processors. Not located: a retention period, a deletion commitment, and the sub-processor list itself, which the page implies and the trust centre may carry. Security page read 6 September 2026; trust centre not opened.

AI Liability and Recourse

What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.

No liability position was located on any surface that could be read, and the surface that would carry one could not be reached. The US security page describes controls and incident procedures without an indemnity, cap, warranty or insurance position; the LawY page states that verification by a practising lawyer is available and the vendor has stated publicly that LawY is a research tool and not legal advice, neither of which allocates loss. The LEAP subscription agreement did not surface in search on 6 September 2026 for the researcher or the supervisor, and the only LEAP licence agreement that did belongs to an unrelated company of the same name and is not credited. This grade records what is locatable on the date and not a finding that no agreement exists; the subscription agreement is the rebuttal route and would replace this grade on a read. US security page, home page, LawY page and privacy policy excerpts checked 6 September 2026.

Practice Systems Integration Depth

How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.

Real integrations with depth described for some. The vendor names Microsoft 365, Xero, QuickBooks, InfoTrack, WealthCounsel, LawConnect, Power BI and DecisionVault, and its Lawmatics integration announcement describes what moves: client information entered once in Lawmatics flows into LEAP without re-entry, with both subscriptions required. LawY is described as a seamless integration within LEAP with an in-product button. No integration documentation was opened and what a firm must configure is not recorded. Home page, integrations excerpt, Lawmatics release and LawY page read 6 September 2026.

Deployment Model and Data Residency

Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.

Cloud delivery is stated with partial residency detail. The security page states hosting on Amazon Web Services across multiple availability zones with backups and disaster recovery, and the product is sold in separately configured jurisdictions for Australia, New Zealand, the United Kingdom, Ireland, Canada and the United States. Nothing read states the AWS region for a given jurisdiction's customers, whether customers share infrastructure, or where LawY's third-party models process data. Security page and LawY page read 6 September 2026.

Security Certifications and Trust Center

Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.

Controls are described and a trust centre exists, but no certification with scope was located on the surfaces read. The security page describes encryption, monitoring, incident procedures and backup testing, states that LEAP actively supports client due diligence, and points to a LEAP Trust Center for compliance detail; the page text read did not name SOC 2, ISO 27001 or any auditor or coverage period, and the trust centre was not opened. This grade is rebuttable on the trust centre. Security page read 6 September 2026.

Model Supply Chain Disclosure

Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.

The vendor refers to third-party AI vendors without identifying them. The security page states that third-party AI foundation models are used and that the vendors are bound as sub-processors, and the LawY page describes a jurisdiction-specific knowledge base, but no model, provider, hosting location for inference or change-notification commitment is named on the surfaces read. The trust centre and any sub-processor list are the rebuttal route. Security page and LawY page read 6 September 2026.

Commercial Transparency

Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.

The charging model is published and the figure is not. The vendor states that case management, document automation, accounting, billing and AI come in one integrated system for one price, that LawY and its research AI are included in the subscription at no extra cost, and that the subscription model scales with the firm; no per-user figure, tier or term appears on the vendor surfaces read, and a third-party review figure is not credited. Home page and LawY page read 6 September 2026.

Firm and Practice Coverage

Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.

Segment, practice and jurisdiction coverage are described with substance and some limits are stated. The buyer is small and mid-sized law firms; forms and matter types are described as covering all common areas of law with specialisms in estate planning, elder law and probate through WealthCounsel; the product is sold in Australia, New Zealand, the United Kingdom, Ireland, Canada and the United States with jurisdiction-specific forms. LawY's availability is stated to depend on jurisdiction and area of law, which is a limit the vendor names. Home page, LawY page and partner page read 6 September 2026.