Paxton AI

AI Centrality

How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.

The models are the product. Research, drafting, document analysis, medical chronologies and the citator are all generative or machine learning capabilities, and there is no underlying practice system that would function without them.

Citation Accuracy and Hallucination Disclosure

Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.

Substantive disclosure with a real gap, and the strongest limb here is one the category leaders miss: the vendor built its own citator and publishes precision, recall and F1 tables for it. Published measured accuracy of 93.82 percent average on the Stanford Legal Hallucination Benchmark, broken out by task including case existence, citation retrieval and court identification, plus 94 percent on the Stanford Casehold dataset of 2,400 examples for the citator. Both are public academic datasets, so an outsider can in principle re run them, which is more checkable than a proprietary framework. Two gaps. The published results date from 2024 and no republication against the current product was located as of 29 Aug 2026, which matters under the benchmark half life rule. The AI Confidence Indicator is a confidence signal rather than an explicit no answer path.

Autonomy and Oversight Model

What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.

The product is user directed rather than agentic, and the vendor states plainly across the site that it provides self help services at the user's specific direction and cannot give advice, which is an oversight posture of a kind. The AI Confidence Indicator is a real review aid. What is not published is a described control structure: what the system does on its own, what a lawyer must approve, and what happens after an output is wrong. Searched the site, the platform pages, the terms of service and the help center index on 29 Aug 2026.

Operational and Outcome Evidence

Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.

An unlabelled customer logo strip and three attributed testimonials from named individuals at named organisations stand in for deployment evidence. No figures, no dates, no described method, and no case study located. A 2025 Legalweek Leaders in Tech Law award and a 22 million dollar Series A are recognition and funding rather than production evidence. Individual logos in the strip were not corroborated. Searched the site, the security page and the news and insights index on 29 Aug 2026.

Privilege and Confidentiality Posture

How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.

Confidentiality is asserted in general terms and the documentation behind it points the other way, so this sits at C on the claim rather than lower. The home page describes a secure closed model prioritising the privacy of legal inquiries. Reading the published documents on 29 Aug 2026: the sitewide footer states that communications with the vendor are not protected by attorney client privilege or as work product; the terms of service require a user to warrant that submissions do not constitute confidential information, in a section scoped to questions, comments, feedback and other information about the Services rather than to uploaded documents; the privacy policy is scoped to website and account information, lists no document or prompt data, and states that the vendor does not process sensitive information, on a product that ingests medical records. No training prohibition, no retention period for uploaded documents, and no matter level segregation was located in any of them.

UPL and Professional Responsibility Posture

Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point.

A real published position on the advice line, more specific than most of this market, carried in a footer on every page: not a law firm, not a substitute for an attorney, communications not protected by attorney client privilege or as work product, and no advice, explanation, opinion or recommendation about legal rights, remedies, defenses, options, selection of forms or strategies. Jurisdiction is addressed in part, since the terms state the service is not intended for use where that would be contrary to local law. Two things keep it off an A. Nothing published addresses a lawyer's competence and supervision duties. The self help framing sits oddly against marketing aimed at attorneys, so who the disclaimer is written for is not entirely clear.

AI Governance and Bias Disclosure

Published governance over model behaviour: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.

Searched the home page, platform pages, security page, the open trust center, the terms of service, the privacy policy and the news and insights index on 29 Aug 2026. No governance position for model behaviour was located: no named internal owner, no pre release testing regime, no responsible AI statement, and nothing on uneven output across matter types, parties or populations. The trust center lists security control families, which is a different subject. The white papers index was not reviewed item by item, so this is rebuttable with a single link.

AI Safety and Data Stewardship

Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.

A generic privacy policy covers the website without addressing what happens to documents and prompts after processing. The security page does publish real controls: encryption in transit and at rest, quarterly access reviews on a least access principle, vendor risk management and a security development lifecycle, and the open trust center lists control families. But the privacy policy is scoped to account and marketing data, its retention section speaks only to the life of an account, and the terms say only that certain transmitted data is maintained to manage performance of the service. No retention period for uploaded documents, no subprocessor list, and no incident or breach notification practice was located as of 29 Aug 2026.

AI Liability and Recourse

What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.

Liability is addressed only through a standard limitation clause that disclaims the exposure the product creates. The published terms disclaim all warranties including any representation about the accuracy or completeness of content, cap total liability at the amount paid in the six months before the claim, require the user to indemnify the vendor, and state that the vendor has no liability for loss or corruption of transmitted data. No indemnity running to the customer, no warranty on output, and no insurance position was located. This is a C rather than a D because the allocation of loss is published and a buyer can read it before signing.

Practice Systems Integration Depth

How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.

Searched the home page, the platform navigation, the pricing page, the security page and the help center index on 29 Aug 2026. No integration into document management, matter management, contract lifecycle or filing systems was located in vendor material, and the platform navigation lists none. A third party review reports a Microsoft Word add in, which is not vendor material and does not move this axis. The product is positioned as a browser based tool for solo and small firm users, which is consistent with standing alone.

Deployment Model and Data Residency

Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.

Cloud delivery is implied and the tenancy model is not stated. The terms of service do state that the service is hosted in the United States and that a user accessing it from elsewhere consents to transfer and processing there, which is a real residency statement and is why this is not lower. Not located as of 29 Aug 2026: any tenancy model, any regional option, any single tenant or private deployment, and any statement of where processing happens as distinct from where data is stored.

Security Certifications and Trust Center

Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.

Badges appear with no scope, no date and no report available. There is an open trust center, which is full credit as an access route: it lists SOC 2, ISO 27001 and HIPAA as compliant, GDPR as in progress, and names security control families. What it does not carry is an attestation report, a coverage period, an audit scope or the name of an auditor. Three noun problems compound this and were checked directly on 29 Aug 2026. The security page says the vendor rigorously adheres to these standards, which is adherence rather than attestation. The pricing page describes the platform as HIPAA certified, and HIPAA has no certification scheme, and its annual plan card cites ISO 20701, which is not an existing standard, while the monthly card on the same page cites ISO 27001. Separately, section 1 of the terms of service states that the services are not tailored to comply with industry specific regulations including HIPAA and that a user whose interactions are subject to such laws may not use them, which is what the agreement says alongside a marketing claim of HIPAA compliance and a product that sells medical chronology and medical billing features.

Model Supply Chain Disclosure

Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.

Searched the home page, platform pages, security page, the open trust center, the terms of service and the privacy policy on 29 Aug 2026. No model provider is named, no architecture is described, no subprocessor list exists, and there is no commitment to notify customers when the supply chain changes. The vendor refers to operating within a secure closed model without identifying what sits underneath.

Commercial Transparency

Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.

Real pricing is published for part of the range with the enterprise tier withheld, which is the B band exactly and two letters above anything else on this index so far. The pricing page publishes a figure, a unit and a term: $499 per user per month, or $2,999 per user per year billed annually, with the plan contents itemised. Signup is self serve with a 7 day free trial, and the terms of service disclose the exact card authorization hold of $499. The enterprise tier is custom and volume based with no figure, no floor and no seat minimum published, and what implementation adds is not stated for either tier, which is what holds this off an A.

Firm and Practice Coverage

Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.

Segment and practice coverage is described with substance. Named segments are solo attorneys, small and midsize firms and in house teams, with dedicated pages for personal injury, family law, employment law, criminal law and corporate law. The research coverage page is an unusually concrete boundary statement in one dimension, naming every federal and state database included by jurisdiction and court, which tells a buyer exactly where coverage stops. Not located as of 29 Aug 2026: any treatment of government or court use, and any statement of which firm sizes or practice areas the product is not built for.