P

Parley

The models drive what the vendor leads with, on a workflow layer that would still run without them, which is the B band. The Terms of Service define the platform as an AI-native system that ingests and stores content and applies AI to extract information, generate drafts, populate records and execute agentic tasks, and the home page describes an agent that drafts, fills forms and researches from a firm's own templates and past work, over a client and matter database that fills itself from email and calendar.

Around that sits conventional practice software: case tracking with USCIS status updates, exhibit assembly into a combined, paginated PDF, form completion screens and LCA and PAF management. Strip out the models and a firm keeps a case tracker and an exhibit tool, which is why this is B rather than A. Verified 18 September 2026.

Grounding to the user's evidence is claimed without a described method or measurement, which is the C band. The vendor's content subdomain says drafts are generated directly from uploaded evidence, tie statements to verifiable facts and insert direct quotations from reference letters; the main site says the agent works from a firm's own templates and past samples. No accuracy figure, test set or evaluation is published, no failure mode is named, and nothing describes how a draft links a statement back to the document it came from or what the research function does when it finds no support.

The canonical documents run the other way: the privacy policy says AI output may be inaccurate or incomplete and must be reviewed by a qualified human, and the terms disclaim any warranty that generated content is accurate. The vendor's own practice guide discusses hallucination risk at length as a professional duty, which is credited on the professional rows, not here. Verified 18 September 2026.

A written requirement that a qualified human reviews output, with real review surfaces, short of a control structure, which is the B band. The privacy policy states that a qualified human user must review AI-generated output before relying on or using it, the terms say the services are tools intended to assist and are not a substitute for professional judgment and require the customer to set up independent verification procedures, and the vendor's practice guide lays out a draft, verify and edit, then file sequence.

Drafts land in Microsoft Word and Outlook where the lawyer edits them. What the A band asks for is missing, and one gap is specific to this product: the home page says the client and matter database automatically updates and fills out fields from emails, meetings and uploaded documents, and nothing states whether those record changes pass a review point. No mode, threshold or categorical limit on what the agent may do alone is published. Verified 18 September 2026.

Named customers without figures, which is the B band. The about page names Erickson Immigration Group as relying on the platform, pointing to Business Insider reporting in which a partner there describes using it for EB-1, O-1 and national interest waiver support letters, and it names Boundless as a partner using the platform with its legal team. The home page says the product is trusted by more than 100 legal teams.

No figure is published for what changed at any named firm, the 100 teams are not identified, and no case study with a method was located on the main site; productivity benchmarks appear only on the vendor's content subdomain without a named customer. Verified 18 September 2026.

Substantive contractual commitments on training and confidentiality, short of segregation and the model provider position, which is the B band. The Terms of Service limit Parley's licence to customer content to providing the services and testing, diagnostics and troubleshooting, and state that Parley shall not use customer or generated content to train, fine-tune or develop models deployed for or accessible by other customers (3.3).

Customer content is defined as the customer's confidential information, protected by a confidentiality clause that requires Parley to inform the customer immediately in writing before any compelled disclosure (6.1). The pricing page lists zero-data retention and no model training on the Starter plan. The vendor's own practice guide discusses attorney-client privilege and work product at length, including United States v. Heppner and Warner v. Gilbarco, but it does not state how Parley's own terms preserve either for a firm using it.

Three things keep this off A: no segregation between users or matters is documented, the model providers behind the product are not named in any readable document, and the training bar is scoped to models other customers can use, leaving customer-specific training open. Verified 18 September 2026.

A clear tool statement, a defined audience and a published treatment of competence and supervision, short of jurisdiction limits, which is the B band. The terms state that the services and generated content are tools intended only to assist and are not a substitute for professional judgment, and define authorized users as the customer's employees such as attorneys and paralegals, barring use to serve other firms. The vendor's guide Should you use AI as a legal practitioner?, updated 14 July 2026, walks through ABA Formal Opinion 512 on competence, confidentiality, verification and client disclosure, lists what attorneys remain responsible for including supervision of junior lawyers and non-lawyer staff using AI, and points to state bar and court-order trackers.

What is missing for A is the jurisdictional boundary: nothing states which jurisdictions or practice areas the product is built for or where it stops, and the guide tells lawyers to check state rules rather than stating how the product fits them. Verified 18 September 2026.

Individual AI commitments are published without a governance framework, which is the C band. The privacy policy has a dedicated section on artificial intelligence and automated processing: it describes what the AI does, states that output must be reviewed by a qualified human, commits not to use customer content to train models available to other customers, and states that Parley makes no decisions with legal or similarly significant effects based solely on automated processing.

Those are real commitments. Nothing names who inside the company owns model behaviour, what is tested before a release, or what has been found about uneven output across case types or applicants, which matters on a product drafting immigration petitions for people of many nationalities. A bias-minimisation claim appears only on the content subdomain, without a mechanism. Verified 18 September 2026.

Retention, deletion, security and incident practice are published, with the subprocessor list unreadable to this index, which is the B band. The privacy policy, updated 8 September 2026, states retention periods by category of information, ties customer content retention and deletion to the customer agreement and the product's account-deletion and download functions, and records that customers may request their content for 30 days after a subscription ends, after which Parley may delete it (terms 2.4).

It describes encryption in transit and at rest, access controls and security assessments, and has a dedicated incident section committing to prompt investigation and to notify customers under the customer agreement or terms. It states that the current subprocessor list is published at trust.parley.so and that customers will get notice of new subprocessors that touch their content as the agreement requires.

That list returns no content to automated retrieval and could not be read on this date, so the top band is not asserted on it; it is the surface most likely to move this row. The Data Processing Addendum the policy refers to is not published on the estate. Verified 18 September 2026.

A published, specific liability position that stands behind nothing on output accuracy, which is the B band. The Terms of Service give a warranty that services will be performed professionally with reperformance as the remedy (7.1), an indemnity against third-party claims that the services violate law or infringe copyright, trademark or US patent, or arise from Parley's fraud, gross negligence or wilful misconduct (8.1), and a cap at fees paid in the prior twelve months, or one hundred dollars during a free trial (9).

Against that, the terms disclaim any warranty that generated content is accurate, complete or compliant, exclude generated content from the indemnity, and state that Parley has no liability for the accuracy of generated content or results obtained from using it. No insurance position is published. Verified 18 September 2026.

Named integrations with some description of what they move, short of documented depth, which is the B band. The home page names Microsoft Outlook and Word, where users delegate work to the agent, and Google Drive, Box and Dropbox for documents, and says connecting email and calendar populates the client and matter database from emails and meetings. The terms define a Microsoft Word plug-in and a Parley API, which Parley may make available at its discretion.

The content subdomain describes a USCIS case status API in beta. No document management system such as iManage or NetDocuments is named, no immigration case management system is named, and no implementation documentation describing direction of sync or configuration was located. Verified 18 September 2026.

Cloud hosting is stated with neither a tenancy model nor a residency option, which places this at C. The terms describe a cloud-based platform that Parley hosts and gives the customer internet access to, and the privacy policy says Parley is based in the United States and may process personal information in the United States and other countries where it, its affiliates or subprocessors operate, relying on the EU-U.S. Data Privacy Framework for transfers.

No tenancy model is stated, no region is offered, and processing location is not separated from storage. A private cloud deployment option is claimed only on the vendor's content subdomain and is not relied on here. Verified 18 September 2026.

A SOC 2 Type II label appears on the home page while the governing document describes alignment rather than attestation, which places this at C. The home page security section lists SOC 2 Type II, GDPR and no AI model training. The privacy policy, updated 8 September 2026, says the security program is designed to align with industry standards including SOC 2 Type II controls, which is not a statement that an audit has been completed.

The vendor's content subdomain says an auditor-issued report is available under NDA on request and that the auditor and control period are disclosed only with it. The trust centre at trust.parley.so returns no content to automated retrieval and could not be read on this date. No auditor, report period or scope is published on any readable surface. The discrepancy between the label and the policy is the finding. Verified 18 September 2026.

Third-party models are acknowledged and a change process is described, with no model or provider named on any readable surface, which places this at C. The terms define third-party materials to include AI models used with the service, and the privacy policy commits to notice when a new subprocessor will touch customer content, as the customer agreement requires. The vendor's data protection guide explains how model providers, subprocessors and cloud hosts handle data under zero-data-retention agreements, and the pricing page lists zero-data retention, but neither says which providers Parley uses.

The current subprocessor list at trust.parley.so, where providers would be named, could not be read on this date and is the surface most likely to move this row. Verified 18 September 2026.

Real pricing is published for the entry plan with the enterprise tier withheld, which is the B band. The pricing page lists Starter at $500 a month for up to ten seats in a shared workspace with a set amount of usage credits, agentic drafting, research, forms and review, Outlook and Word integrations and zero-data retention, and Enterprise on request with unlimited seats, credits sized to the firm, SSO and deployment support.

The Terms of Service publish the billing mechanics in detail: monthly billing in advance or annual prepayment, included credits, additional credits at a list price set on the order, rollover of unused credits capped at twice the monthly allotment, automatic renewal, a free trial that converts to a paid plan unless cancelled, and 1.5 per cent monthly late charges. What is missing for A is the credit list price and anything on what implementation adds. A pricing row is written. Verified 18 September 2026.

Segments and immigration workflows are described with substance, short of the boundaries, which is the B band. The pricing page separates solo practitioners and small teams on Starter from firms needing governance and SSO on Enterprise, and the terms define users as attorneys and paralegals. The support page lists immigration workflows: research and analysis, form filling, drafting, case tracking, LCA and PAF management and RFE responses, and invites immigration practitioners to book a demo.

The home page has broadened to legal teams generally without naming other practice areas, so the scope beyond immigration is claimed rather than evidenced. The content subdomain lists visa categories, including O-1A, EB-1, EB-2 NIW, H-1B, TN, L-1 and E-2. Nothing states which case types or practice areas the product does not handle. Verified 18 September 2026.