L

Lucio

Each of the three products is model work. The Assistant answers research questions across case law, statutes and the firm's own files, and it reads a whole Briefcase of documents at once. It builds chronologies with each event tied to its source, compares testimonies and statements, and runs a review mode that looks for weaknesses in a draft argument. In Word, Lucio generates clauses and revisions and compares each clause with the firm's preferred language.

In Outlook, it reads threads with their attachments, drafts replies in the lawyer's voice and writes work summaries from sent email for time entries. Prompt libraries, agents tuned to a practice area and fill in templates for regulatory forms sit on top, with Tab to Enhance rewriting a rough prompt into a better one. There is no matter management or billing layer of its own, and documents come from the firm's existing systems.

Every output carries source citations, and answers drawn from uploaded files cite back to the page or line they came from. Research runs over curated repositories for each jurisdiction and, in competition work, over decisions from the EC, the FTC, the CMA, CADE, the CCI and the ACCC, with research mode also querying the web. Where an answer is not in the file, Lucio says so rather than supplying one. The product terms describe output as probabilistic and possibly inaccurate or incomplete.

Measured accuracy, a test set and failure analysis are not published, and the case law collections behind research are not named.

Edits land in Word as tracked redlines, so the lawyer accepts, rejects or refines each change, and Outlook replies show every AI edit in redline before sending. Lucio describes itself as a research and drafting accelerator in which the lawyer signs the brief and confirms each citation in the record before it reaches a court. Under the product terms, every output must be reviewed and verified by a competent professional before anyone relies on it, and high risk or safety critical use without expert human oversight is prohibited.

Agents and prompt libraries are set up per practice by Lucio's legal engineers during onboarding. What the agents may run without a person, any point at which they stop, and what follows a wrong output are not described.

Trilegal, an Indian firm of about 1,200 lawyers, onboarded in 2023 and now has seats across the firm, with its 31 lawyer competition group as the first cohort and partner Gautam Chawla quoted on the rollout. Stubbs Alderton & Markiles, a 45 lawyer technology firm in Southern California, describes Lucio as everyday software, and its CEO reports that a heavy user's billable hours rose after adoption. Becket McGrath of Euclid Law and Kevin Cooper of Hadef & Partners are quoted by name.

By its own count, more than 250 law firms and in house teams use the product. It claims about 30 hours saved per lawyer each month and a doubling of productivity, with no method or customer attached to those figures.

Clause 7.4 of the product terms bars using customer data to train or enhance AI models, or for any third party's benefit, unless the user authorizes it. Data is processed only to provide the contracted services, the customer owns its inputs and receives the rights in its outputs, and client data sits in a dedicated tenant encrypted at rest and in transit. Personnel access is limited to privileged users, logged and revoked within 24 hours of a role change.

The data processing agreement redirects government requests to the customer and gives notice where the law allows. Privilege and work product are not named, segregation between matters inside a firm is not described, and what the model providers behind the product retain is not stated.

No legal advice, opinion or recommendation comes from the product, which creates no lawyer client relationship and is no substitute for advice from a professional, as the product terms put it. Customers may be individual practitioners, law firms, chambers or other organizations. Where the product is used in legal practice, the user stays responsible for rules of professional conduct and bar and regulatory requirements.

Client confidentiality and the duty of competence also stay with the user, and every output must be verified by a competent professional before reliance. Supervision of junior staff is not addressed, and no jurisdiction is named as outside the product's limits.

Responsible legal AI is how Lucio describes its aim, and its trust center lists a no use for AI training control, a risk management policy, a secure development lifecycle and an incident response plan among its controls. These are security and data controls rather than AI governance. No governance framework, release testing, accountable owner or finding about uneven output across practice areas, languages or jurisdictions is published.

The information security program is reviewed at least once a year and cannot be changed in a way that materially weakens it.

The data processing agreement and the technical and organizational measures are published. Customers can retrieve or delete their data in the product at any time, and Lucio deletes whatever remains on termination or on request, subject to statutory archiving. A personal data breach is notified without undue delay. Subprocessors are kept on the trust center and changed only after at least 30 calendar days' notice, with a right to object and to terminate with a refund.

They include OpenRouter, Microsoft Azure, Google Cloud Platform and MongoDB. Access runs on role based controls with multifactor authentication and single sign on. Privileged access is logged and removed within 24 hours of a role change, and staff with that access take role specific training. Cloud snapshots back up customer data, and vulnerability management, static code analysis and a bug bounty are in place.

Total liability is capped at the subscription fees paid in the 12 months before the claim, and indirect, consequential and punitive damages are excluded for both parties, under product terms governed by Indian law. The products and all output are provided as is, with every warranty disclaimed, including accuracy. The customer indemnifies Lucio, and no indemnity runs from Lucio to the customer. A bespoke master services agreement exists for larger customers but is not public.

Add ins put the product inside Word and Outlook, and connectors reach iManage, NetDocuments, SharePoint, OneDrive and Dropbox, with a short video guide to the NetDocuments connection. In Word, clauses and revisions arrive as tracked changes and playbook comparisons sit beside the document. Fill in templates populate placeholders in filing drafts from the source documents. In Outlook, threads and attachments are read together, and work summaries can be filtered by day, week or matter and copied into a timesheet tool.

Single sign on is supported. What each document system connection reads or writes back, and how its permissions carry over, is not described.

Microsoft Azure and Google Cloud host the product, or the customer can run it on infrastructure it deploys itself, with client data in a dedicated tenant. Storage follows the region the customer declares at sign up. Customers in the United Kingdom are stored there, and the same holds for the UAE, the United States and India. EU customers and the rest of the world are stored in the United Kingdom, and without a declaration the default is India.

Data may pass through other jurisdictions for transient processing without being retained there, so processing and storage locations are stated separately. One subscription covers every product, so no tier changes these terms.

SOC 2 Type II and ISO 27001:2022 are both held, beside stated compliance with GDPR, UK GDPR, India's DPDP Act, the CCPA and the UAE's data protection law. Controls, policies and reports, including a disaster recovery drill, a vulnerability assessment and static code analysis, sit in a trust center, and documents are released after an access request. Lucio says certifications and reports are available to customers and to their own clients. The auditor and report dates are not shown on the public view.

The subprocessor list names OpenRouter in the United States, a router to third party models, beside Microsoft Azure in the United States, the UAE and the United Kingdom and Google Cloud Platform in the United States. The models themselves, and which provider serves which product, are not named. Any new or replacement subprocessor is announced at least 30 calendar days ahead, with a right to object and to leave with a refund of prepaid fees.

A change of model behind the same router would not appear on that list. Customer data does not train any model under the product terms.

One subscription covers the Assistant, the Word add in and the Outlook add in at a flat $149 per user a month, with no seat minimum and no fees. Training, onboarding by Lucio's legal engineers, every integration, prompt libraries and templates, and access to current and future legal repositories are included. Use is subject to a fair usage clause that rules out automated or excessive use. Tailored arrangements are handled by email, and larger customers can sign a bespoke master services agreement.

The pricing page itself asks visitors to sign up to see the price, and the figure appears in the published answers about cost.

Boutique, mid sized and enterprise law firms and in house legal teams make up the customer base, with users in 13 jurisdictions and data regions for India, the UK, the UAE and the United States. Practice versions cover disputes and litigation, corporate and transactions, banking and regulatory, and competition. Litigation teams get discovery across a Briefcase, chronologies, argument review and testimony comparison, and competition lawyers get curated decisions from six authorities for merger research.

Multilingual review and translation serve cross border matters, and OCR reads scanned filings and older documents. Practice areas and jurisdictions outside its range are not stated.