L

Legito

AI Centrality

How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.

The vendor's own headline settles this: the AI page is titled AI-powered Document Automation and CLM and its subtitle reads that AI-powered and rule-based document automation complement each other. Kedy AI is a real, named, shipped layer with five distinct capabilities, but it sits on top of a platform that stands entirely without it. Remove the models and a buyer still has interactive template automation, end-to-end lifecycle management with routing and approvals, a no-code application builder, an audit trail and a free electronic signature product, which is the whole of the free plan and the whole of what the named customers are quoted describing. The company was founded in 2015 and its case studies, including the PwC deployment and the 450,000 hours figure, rest on rule-based automation rather than on inference. AI accelerates authoring and extraction here; it is not the mechanism the buyer is paying for. Checked 7 September 2026.

Citation Accuracy and Hallucination Disclosure

Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.

No accuracy content of any kind is published. There is no figure, no test set, no evaluation, no third-party validation and no named failure mode across the AI page, the security page, the pricing page or the subscription agreement, and the agreement does not mention AI at all. The nearest thing to a control is a product-design constraint: AI-powered drafting is described as inserting extracted data into automated templates while maintaining 100 per cent integrity of the template, which bounds what the model can alter but is a statement about template mechanics rather than about output accuracy. The nearest thing to a limitation disclosure is a blog article that asks whether a reader can accept that AI returns different results in two identical situations, which acknowledges nondeterminism in the abstract without stating what the product does about it. Grounding to primary legal authority does not bite on a document automation and CLM product and is counted neither way, per the inapplicable-limb rule. The knowledge base article on AI document drafting was not opened and is treated as corroboration only; the grade rests on the absence of accuracy material across the surfaces that were read. Checked 7 September 2026.

Autonomy and Oversight Model

What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.

Autonomy is claimed and oversight is not described. The vendor states that AI agents will undertake regularly recurring tasks in the customer's workspace for them, which is unattended operation, and that Kedy AI navigates through workflows and controls lifecycle operations. Nothing published states what an agent may do without a human, at what point it stops, whether a confidence signal is shown to a reviewer, or what happens after an agent acts wrongly. No approval gate specific to AI output is described anywhere. The platform-level audit trail, described on the security page as timeline and versioning, is a general control that predates the AI and is not presented as an AI oversight surface, so it is named here rather than credited as one. The subscription agreement, which is where a supervision obligation would ordinarily sit, is silent on AI entirely. Checked 7 September 2026.

Operational and Outcome Evidence

Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.

Deployment evidence is unusually broad and well attributed. Named customers appear with logos including PwC, Deloitte Legal, LexisNexis, Holland & Knight, Santander, Société Générale, UniCredit, Telia, Škoda, Vialto, U.S. VETS and the Bronx and New York County District Attorneys' offices, against a stated base of over 400,000 users. Testimonials carry full names and roles rather than initials: Tomas Fiala, Director at PwC, describing a Centre of Excellence running since 2018 across the PwC global network; Paul V. Saunders, Chief Innovation Officer and Partner at Stewart McKelvey; Sony Varughese, Chief Technology Officer; Nel Pelle, Sales Manager at BAM; Galya Oster at Atrafin; Eli Cohen, Chief Operating Officer at RBI; and Jeremy Aber, a software attorney. Figures are specific, including contract checking falling from 20 to 50 minutes down to 5 minutes, 450,000 hours saved at a Big Four firm, and a 10,000-user deployment built by two part-time specialists. Two things hold this at B. The figures sit inside testimonials and case-study titles with no method, baseline, sample or date. And none of the outcome evidence is attributed to Kedy AI: every quoted result describes rule-based document automation, so a buyer evaluating the AI specifically has adoption evidence for the platform and none for the models. Checked 7 September 2026.

Privilege and Confidentiality Posture

How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.

Substantive published commitments across several limbs, short of the full picture. The subscription agreement makes all data, files, documents and templates uploaded or created by the customer the customer's property, and grants Legito the right to use customer data solely for the purpose of performing under the agreement, which is a purpose limitation rather than a broad licence. Section 5 makes customer data the customer's confidential information and binds Legito to reasonable care, purpose limitation and need-to-know access under signed confidentiality agreements. The AI page adds that no third-party service processes customer data in AI and that data is never used for AI training. Retention is bounded: the customer may export for 30 days after termination, after which Legito may destroy the data. Segregation is real, with the customer choosing a named storage region and the processing agreement barring transfer outside it without express written consent. Encryption is applied in transit and at rest with keys held away from the hosting provider, and the product ships a self-anonymisation feature for data in documents. What is absent is the limb this axis exists for: privilege and work product are not mentioned anywhere in the agreement or on any published surface. The product holds contract and back-office documents rather than matter files, which makes that omission less costly to most buyers than it would be for a litigation product, but the limb is required and it is not met. Checked 7 September 2026.

UPL and Professional Responsibility Posture

Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point.

Nothing addressing unauthorised practice, professional responsibility or the boundary between the software and legal advice was located on any Workspace surface. The subscription agreement, which is the customer agreement for the product indexed here, contains no such provision, and neither the AI page nor the legal department page nor the law firms page carries a disclaimer. One instrument on the same domain does address it: the Legito Marketplace terms of service require a user to tick a box agreeing that the application is not a legal service or its substitute. The Marketplace is a separate product with its own purchase path, its own terms and its own consumer-facing single-use conditions, so that acknowledgement governs a different transaction and is not credited to the Workspace record. It is named here because a reader who finds it unaided should see that it was considered and why it was set aside. The grade records what is establishable on the date and the cause sits in this note rather than in the letter. Checked 7 September 2026.

AI Governance and Bias Disclosure

Published governance over model behaviour: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.

No governance disclosure was located. There is no AI policy, no acceptable use policy for AI, no responsible AI or ethics statement, no bias or fairness discussion, no ISO 42001 or NIST AI RMF alignment claim, no named internal owner for AI decisions, no model evaluation or testing description and no AI-specific section in the subscription agreement or the data processing agreement. Two blog articles touch on AI in document-centric processes and on where AI brings value and where its limits lie, but both are market commentary published to the blog rather than statements of how the vendor governs its own models. The ISO 27001 certification covers information security and its quoted scope names document automation and CLM software development and hosting, not AI governance, so it is not credited here. Surfaces read on 7 September 2026: the AI page, the security page, the subscription agreement and its data processing exhibit, the pricing page and the site footer inventory.

AI Safety and Data Stewardship

Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.

Three express commitments sit together on the AI page and they are the strongest AI-specific disclosure this vendor makes: Kedy AI is hosted 100 per cent on Legito servers, no third-party services are used to process customer data in AI, and customer data is never used for AI training. Read against the subscription agreement they are consistent rather than contradicted, because the agreement grants Legito the right to use customer data solely to perform under the agreement and reserves no training or improvement right anywhere. The one clause that comes close, the statistical information provision, permits Legito to compile and publish performance statistics about the service on condition that they neither identify customer data or the customer nor permit re-identification, which is a performance metrics right rather than a machine learning right and is not read as one. The processing agreement adds a no-transfer-outside-the-chosen-region commitment, an eight-hour breach notification undertaking and a requirement that sub-processors be bound to confidentiality. What holds this at B is placement: every AI-specific commitment lives on a marketing page, and the customer agreement, last modified in September 2023, does not mention AI at all, so a buyer has the vendor's word rather than a term to enforce. Checked 7 September 2026.

AI Liability and Recourse

What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.

A published agreement with real general recourse and no AI-specific recourse at all. The machinery that exists is more than most records on this axis carry: a tiered availability warranty crediting 10, 25 or 50 per cent of the monthly fee by uptime band; a major-outage right to terminate and recover prepaid fees where availability falls below 98 per cent for two consecutive months or any three in six; warranties that security and functionality will not materially decrease and that the service will perform in accordance with its documentation; a 30-day cure period for material breach; an intellectual property indemnity covering defence costs, negotiated settlements and court-awarded damages; and an eight-hour breach notification undertaking in the processing exhibit. Against that, liability is capped at fees paid in the preceding twelve months and all indirect damages are excluded, including loss of or unauthorised access to data. The decisive point is that nothing in the agreement addresses AI output: there is no warranty, no allocation of responsibility and no remedy where Kedy AI extracts a term wrongly, drafts from the wrong source or an agent acts on a bad inference. The processing exhibit also disclaims liability for customer data disclosed through a cyber-attack notwithstanding reasonable efforts, which cuts against the recourse the rest of the agreement builds. Checked 7 September 2026.

Practice Systems Integration Depth

How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.

Integration is documented rather than asserted, and the documentation is public. A REST API is published with a Swagger specification, alongside webhooks described as a push API, programmable tags, a developers hub and self-service API key creation, deactivation and deletion. Named off-the-shelf integrations include Salesforce, Microsoft SharePoint and Zapier, and the subscription agreement itself names DocuSign, Salesforce and HubSpot as third-party services the platform interoperates with, which is unusual corroboration because it puts the integration surface in the contract rather than only on a product page. A Model Context Protocol server is published so that other AI applications can reach Legito features. What holds this below the top band is the absence of legal practice systems specifically: no document management system such as iManage or NetDocuments, no practice management or matter management system, no time and billing system and no court or filing system appears anywhere in the integration inventory. The depth is real and the direction is general enterprise back office rather than the legal stack. Checked 7 September 2026.

Deployment Model and Data Residency

Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.

Residency is published, specific and contractually locked, which is the stronger of the two co-equal limbs on this axis. The security page states that each customer may choose their data storage location and names three: Vint Hill, Virginia in the United States; Limburg, Germany in the European Union; and Melbourne, Victoria in Australia. Hosting is with OVH, named openly. The commitment is not merely marketing: the data processing exhibit provides that Legito may not transfer customer data to a third country outside the chosen server location without the customer's express written consent, which converts the choice into an enforceable term. Two gaps sit against that. Tenancy is nowhere stated, so a buyer cannot tell whether the service is single-tenant, pooled or configurable, and no self-hosted, private cloud or on-premises option was located. There is also an inconsistency the vendor should resolve: the account creation form on the AI page offers a server choice of Australia, Canada, Germany and the United States, adding Canada to the three locations the security page lists. Both are the vendor's own current surfaces and neither is reconcilable to the other from outside, so the discrepancy is recorded and nothing is graded on Canada. Checked 7 September 2026.

Security Certifications and Trust Center

Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.

This record pulls in two directions and the note has to carry both. On the credit side, Legito does something most vendors in this corpus do not: it names its certification body. The security page states approval by Lloyd's Register to ISO/IEC 27001 and quotes the certified scope verbatim, covering the development and hosting of Legito document automation and contract lifecycle management software and the provision of document automation and software configuration services. A named auditor plus a quoted scope is A-band behaviour and is the reason this does not sit lower. On the other side, the certification is cited as ISO/IEC 27001:2013, a revision superseded by the 2022 edition, and the page states that the latest ISO 27001 audit was conducted in July 2021 on a page whose own last-modified date is September 2024. No certificate document is published, no certificate number or validity window is given, there is no SOC 2 report and no trust centre or document request portal of any kind. The OVH certifications listed on the same page, being ISO 27001, SOC 1 Type II, SOC 2 Type II, PCI DSS and a Cloud Security Alliance STAR self-assessment, belong to the hosting provider and are not credited to Legito. The penetration testing described is likewise the customers' mechanism rather than the vendor's: the page states that large customers engage third-party auditors and that Big Four firms regularly test the application, which is a disclosure about customer diligence, not about a programme Legito commissions. Checked 7 September 2026.

Model Supply Chain Disclosure

Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.

Nothing about the model itself is disclosed. No model is named, no provider is identified, no model family or version is given, and the vendor does not say whether Kedy AI is built in house, fine-tuned from open weights or licensed and run on Legito infrastructure. What is published is architectural and it is genuinely useful to a buyer: Kedy AI is hosted entirely on Legito servers and no third-party service processes customer data in AI, which tells a firm that no external model provider sees client content. That fact has already been credited where it belongs, on deployment and on data stewardship, and crediting it a second time here would answer a question this axis does not ask. Where the models run is not what the models are. The three AI services Legito does name, being OpenAI, Anthropic Claude and Google Gemini, are offered expressly as optional alternatives for customers who would prefer them and the page states that Kedy AI does not require any integration, so they are a customer-elected substitute rather than Kedy's supply chain and are not counted as partial disclosure of it. There is also an unresolved tension a buyer should see: an assurance that no third party processes data in AI is difficult to reconcile with an undisclosed model of unstated provenance, and only the vendor can close that gap. Checked 7 September 2026.

Commercial Transparency

Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.

Real pricing information is published, but no rate is. What a buyer can establish first-party: a permanently free plan exists and its scope is named, carrying document lifecycle management, the custom application builder and Legito Sign as a lite version of the enterprise workspace, described as free of charge forever; the electronic signature product is offered at no fee; and a 30-day trial opens all features with no credit card required. Pricing pages are maintained in six languages. What is not published anywhere first-party is a paid figure, a volume band, a unit of charge, a minimum term or a seat minimum, and the pricing page carries no plan table in its rendered body. Two retrieval notes belong here rather than in the grade. The Complete Features List section of the pricing page is a heading with no content in the extracted body and is recorded as unrendered rather than absent, since the page's own structure says something belongs there. And a third-party site publishes specific per-user monthly rates and a minimum user count, which is excluded as an aggregator source and is named only so a later reader knows it was seen and refused rather than missed. The grade sits above the floor because a free tier and stated trial terms are pricing information, and below the middle band because the paid model is entirely absent. Checked 7 September 2026.

Firm and Practice Coverage

Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.

The legal surface is real and named but sits inside a wider back-office platform. A dedicated Legal department page addresses legal operations directly, framed as no-code automation for legal ops to leverage expertise at scale with controls, automation and oversight. A separate Law Firms industry page addresses firms on knowledge transfer and repeat drafting, and a Professional Associations page addresses member document portals. Legal adoption is evidenced by name rather than asserted: Holland & Knight, Stewart McKelvey with a published automation journey, Deloitte Legal, LexisNexis, and the Bronx and New York County District Attorneys' offices, the last of which has its own prosecution automation case study. The interface and pricing pages are maintained in English, German, Spanish, French, Czech and Slovak, and three hosting regions serve the Americas, Europe and Asia-Pacific. What holds this at B is that legal is one of seven departments and one of eight industries, with no practice-area breakdown, no jurisdiction-specific legal content and no matter-type coverage statement anywhere. A buyer can see that legal teams use it; they cannot see which legal work it is built for. Checked 7 September 2026.