O

OnitX ELM

The model is the engine of one core capability, invoice review, on a legal management system that works without it. The OnitX ELM page describes a configurable platform for matter management, spend management, vendor management through the BillingPoint portal, accruals and budgets, and real time reporting, with workflows a department configures to its own approvals. That system of record works as a workflow product on its own.

The AI is Spend Agent, which works inside both OnitX ELM and Unity ELM. The Spend Agent page says it reviews outside counsel invoices against the applicable billing guidance line by line, connects each supported finding to that guidance, calculates a recommended monetary adjustment and explains what was found and why. The product page leads with Spend Agent and its accuracy claim, and Onit's subprocessor list names OpenAI and Google Gemini as its model providers.

Reviewing invoices against billing guidelines is one of the central jobs an ELM is bought to do. Remove the AI and the matter, budget and vendor management a department runs on remains.

Each finding is tied to the guideline it rests on and explained, and the one accuracy figure has no method. The Spend Agent page says the agent connects supported findings to the applicable billing guidance, calculates a recommended adjustment, and lets reviewers understand what was identified and why. A reviewer can check each finding against the department's own rule and the invoice line. The page states more than 92 percent invoice level accuracy compared with 72 percent for experienced lawyers, and the OnitX ELM page repeats the 92 percent figure.

Neither says who measured it, on how many invoices, over what period or how a correct review was defined, and the launch announcement carries no figure. Onit's services agreement (last revised 19 August 2026) states in section 12.3 that output may be incomplete, inaccurate or biased and that Onit cannot guarantee it is free from hallucinations. Section 12.5 provides AI features as is. The product does not cite legal authority; the risk a department carries is a missed charge or a valid one wrongly disputed.

Automation of invoice disputes is claimed, and the point where a person approves is not described. The Spend Agent page says the agent recommends financial adjustments and keeps reviewers in the decision when human judgment is needed. The launch announcement says it automates invoice review at scale, applies billing guidelines written in natural language and automates disputes, and the product page promises getting live in hours.

No page says which adjustments and disputes proceed without a reviewer and which go to one. There is no threshold, amount, confidence level or category at which the agent stops and asks, and no description of what a law firm sees when an adjustment is proposed or disputed. No route is described for reversing an adjustment the department later disagrees with. Section 12.3 of the services agreement makes the customer responsible for reviewing output and says Onit is not liable for decisions based on it.

The underlying ELM has configurable approval workflows, a real control structure for matters and budgets, and nothing published says how Spend Agent's adjustments pass through it.

Named companies are published with figures, and the figures are not tied to this product in a way a reader can assess. The OnitX ELM page names Corteva, Delaware North, Syngenta, Astellas, UMB Bank and Johnson Matthey. It states results of a 30 to 50 percent reduction in outside counsel spend, 40 percent faster matter cycle times and hundreds of hours saved a year, without saying which customer achieved which result or how it was measured.

The Corteva case study covers 2021 to 2025 and reports more than a million tasks streamlined and nearly a million hours saved. It describes a managed services roadmap, automated workflows and multilingual chatbots across Corteva's Onit solutions, recognized at the 2024 Buying Legal Counsel Awards. The quote is unattributed, and the result spans services and several products rather than OnitX ELM alone. The Spend Agent page shows logos, including ADM, Airbnb, Experian and Delaware North, and no result for the agent. No measured outcome for OnitX ELM or Spend Agent is published with a stated method.

There is a real confidentiality regime, and a training position that permits deidentified use and is silent on Onit's own models. Onit's services agreement (last revised 19 August 2026) makes customer data the customer's confidential information under mutual confidentiality obligations. Section 8.5 requires reasonable advance notice before a compelled disclosure, and section 5.1 leaves the customer owning its data. On AI, section 12.1 says Onit will not permit third party model providers to use input to train their models for the benefit of others, except in deidentified or aggregated form necessary to operate the service.

Section 5.2 allows aggregated and anonymized customer data to be used for product improvement, analysis and benchmarking. Nothing states whether Onit trains its own models on customer content. The security page says data within Onit remains the property of the project owner and cannot be accessed by any other user, without describing how. Privilege and work product are not addressed, and the model providers' retention of invoice content is not stated. The product reads every outside counsel invoice, and those invoices describe privileged work line by line.

A clear position on advice is in the agreement, with a limit on high risk use and no treatment of supervision or jurisdiction. Section 4.14 of Onit's services agreement (last revised 19 August 2026), headed No Legal Advice, states that Onit is not a law firm and does not offer legal advice. Section 12.7(d) forbids using the AI features in a way that makes, or is a substantial factor in making, a decision with a material legal or similarly significant effect on an individual.

Section 12.3 makes the customer responsible for reviewing output. The buyer is a corporate legal department, so the users are lawyers and legal operations staff. The product reviews invoices rather than producing legal analysis, so the advice question narrows to whether an agent's adjustment of a law firm's bill is a judgment a lawyer must make. Nothing published addresses that. No page says who in the department should approve an adjustment, refers to a lawyer's supervision duties when an agent negotiates with outside counsel, or sets jurisdiction limits.

No AI governance position is published. Checked the OnitX ELM and Spend Agent pages, the Spend Agent launch announcement, the security page, the services agreement (last revised 19 August 2026), the data processing addendum (revised 20 April 2026) and the subprocessor list (17 August 2026) on 2 October 2026. Bias appears once, as a warning in section 12.3 that output may be biased, which allocates the risk to the customer rather than describing anything Onit does about it.

Section 12.4 lets Onit improve, replace or deprecate models or prompts provided core functionality is not materially reduced, a change right without any statement of how changes are tested. Section 12.7(d) restricts the customer from high risk uses, which is a contractual limit rather than a governance mechanism. No responsible AI page, named owner, testing regime before release, or finding about how Spend Agent's accuracy varies across billing guidelines, firms, currencies or invoice formats is published. The accuracy comparison with experienced lawyers implies an evaluation exists, and nothing about it is published.

A detailed subprocessor list with a change mechanism and a breach commitment are published, and the retention period is not. Onit's subprocessor list (17 August 2026) sets out processors product by product with purpose and location. It includes AWS in the United States or Germany with backups in Ireland for the Onit ELM platforms, OpenAI and Google Gemini for Spend Agent, and Onit's own affiliates in the United States, Canada, the United Kingdom, India and New Zealand for implementation and support.

Section 4.5 of the services agreement requires customers to subscribe to email updates of the list and gives fifteen days to object to a new subprocessor, with termination of the affected services if no alternative is agreed. The data processing addendum (revised 20 April 2026) commits Onit to notify the customer promptly of a security breach with its nature and scale, and allows one audit a year or reliance on SSAE 18 reports.

The security page describes encryption, daily backups and access logging. Section 6.5 of the agreement deletes customer data after a thirty day export window under Onit's current retention policy, which is not published. No breach notification period in hours or days is stated.

The agreement publishes a cap, uncapped indemnities and a performance warranty, and then takes the AI outside them. Onit's services agreement (last revised 19 August 2026) caps aggregate liability in section 10.2 at the fees paid or payable in the twelve months before the event. Section 10.3 lifts indemnification obligations and payment obligations out of that cap. Section 11.1 commits Onit to defend and indemnify the customer against claims that the subscription services infringe intellectual property rights.

Section 9.2 warrants that the services will operate substantially as documented and that material functionality will not be decreased during the term. Section 12.5 then provides the AI features and their output as is and as available, with all warranties disclaimed, and section 12.3 says Onit is not liable for decisions or actions the customer takes based on output. A wrong adjustment Spend Agent proposes, or a valid charge it disputes, is therefore the department's loss, while the platform underneath carries a real warranty and an uncapped infringement indemnity. A buyer can read the allocation before signing.

Document management integrations are named, with electronic billing and a law firm portal built in, short of documentation. The OnitX ELM page names NetDocuments, iManage and SharePoint as integrations and describes electronic invoice intake and the BillingPoint vendor portal through which law firms submit invoices and collaborate with the department. Spend Agent is described as working directly within OnitX ELM and Unity ELM, so invoice review runs where the invoices already arrive.

Section 4.4 of the services agreement establishes that Onit APIs exist and are licensed subject to fees and restrictions in an order, and the subprocessor list names Workato as an integration platform across Onit products. What is not published is what each document management integration moves and in which direction, whether matter documents are filed back, any connection to finance or ERP systems for accruals and payments, or public API documentation. A department on iManage or NetDocuments knows a connector exists and must ask how deep it goes.

Hosting regions and AI processing locations are published in the subprocessor list, and the tenancy model is not stated. Onit's subprocessor list (17 August 2026) shows the Onit legal management and contract platforms hosted on AWS in the United States or Germany, with backups in Ireland, which is a regional choice a European department can make. The same list shows Google Gemini for Spend Agent and agents in the United States and OpenAI in the United States and worldwide, so invoice content sent to the AI is processed in the United States whichever hosting region is chosen.

The data processing addendum (revised 20 April 2026) covers transfers under standard contractual clauses and the UK addendum. The security page describes an enterprise class hosting environment with redundant power and network connections and says data cannot be accessed by any other user, without stating whether customers share infrastructure or how they are separated. No private cloud or on premises option is described for OnitX ELM. A department in the EU can keep its matters in Germany and should know its invoices reach models in the United States.

SOC 2 Type 2, SOC 1 Type 2 and HIPAA audits are stated, and no auditor, period or report route is given. The security page says Onit audits to SSAE 18 SOC 2 Type 2, SOC 1 Type 2 and HIPAA standards, verified by an independent auditing firm, and that physical security is audited independently. The data processing addendum (revised 20 April 2026) lets a customer accept SSAE 18 Type 1 or Type 2 reports from qualified auditors issued in the prior twelve months in place of an on site audit, which confirms the reports exist and are provided to customers.

No auditor is named, no scope, trust services criteria or coverage period is stated, and no public route to request a report before signing is published on the security page, which carries no link to a trust portal. The page itself describes 256 bit SSL encryption and data center controls in terms older than the AI it now covers. A buyer has three named standards and a contractual right to the reports once a customer.

The model providers are named by product and location, with a change notice mechanism, and the agreement reserves model changes without notice. Onit's subprocessor list (17 August 2026) names Google Gemini for Spend Agent and agents on the Onit legal management platforms in the United States, OpenAI across Onit platforms in the United States and worldwide, and Anthropic for its contract products, so a buyer of OnitX ELM can see that its invoice review runs on Gemini and OpenAI.

Section 12.9 of the services agreement confirms third party model providers are used, and section 4.5 gives customers who subscribe to list updates fifteen days to object to a new subprocessor, which covers a new model provider. Against that, section 12.4 lets Onit improve, replace or deprecate models or prompts without notice provided core functionality is not materially reduced, so a model change within an existing provider carries no notice. No model or version is named. A department can tell its outside counsel which companies' models read their invoices.

No pricing information is published at any level. No price, plan, package or unit of charge was found, and every commercial route is a demo request. The agreement describes how charging works without disclosing any figures. Subscription and professional fees are set in an order and subject to annual increase. Usage is measured against tiers in the order, and when usage exceeds a tier's maximum the customer is moved up automatically and invoiced for the difference.

Sustained heavy use of AI features can attract overage fees at current rates after notice. A buyer learns that it can be moved up and billed for AI overuse, and cannot learn what any tier costs or what the unit of usage is. Spend Agent's promise of going live in hours does not say whether it is priced separately from OnitX ELM. Checked the OnitX ELM and Spend Agent pages, the ROI calculator link, the services agreement (last revised 19 August 2026) and the security page on 2 October 2026.

The buyer and the work are described with substance, and the boundaries are not. OnitX ELM is sold to corporate legal departments and legal operations teams for matter management, outside counsel spend, invoice review, vendor management, accruals, budgets and reporting. Onit's solutions menu carries role pages for legal operations, general counsel and contract managers, and industry pages for pharmaceutical companies, financial institutions, insurance, technology and government.

The named customers span agriculture, life sciences, hospitality, banking and chemicals. Onit positions OnitX ELM as the configurable enterprise platform beside Unity ELM and SimpleLegal for mid market departments. The subprocessor list shows hosting in the United States or Germany and Onit affiliates in the United States, Canada, the United Kingdom, India and New Zealand providing implementation and support. Nothing published says where coverage stops: which billing standards and currencies Spend Agent handles beyond the department's own guidelines, whether law firms are a supported segment for this product, or in which jurisdictions the platform is sold and supported.