L

LEGALFLY

Discovery takes a request in plain language and decides whether to research it, draft from it or route it to a specialist agent, grounding the answer in legal sources and the team's own files. It can also edit an uploaded document or generate Word, Excel and PowerPoint output.

Review, Draft, Multi Review and Legal Radar each run models over contracts, data rooms or regulatory feeds, and Agent Studio chains those agents into workflows with approval steps. Legal Radar scans regulators, national banks, official legal databases and courts around the clock, then maps each new obligation to the team's policies and playbooks with an impact summary. Playbooks themselves can be generated from a team's guidelines or golden contracts, with risk levels, thresholds and rules set per jurisdiction.

Before any of that work begins, a model pseudonymizes names, roles, company details and identifiers in text, images and handwritten notes.

Discovery answers carry citations and reasoning a user can audit, drawn from case law, legislation and the team's own knowledge collections, and the user chooses the sources and jurisdictions behind each answer. Review explains every flagged clause with its reasoning and supporting sources, and Multi Review links each extracted field back to the document it came from.

The knowledge base combines more than 700 government and official sources with FromCounsel commentary written by UK barristers and Qistas coverage of nine or more Gulf and Arab jurisdictions, updated daily. Its stated reach is 35 jurisdictions across the EU, UK and Middle East, while product pages cite more than 130 for research and more than 110 for translation.

Sources are described as verified, and anonymization is said to keep the full legal meaning of each review. No measured accuracy accompanies those answers.

Agent Studio runs whole workflows from intake to approval. A workflow starts from email, Slack, Teams or a manual trigger, conditional logic routes the work and sends follow ups, and the system escalates when set thresholds are met. Teams place approval and review steps wherever a decision needs a person, who is notified when work finishes or needs attention.

Elsewhere a lawyer stays in the review seat. Review produces redlines that a user accepts, rejects, edits or applies in bulk as tracked changes, and Draft output passes through review and approval before it is shared. Through the Word and Outlook add ins, sales, procurement and HR staff handle routine contracts inside guardrails that legal sets in the playbook. The terms put the duty to check every output on the customer.

Three customer stories name the company, a spokesperson and a result. ECS, a transport and logistics operator with 650 staff that screens 200 to 250 contracts a year, reports twice the legal capacity and 50% time saved. Adeera, a hotel operator in the PIF group, reports review time cut by 93% from two to four hours per contract, with its general counsel quoted. Wealins of Foyer Group, a Luxembourg life insurer, reports 20% time savings after moving regulatory monitoring onto Legal Radar, with its chief executive quoted.

The clients page adds a 2026 contract with the European Commission's HR Directorate General for complex HR legal workflows, and quotes from Gimpel Private Markets, MSIG Europe and Duvel Moortgat. Each figure is the customer's own account.

Pseudonymization is the center of the confidentiality model. Names, roles, company details and identifiers are replaced before analysis, and a team can adjust the level or whitelist terms that must stay visible. In the on premises option the anonymization component runs inside the customer's environment, so only pseudonymized data reaches the dedicated tenant. Anthropic and OpenAI, the model providers in the trust center, receive pseudonymized content only unless a customer turns that off, under zero retention and no training.

Section 5.2 of the terms says customer data will not train the service without the customer's consent, and section 5.1 leaves the customer exclusive ownership of its data. Each client's environment is isolated. Attorney client privilege and work product are not addressed.

Section 10.2 of the terms describes the service as a tool for professionals working with proper care, says it gives no legal guidance or advice, and makes the customer responsible for verifying every output. The navigation sells Discovery as legal research and advice, and the Word and Outlook add ins put routine contracts in the hands of sales, procurement and HR staff within legal's guardrails. Competence and supervision duties are not addressed, and no jurisdiction limit is set beyond the coverage counts.

Governance shows up as product controls. Agent Studio and the platform pages describe governed outputs through playbook enforcement, approval steps and role based access, and auditable actions with transparent reasoning. Its trust center controls include an information security policy, a risk assessment and treatment policy and a vendor risk management policy. A report on the AI governance gap sits among the product resources.

The controls govern who can act on output. How the models themselves are tested, and who answers for their behavior, is not described.

Documents are encrypted at rest and in transit, and every client runs in an isolated environment. Access is set through attribute based access control, multifactor authentication and session governance, with single sign on through Okta, Azure AD or Google Workspace over SAML 2.0, OIDC or OAuth. An outside firm runs penetration tests every year.

The trust center, monitored through Secureframe, lists five subprocessors: Microsoft Azure for infrastructure, Auth0 for identity, PostHog for product analytics, and Anthropic and OpenAI for AI inference. It names an incident response plan, a data retention and disposal policy and business continuity controls, without their text. The privacy policy keeps pseudonymized contract content to improve the service, and keeps personal data as long as its purpose requires.

Section 8 of the terms caps LegalFly's total liability at the fees paid in the 12 months before the claim, and the cap also covers its indemnity. Indirect, consequential and punitive damages are excluded, and LegalFly is not responsible for losses from decisions made on generated content.

Against third party claims that the customer's use of the service infringes intellectual property, LegalFly indemnifies the customer. It can secure a license or modify the service, and pays damages from a final judgment or an approved settlement. The indemnity excludes claims arising from customer breach, outside modifications, use outside the documentation, configurations the customer specified and combinations with unapproved products.

The warranty promises professional service with reasonable skill and care. Warranties on the accuracy, completeness and reliability of output are disclaimed, and the customer verifies all output. The trust center offers cyber, liability and fraud insurance certificates on request. The terms of 24 April 2025 fall under Belgian law and the courts of Ghent.

Microsoft Word and Outlook carry most of the integration work. In Word a user reviews, redlines, drafts and compares contracts with tracked changes and formatting kept, applies playbooks and turns any contract into a template. In Outlook a user asks about a thread or attachment, drafts replies and fills templates from the details in an email.

SharePoint and Google Drive connect so documents can be imported or read by Discovery where they sit, and Multi Review pulls whole data rooms from SharePoint or a document system. Agent Studio workflows start from email, Slack or Teams. Every connection runs anonymization first. No connector for iManage or NetDocuments is named.

Three deployment models are offered. SaaS is fully managed and monitored. Single tenant gives a customer a dedicated, isolated instance in its preferred Azure region, run by LegalFly. Single tenant with on premises anonymization adds an anonymization component inside the customer's environment, so only pseudonymized data travels to the dedicated tenant over private, encrypted connections, and identifiable data never leaves the customer.

The security FAQ adds private cloud, hybrid and full on premises deployment. Residency follows the Azure region the customer picks. The regions on offer are not listed.

ISO 27001:2022 and SOC 2 Type II certification are stated, with annual independent penetration testing and a 2026 test listed. The trust center, run on Secureframe, releases the SOC 2 Type II report, a security whitepaper, the information security policy, the ISO certificate, insurance certificates and an architecture diagram through a request form. It shows monitored controls across access, network security, confidentiality, availability, vulnerability management, change management, incident response and risk.

The security page describes the framework as both aligned with and certified to ISO 27001 and SOC 2 Type II. Report dates and the auditor are not shown.

Two AI inference providers are named in the trust center, Anthropic and OpenAI. Each processes pseudonymized content only, unless a customer enables processing without anonymization, under zero retention and no training. Microsoft Azure hosts the platform, and the single tenant option sits in the customer's preferred Azure region.

The anonymization step runs before any provider call, and in the on premises option it runs on the customer's side. Which model handles which task is not stated, and LegalFly makes no commitment to tell customers when its providers change.

Buying starts with a demo, and no price is listed. The terms set out how the subscription works. Each order form caps the number of end users and sets the fees for that number, priced and payable in euros and invoiced annually in advance. The first term is one year and renews automatically, and a customer can lower its user count at renewal with 60 days notice.

Fees can rise in two ways, through indexation each 1 January and through an increase at renewal with 30 days written notice, after which the customer has 15 days to terminate. Users beyond the cap can be charged, and professional services such as implementation and training are quoted on a separate order form with estimated fees.

The product is built for in house legal and business teams in regulated industries. Industry pages cover banks, insurance, manufacturing, technology and professional services, where it pitches due diligence, regulatory research, drafting, contract review and client advisory work. Function pages cover legal, claims, compliance, HR, procurement and sales, each with its own workflows.

Coverage is set by jurisdiction. The knowledge base spans 35 jurisdictions of civil, commercial and regulatory law in the EU, UK and Middle East, Legal Radar monitors more than 70, and research reaches more than 130. Named customers range from ECS and Adeera to Wealins, MSIG Europe and the European Commission.