L

Litera

The AI drives a core capability on a product that stands without it, and the vendor says so. The Lito site describes an agentic layer that routes high stakes work to Litera's deterministic comparison, document analysis and metadata removal engines, which return the same result every time, and flexible work to skills built on frontier models. It states that generative AI can be switched off entirely while the rules based engines keep working.

Draft Base, the entry package sold from the store, is document comparison, and Lito was added to existing subscriptions at no charge in October 2025 rather than sold as the product. The published agreements treat the generative features as additional terms layered on the SaaS or on premises software. Remove the models and a thirty year drafting, comparison and metadata business remains.

Grounding is claimed, and the vendor itself says accuracy is not measured. The Lito site says every recommendation shows its reasoning and its source, and that the agent is grounded in the firm's own templates, clauses, playbooks, precedents and matter data. Web search over public material is supplied by You.com, per the subprocessor register. No retrieval method is described, and no accuracy figure or test set is published.

Section 3(c) of the Generative AI Terms, Version April 2026, says outputs may be inaccurate or misleading and are not tested, verified, endorsed or guaranteed by Litera to be complete or current. It makes the customer solely responsible for reviewing and verifying any output before use. Lito drafts and reviews against firm documents and does not cite primary legal authority, so there is no citator and no authority link to check.

A written commitment that the lawyer keeps judgment, with real controls, short of the full structure. The Lito site states that the lawyer keeps judgment either way, that firms can switch generative AI off entirely while the rules based engines keep working, and that MCP connectors are governed centrally and enabled firm wide. The Generative AI Terms, Version April 2026, place sole responsibility for reviewing and verifying output on the customer (3(c)).

They prohibit deploying autonomous agents, recursive prompt chains or usage automation outside intended user flows (4(c)), which is a published boundary on what the system may run alone. Not published is the threshold at which Lito acts without a lawyer in the loop when it chains deterministic engines at workflow milestones, what review surface a chained action presents, or what happens after an output is wrong beyond the customer's duty to verify.

Named customers without figures, and figures without named customers. The Lito site carries attributed testimonials from Brian Corbett, partner at Poyner Spruill LLP, and Joshua Tan, partner at Delta Law Corporation. It also quotes CCA Law Firm and unnamed Am Law firm associates; none carries a measured result. The figures on the same page are headline counters with no basis stated: 99 percent of the Am Law 100, more than 15,000 firms, more than a million daily users and a 90 percent efficiency gain.

The home page adds 74 percent of the Fortune 100 for corporate legal. The October 2025 press release states that Litera One was used by roughly 40 percent of the customer base and that early access firms shaped Lito, with no named firm and no figure. No dated, named deployment with a measured change and a method is published.

Substantive published commitments on training and the model providers, without segregation or privilege. Section 2(c) of the Generative AI Terms, Version April 2026, says Litera will not, and will not permit its third party providers to, develop, train or fine tune any generative or foundational model with Customer Data, End User Prompts or Outputs unless agreed separately in writing. Section 5.1 of the Master Terms, Version November 2025, makes Customer Data the customer's Confidential Information, and section 6.2 leaves ownership with the customer with a license limited to providing the Services.

Section 3.2 of the SaaS Terms commits to prompt deletion after termination. The Litera One / Lito subprocessor register states each model provider's position. Anthropic retains inputs and outputs for up to thirty days for trust and safety, and Amazon Bedrock does not pass inputs to third party model providers. Nothing published addresses segregation between users, matters or clients inside a firm's tenant, or privilege or work product handling directly. The trust center's Firm AI Search FAQ and security FAQ sit behind a Get access request.

A real published position on advice versus tooling, without jurisdiction limits or the supervision side. Section 3(d) of the Generative AI Terms, Version April 2026, says the generative features are not intended as professional advice, cannot replace advice from a qualified professional and form no such relationship, naming the attorney client relationship as the example. Section 3(c) places sole responsibility for reviewing and verifying output on the customer.

The intended audience is plain: every segment page addresses lawyers, law firms of every size and corporate legal departments, and the Master Terms restrict use to the customer's internal business purposes, with no consumer surface. No jurisdiction limit is named, and nothing treats how the product supports a lawyer's competence and supervision duties beyond the marketing line that the lawyer keeps judgment. Litera also advertises a CLE program.

A position on training data and acceptable use is published; a governance framework, an owner and a testing regime are not. The Generative AI Terms, Version April 2026, commit that no generative or foundational model is trained on customer content and prohibit a listed set of abusive uses (2(b)). The Lito site names a security and governance layer made up of ISO 27001, SOC 2 Type 2, SOC 3, GDPR, NIS 2 and DORA, which are security and regulatory attestations rather than AI governance.

The SafeBase trust center lists an item titled AI Training Data and Bias under an AI section, alongside a Firm AI Search FAQ, both behind a Get access request whose tier is not stated. The title alone says nothing about the contents. Nothing published names who inside Litera is accountable for AI output, what is tested before a skill ships, or any finding about uneven output.

Retention, deletion, access control, subprocessors and incident practice are all published in binding documents a buyer can read before signing. The Security Addendum 2023, incorporated by section 5.3 of the Master Terms, commits to notify the customer of a security incident without undue delay and within seventy two hours of determining that Customer Data is affected. It describes least privilege access with multi factor authentication and quarterly access reviews, AES-256 encryption at rest and TLS 1.2 or above in transit, and annual third party penetration testing.

It also provides for deletion of remaining Customer Data after termination. Section 3.2 of the SaaS Terms, Version March 2025, commits to prompt deletion after termination, with backup copies removed on their normal cycle. The subprocessor register is published for each product with hosting locations, and the Litera One / Lito entry names Microsoft Azure, Amazon Bedrock, Anthropic and You.com with what each processes and retains, plus a registration link for change notices.

No period is stated for prompts and outputs held on the platform during the subscription, only the provider's thirty day window and deletion after termination.

What the vendor stands behind is published and specific, including insurance, and on wrong output it stands behind nothing. Section 7.4 of the Master Terms, Version November 2025, gives a defense and indemnity for third party intellectual property claims in WIPO Copyright Treaty countries, with five named exclusions and modify, license, or terminate and refund remedies. Section 7.8 caps Litera's liability for direct damages at fees paid under the ordering document in the preceding twelve months, with the indemnity outside the cap.

Section 7.7 excludes consequential loss for both parties except under the indemnities, and section 7.3 disclaims accuracy and results. Section 2 of the SaaS Terms warrants substantial conformance with the documentation, with repair or refund as the remedy. The Security Addendum commits Litera to keep cyber and technology errors and omissions insurance with an A.M. Best rating of at least A- and financial size of at least VII.

Section 3(a) of the Generative AI Terms, Version April 2026, disclaims any liabilities, warranties or representations on output, notwithstanding the Master Terms. So the recourse for a wrong AI output, readable before signing, is the customer's own verification.

Real integrations are named and documented, without saying what moves in which direction. The Lito site states that Litera is delivered inside Microsoft Word and Outlook, Google Workspace, a web app, Apple iOS and a Windows and Mac desktop client, and names iManage and NetDocuments as connected document management systems. It lists documents, emails, timecards, financial data, HR data and legal research as sources Lito reads from and writes back to, and states that MCP connectors are governed centrally by the firm.

The October 2025 press release adds that Lito connects with Kira and NetDocuments. Section 3.2 of the Master Terms records that the software is meant to be used with third party office software and document management systems the customer procures. Nothing published gives an implementer's description of what syncs, in which direction, and what a firm must configure. An integrations page is published at litera.com/integration.

Deployment options, regions and where processing happens as distinct from storage are all published. Section 2.1 of the Master Terms, Version November 2025, defines two deployment types, SaaS and on premises, and the Lito site adds a Windows and Mac desktop client for firms whose most sensitive work cannot move to the cloud. The Litera One / Lito subprocessor register says the application is hosted on Microsoft Azure in US, Canadian or European regions.

Amazon Bedrock inference runs in the same regions as the platform, and inputs are not passed to third party model providers. Anthropic inference is hosted in the United States, with inputs and outputs retained up to thirty days, so a customer hosted in Europe can read that generative processing may leave the storage region. Section 2(d) of the Generative AI Terms commits to hosting models in the same jurisdiction as the SaaS software where commercially and technically feasible, and otherwise in a jurisdiction with comparable standards.

Whether the service is single or multi tenant is not stated, and nothing published says the residency options differ by Draft package.

Certification is real and stated on a working trust center, without scope, dates or a report reachable without a request. The SafeBase portal at trust.litera.com lists SOC 2 Type 2, SOC 3, ISO/IEC 27001:2022 with a statement of applicability, GDPR, DORA and NIS 2. It lists the reports, a penetration test report, a security whitepaper, cyber insurance, a CAIQ and SIG Lite behind a Get access flow that offers to start a security review.

The flow does not say whether access is self serve on an email or click through, or runs through a sales conversation. The Security Addendum states that independent auditor reports are available to the customer on request, that Litera's ISO 27001 certification covers its corporate offices, and that cloud providers are audited under SOC 2 Type II and ISO 27001. No auditor, audit period or scope statement is published. The trust center overview describes the Litera Platform and Lito, so it covers the product.

Providers are named, where they run is stated and a change notice channel exists; the models themselves are not named, and three surfaces give three different provider lists. The Litera One / Lito subprocessor register, the binding disclosure, names Anthropic for model inference, hosted in the United States, possibly through Amazon Bedrock or Microsoft Azure Foundry. It names Amazon Bedrock for inference in the platform's own region and You.com for web search, and offers a registration link for notice of subprocessor changes.

The Lito site describes routing across OpenAI, Anthropic and Gemini models. The Generative AI Terms, Version April 2026, refer to the terms of Azure OpenAI as terms Litera must follow and to GPT-4 as an example in the fair usage clause. OpenAI and Google appear on the marketing page and in the agreement and not on the Lito register, so the register alone does not show that OpenAI models may process prompts. No specific model version is named beyond that one example.

Real pricing is published for part of the range, with the unit and structure stated. The Litera Store at litera.com/store offers Draft Base, Draft Pro, Clean (Metadact) and pdfDocs, each with a purchase button leading to a product page on store.litera.com, where the store price is shown. The packages page states that firms with ten or more lawyers request a demo and talk to sales. The Master Terms publish the unit: each license is for a single named individual (3.1), fees and currency are set in the order form, terms renew automatically for twelve months unless thirty days' notice is given (8.2), and overages on end users, lawyers or documents are invoiced (4.2).

Lito is included with Draft Base, Pro and Advanced and with Kira at no extra charge, per the site and the October 2025 press release, and a store promotion offered twenty percent off during ILTACON. Enterprise pricing goes through sales.

Segment and role coverage is described with substance, without the boundaries. The site has separate solution pages for small, large and global law firms and corporate legal departments. Role pages cover lawyers, knowledge management, marketing and business development, CIO and IT, finance, and talent and HR, and the Lito site walks through the associate, partner, transactional lawyer, knowledge manager, COO and marketing seats.

Practice coverage is stated by skill rather than by practice area. The October 2025 press release names a launch library of eleven skills, with planned additions for capital markets, M&A, business development, litigation and compliance, and the Lito site names contract review and redlining, deal management, precedent surfacing and pitch drafting. Store purchases are limited to firms under ten lawyers, with larger firms routed to sales.

No practice area, jurisdiction or language is named as out of scope. The home page claims 99 percent of the Am Law 100 and 74 percent of the Fortune 100 without a basis.