Legora

AI Centrality

How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.

The models are the product. The workspace is AI native rather than a document system with a model attached, and every surface the vendor sells, review, drafting, research and workflows, is a generative capability. Remove the models and nothing remains to sell.

Citation Accuracy and Hallucination Disclosure

Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.

Grounding is claimed in vendor material, which describes reliable and verifiable answers and cells linked to their source. Searched the vendor site, blog, newsroom and trust center on 29 Aug 2026 and located no published accuracy measurement, no evaluation framework, no hallucination rate and no description of the retrieval method. Third party directories describe a citation verification capability, which is not vendor material and does not move this axis.

Autonomy and Oversight Model

What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.

Human oversight is asserted as a governing principle in vendor material and is covered in the abstract by an ISO 42001 certification of the AI management system. What is not published is the mechanism: where the review point sits, what an agentic workflow does on its own, at what threshold it stops, and what a supervising lawyer must approve. Searched the vendor site, blog and trust center on 29 Aug 2026. Oversight appears as a stated principle rather than a described control.

Operational and Outcome Evidence

Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.

Named customers appear in vendor material, including a published Grant Thornton UK forensic investigations story, and the vendor states more than 1,000 customers across 50 plus markets. Additional named users including Cleary Gottlieb, Goodwin, Linklaters, White and Case, Dentons and Barclays appear in vendor recruiting material. Not located as of 29 Aug 2026: dated outcome figures with a method a reader could assess, which is what separates this from an A.

Privilege and Confidentiality Posture

How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.

Substantive published commitments, and unusually for this market they sit in openly published contract documents rather than only on a trust page: general terms and conditions in EU and US versions, a data processing agreement, and a security measures annex covering least privilege access, personnel confidentiality obligations, authorization controls and retention on customer instruction. The security page states the vendor will not use customer data to train or fine tune models. Two gaps hold this off an A. Attorney client privilege and work product handling is not addressed directly in located material, and matter level segregation between users is not documented.

UPL and Professional Responsibility Posture

Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point.

The intended audience is unambiguously lawyers, firms and in house teams, and vendor material describes the product as working with lawyers rather than replacing them. Searched the vendor site, the published acceptable use policy, the general terms and the blog on 29 Aug 2026 and located no published position on the advice line, no treatment of competence and supervision duties, and no statement of jurisdiction limits.

AI Governance and Bias Disclosure

Published governance over model behaviour: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.

Holds an ISO 42001 certification covering its AI management system, independently audited with ongoing surveillance, and publishes what the certification covers: how AI is designed, deployed, supervised and monitored, with human oversight and structured governance named as the operating principles. That is a published governance framework with real substance and independent validation, which is rare in this market. Not located as of 29 Aug 2026: a named internal owner of AI governance, published pre release testing results for model behaviour, or any disclosure about uneven output across matter types, parties or populations.

AI Safety and Data Stewardship

Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.

The published security measures annex covers access on a least privilege and role based model, centrally stored logs traceable to unique usernames with security logs retained at least 12 months, data integrity signing, personnel background checks and confidentiality agreements, and retention set by customer instruction. The published data processing agreement commits the vendor to assist with the customer's own breach notification obligations, so incident practice is addressed. ISO 27001:2022 is audited yearly. Not located as of 29 Aug 2026: a current named subprocessor list, which is the remaining element of the A bar.

AI Liability and Recourse

What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.

A real published position, which is uncommon here. General terms and conditions are published openly in EU and US versions and carry numbered liability clauses, aggregate caps that apply across the subscriber and its affiliates, a separate cap of 100,000 Euro on beta features, and a carve out concept the terms call an Enhanced Claim. A buyer can read the allocation of loss before entering a sales process. Not located as of 29 Aug 2026: indemnity scope for third party claims arising from output, any warranty on output, and any insurance position, so the full picture is short of an A.

Practice Systems Integration Depth

How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.

Real and named integrations: an iManage technology partnership working through iManage APIs with an announced expansion, SharePoint, Box, a Microsoft Word add in for drafting and redlining, Outlook, EDGAR, and import from virtual data rooms and contract lifecycle systems. The vendor is explicit that it integrates with document management systems rather than replacing them. Not located as of 29 Aug 2026: implementer level documentation describing what each integration moves, in which direction, and what an administrator must configure, which is what the A bar asks for.

Deployment Model and Data Residency

Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.

The claim is made and the detail is not published. Vendor material states flexible storage options matched to data sensitivity, and separate EU and US contract documents indicate region specific arrangements, with the technical team in Sweden operating under GDPR. Searched the vendor site, the security pages and the published legal documents on 29 Aug 2026 and located no list of available regions, no tenancy model, and no statement of where processing happens as distinct from where data is stored.

Security Certifications and Trust Center

Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.

Three current independent certifications, ISO 27001:2022 audited yearly, SOC 2 Type II, and ISO 42001 for AI management, with a public trust center at security.legora.com carrying a resources section and a data flow diagram, plus security whitepapers and a security measures annex published openly with no gate at all. The open publication of the security annex is full credit rather than a request flow. The certifying auditor is not named in located material, which is the one thing a peer in this category does publish.

Model Supply Chain Disclosure

Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.

Vendor material refers to how it implements, supervises and evolves AI without identifying what sits underneath. Searched the vendor site, the trust center, the published general terms, the data processing agreement and the security measures annex on 29 Aug 2026 and located no named model provider, no subprocessor list and no commitment to notify customers when the supply chain changes. Third party sources describe a multi model approach running on Microsoft Azure, which is not vendor material and does not move this axis.

Commercial Transparency

Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.

Searched the vendor home page, product pages, newsroom and legal pages on 29 Aug 2026. No pricing page, no published rate, no stated unit of charge and no published tier structure located. The only commercial entry point is a demo request, which is sales gated and earns no credit. Several independent third party pricing analyses state the same, and one reports a consumption based tier that was not located on the vendor site. Third party per seat estimates are not vendor published and do not move this axis. Note that the vendor does publish its general terms openly, which is transparency of terms rather than of price and is graded on the liability axis instead.

Firm and Practice Coverage

Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.

Segment coverage is described with substance: large law firms, in house legal departments, and professional services including a published forensic investigations customer story, spanning more than 1,000 customers across 50 plus markets with multi jurisdiction and cross border work as a stated strength. Practice coverage spans review and diligence, research, drafting and investigations. Not located as of 29 Aug 2026: any statement of the boundaries, meaning which firm sizes or practice areas the product is not built for.