L

Lupl

The AI is a feature layer on a work management product that stands without it. Lupl's features page describes the core as task management: breaking complex matters into tasks with assignments and deadlines in list, calendar and board views, plus templates, forms and workflow automations, mobile notifications and connections to Teams, Outlook, a document management system and a practice management system. None of that depends on a model.

The AI on the features page is an assistant that uses natural language to generate summaries, reports and drafts for client updates, and agents listed as AI teammates in workflows, with no description of what they do. Elevate's release of 19 August 2026 calls Lupl AI native and says it works natively with Claude, Harvey and Copilot, which are connections to other vendors' AI rather than Lupl's own models. The trust center describes the product as a task management and workflow automation tool for the legal industry. Without the assistant, a firm still has the matter plan, task list and workflow it bought Lupl for.

Nothing published addresses how accurate the assistant's summaries and drafts are or what they are grounded in. The assistant generates summaries, reports and drafts for client updates, so its output can describe the state of a client's matter to the client. Nothing says whether a summary is built from the matter's own tasks, documents and notes, whether it links back to them, or how often it is wrong. The terms of use (last modified 4 September 2026) disclaim any representation or guarantee regarding results and provide the service as is. Lupl's trust center lists an AI overview document among those available through an access request.

No oversight structure is published for agents that act inside a firm's workflows or for drafts meant for clients. The features page lists agents in Lupl as AI teammates in workflows and an assistant that drafts client updates, and Elevate's release describes agentic AI built into task management and workflow automation. Nothing says what an agent may do on its own: whether it can create or close tasks, reassign work, send messages or update matters without a person approving, what it may not do, or how a lawyer reviews a draft before it reaches a client.

The workflow automations are rule based and set up by the firm, which controls the automations, not the agents. The terms place results at the customer's risk without describing a review step.

Named law firms are published as customers and development partners, with no figures for what changed. Lupl's home page says more than 10,000 lawyers across client firms use Lupl and names CMS, Cooley, RTA, Dykema, Gorrissen Federspiel, VDA, Wilkinson and Withers. Elevate's acquisition release of 19 August 2026 says Lupl was developed with input from CMS, Cooley and Rajah & Tann Asia. The trust center describes customers ranked in the Am Law 10, 50, 100 and 200.

These are real, named deployments at large firms. No result is published: no time saved, matters managed, adoption rate or outcome is attributed to any firm, and the site has no dated case study. The figure of 10,000 lawyers is not dated or broken down.

Confidentiality is in the agreement next to a broad license over customer content, and training and privilege are not addressed. Section 12 of the terms of use (last modified 4 September 2026, Elevate Services, Inc.) binds each party to protect the other's confidential information, and section 12.3 requires prompt notice, where legally permissible, before a compelled disclosure. Sections 5.3 and 5.4 leave the customer owning its content and grant Lupl a fully paid, royalty free, perpetual, irrevocable, worldwide, non exclusive and fully sublicensable right to use, distribute and publicly display it to operate and provide the services.

Section 5.5 allows personal data to be used in aggregated or anonymized form to improve the services. Nothing in the terms names AI training. Lupl's trust center lists a document called AI Training Data and Bias behind an access request. Matter level permissions, privilege and work product, and what OpenAI, listed as a subprocessor, retains are not addressed.

The terms draw the advice line plainly, for a product used by lawyers, without supervision guidance or jurisdiction limits. Section 10.3 of the terms of use says nothing in the Lupl materials constitutes or shall be construed as legal or other professional advice, and section 10.2 disclaims any guarantee regarding results. The users are lawyers and legal staff at law firms and legal departments, so the audience is clear.

Nothing addresses a lawyer's duty to review an AI drafted client update before it is sent, supervision of agents acting in a matter's workflow, or which jurisdictions' practice the templates and workflows assume. The product manages work rather than producing legal analysis, which narrows the question to the client communications the assistant drafts.

Governance documents are listed behind an access request, and nothing about how the AI is governed is published openly. Lupl's trust center lists an AI overview, AI feature documentation and a document titled AI Training Data and Bias among the materials a visitor can request, which shows Lupl has written down its position on training data and bias and offers it outside a sales conversation. The open pages have no responsible AI statement, named owner, description of testing before release or finding about uneven output.

The terms of use say nothing about AI beyond a general disclaimer of results, and Elevate's acquisition release calls Lupl AI native without describing controls.

A data processing addendum, a subprocessor list and security controls are published; retention periods and incident timing are not. The terms of use attach a data processing addendum incorporating standard contractual clauses, under which the customer is controller and Lupl processor. It includes a subprocessor list and five working days' notice of changes, and its section 10 addresses deletion at the end of the services.

Lupl's trust center lists subprocessors including OpenAI, DocuSign, Auth0 by Okta, Airtable and Microsoft, and states hosting on Microsoft Azure, encryption in transit and at rest, and regular penetration testing. Security, privacy, data flow, network and architecture documents are available through an access request. Not published: how long matter data, prompts and AI outputs are kept during the subscription, a breach notice period, and each subprocessor's purpose and location, which sit behind a further link.

Liability is handled through a standard limitation clause, with no indemnity from Lupl and results disclaimed. The terms of use (last modified 4 September 2026, Virginia law, arbitration under AAA rules) cap Lupl's liability in section 11.3 at the fees paid in the twelve months before the claim, excluding gross negligence, intentional misconduct, death and personal injury. Section 10.2 provides the services as is with no warranties and no representation, warranty or guarantee regarding results.

Section 11.1 runs the indemnity the other way: the customer indemnifies Lupl for losses arising from its content, its use of the platform and breaches of the terms. No intellectual property indemnity from Lupl, insurance statement or remedy for a wrong AI drafted update or an agent's action is published, so the risk of an inaccurate status update sent to a client stays with the firm.

Integrations are described by category, and only Microsoft's tools are named. The integrations and features pages say Lupl brings Teams, Outlook and the firm's document management system into one place, and that matters can be created automatically, and time and billing tracked, through APIs with the firm's practice management system. Neither page names a document management system such as iManage or NetDocuments, or a practice management or billing system such as Aderant, Elite or Intapp, and neither says what moves in which direction or what a firm must configure.

Elevate's acquisition release adds that Lupl works natively with Claude, Harvey and Copilot, without describing those connections. No developer documentation or API reference is published.

Lupl runs in the cloud on Microsoft Azure; neither the tenancy model nor the region is stated. Lupl's trust center names Azure as the cloud provider, and the data processing addendum incorporates standard contractual clauses for transfers, which allow personal data to leave the EU without saying where it goes. No region, choice of region, single tenant or private deployment option, or location of OpenAI processing is published.

Elevate's named development partners include Rajah & Tann Asia, so customers are on more than one continent, and where their matter data sits is left open. The trust center offers data flow and network diagrams through an access request and lists the EU to US Data Privacy Framework among its commitments, which covers the legal basis for transfers, not location.

Lupl states SOC 2 Type II and ISO 27001:2022 and runs a trust center that offers the reports on request, with no auditor, scope or period on the open page. The trust center at trust.lupl.com announces a completed SOC 2 Type II audit and ISO/IEC 27001:2022 certification for 2025 and says the reports are available through it. It lists the SOC 2 report, the ISO certificate, a penetration test report, security and privacy whitepapers and architecture diagrams behind a Get access request, and lists GDPR, CCPA and the EU to US Data Privacy Framework among its commitments.

Lupl's home page states SOC 2 Type I and II and describes encryption, penetration testing and independent audits. The open page gives no auditor or certification body, audit period, scope or certificate date.

The model provider is named as a subprocessor with contractual notice of changes; the models are not. The trust center's subprocessor list names OpenAI alongside Microsoft, DocuSign, Auth0 by Okta and Airtable, and the data processing addendum attached to the terms of use requires five working days' notice of changes to subprocessors, which covers a new or replaced model provider. So client matter data processed by the assistant goes to OpenAI.

Not stated: which OpenAI models are used, whether they are reached directly or through Azure, where processing happens, what OpenAI retains, and whether the agents use the same provider. Elevate's acquisition release says Lupl works natively with Claude, Harvey and Copilot, which are connections to tools a firm already licenses rather than Lupl's own supply chain.

No pricing is published at any level: no price, plan, unit of charge, minimum term or implementation fee, and no pricing page in the navigation. The route to buying is a demo request. The terms refer to fees paid by the customer, and cap liability by reference to them, without describing them. Nothing says whether Lupl is priced per user, per matter or per firm, whether the AI assistant and agents are included or sold separately, or whether pricing has changed since Elevate's acquisition in August 2026. The navigation also lists services beside the software, with no price for those either.

Lupl describes who it serves in substance, but not the limits. Lupl's home page addresses law firms from global firms to boutiques, alongside legal teams and departments, and names customers including CMS, Cooley, RTA, Dykema, Gorrissen Federspiel, VDA, Wilkinson and Withers, with more than 10,000 lawyers across client firms. The trust center describes customers ranked in the Am Law 10, 50, 100 and 200 and calls the product a task management and workflow automation tool for the legal industry.

Elevate's release of 19 August 2026 says Lupl was developed with input from CMS, Cooley and Rajah & Tann Asia and positions it beside Elevate's ELM and ELMA products, which Elevate sells to law departments and law firms. Not stated: which practice areas and matter types the templates and workflows support, how far the product goes for in house legal operations compared with firms, and which languages and jurisdictions it is built for.