P

PointOne

Take the models out and there is no product. PointOne's pitch is that a lawyer stops writing time entries altogether: the software captures the working day across documents, email, calls and the web, works out which matter each task belongs to, and writes the narrative, with retroactive capture over any date range for people who reconstruct at week or month end and generated narratives for those who still prefer timers.

The same models turn uploaded outside counsel guidelines into structured billing rules, check every entry against them, and mark up draft bills with flagged problems and suggested fixes. What would remain without them is a timer and an export to Aderant or Clio.

Accuracy is the whole claim, and none of it is measured. The product writes billing narratives from captured activity rather than legal assertions, so the question is whether an entry describes what the lawyer actually did and lands on the right matter. Customers on the homepage say it is accurate. The April 2026 release says the office stress tested whether PointOne could correctly identify a wide range of billable and nonbillable tasks, and the security page promises auditability of AI outputs.

No accuracy rate, sample, benchmark or error rate is published anywhere. Nothing describes what an entry is built from, or how a reviewer can tell an entry attributed to the wrong matter from a correct one before it reaches a client's bill.

The system drafts and people approve, and the approval path is published in detail. Time entries are generated automatically and then move through Review, where the AI marks up the draft bill and a firm sets its own reviewers, routing and permissions. The worked example runs a bill from legal assistant to responsible partner to billing administrator, with comments and tagging to resolve queries. Billing rules drawn from client guidelines are enforced against every entry before it gets that far.

No limit the system places on itself is published. There is no threshold at which it declines to classify a task, no statement of what an unreviewed entry may not be used for, and nothing on what happens when capture misreads the matter.

One deployment is named, dated and sized, and no result is measured. PointOne's April 2026 release states that the Minnesota Attorney General's Office rolled the platform out across its entire office of more than 300 timekeepers. That followed a pilot that tested billing across several agencies, dynamic review flows and classification of billable and nonbillable tasks, and the release quotes Assistant Attorney General Eric J. Kolbeck by name.

The homepage carries logos and attributed quotes from firms including O'Hagan Meyer, Scarinci Hollenbeck, Bell Nunnally, McCathern, Lydecker, Elevare Law and Bevilacqua PLLC, with partners, a CFO and a COO speaking on the record. No published material gives a figure: no measured capture uplift, time saved or realization change. The only quantities are customer counts and the size of one office.

The commitments are specific, and they are published on a security page rather than in a contract. That page states full data segregation, zero training on firm data, zero data retention by the AI models, customizable data retention and single tenant options for enterprise deployments. It also states customizable geolocation, the ability to run models inside a private Azure cloud, and compatibility with systems on premises.

The Privacy Policy dated 7 April 2026 says in terms that it does not apply to Customer Data, which is governed by contracts with customers that are not published, and the published Terms of Service cover the website only. Nothing addresses privilege or work product in what is captured. PointOne watches a lawyer's documents, email and calls all day, so what it holds is a map of client matters.

A position on the professional duty is published, on the vendor's blog rather than in anything a customer signs. A guide of 15 July 2026 states that no AI time tracking software should submit entries without human review. It says the firm reviews, edits if necessary and approves every entry before it goes anywhere, and that this is both an ethical requirement and a practical quality control measure. The same page says nothing goes to billing without the timekeeper's approval.

That engages the duty this product raises: the lawyer bills for time actually spent, signs the bill and stays answerable for every entry, while the words describing the work are drafted by software. The position is not in the Terms of Service of 7 April 2026 or on the product pages. No rule of professional conduct or ethics opinion is named on the site. Nothing addresses found time, flat fees, or what a client is told about how the narrative on the bill was written.

The security page has a section headed Responsible use of AI, and everything in it is a data control: zero training on firm data, zero retention by the models, customizable base models, private Azure execution and auditability of AI outputs. Those protect the firm's data; they say nothing about how PointOne builds and tests the models that classify a lawyer's day. No accountable owner is named, nothing describes what is tested before a release ships, no evaluation result is published, and nothing addresses whether classification or narrative quality varies by practice area, seniority, working pattern or language.

The security page publishes customizable data retention, full data segregation, zero data retention by the AI models and single tenant options. The Privacy Policy dated 7 April 2026 covers the capture surfaces. Data taken through the Zoom integration, including meeting attendance, participant names and call logs, is discarded immediately once time entries are generated. Data accessed through Google Workspace APIs is not used to develop or train AI or machine learning models, is retained only as long as needed, and is deleted on request through an automated process.

There is no subprocessor list beyond analytics providers, no incident or breach notification commitment for firm data, and no published agreement, since the Privacy Policy excludes Customer Data.

The only published allocation of loss is a short disclaimer in website terms. Section 5 of the Terms of Service dated 7 April 2026 says that in the event of data loss or business interruption resulting from use of the services PointOne is not liable for damages, and that users are responsible for safeguarding their own data; section 11 caps total liability at one hundred dollars and excludes consequential damages, and section 10 runs an indemnity from the user to PointOne.

Those Terms govern the website. No warranty, indemnity or insurance position covering the product is published, and nothing addresses who bears the loss if a wrong narrative reaches a client's bill or a client's billing guidelines are breached by an automated entry.

The connections are named on both sides of the product and partly described. PointOne captures context from the applications a lawyer works in, including documents, email, calls and the web. The Privacy Policy sets out what two of those carry: the Zoom integration collects meeting attendance, participant names and email addresses and phone call logs, and Google Workspace data is accessed under stated restrictions. On the output side it syncs with billing and practice management systems named on the homepage: Aderant, Elite 3E, Clio, Filevine, Actionstep, Surepoint, MyCase, LeanLaw and QuickBooks.

The security page says it works with systems on premises. There is no integrations page, documentation or API reference, and nothing on what syncs in which direction or what a firm must configure.

The tenancy model is stated plainly, and the geography is offered without being specified. The security page lists flexible deployment options for large firms: full data segregation, single tenant options for enterprise deployments, customizable geolocation, compatibility with systems on premises, and the ability to run models within a private Azure cloud. That is the clearest statement found of where the AI processing can be placed.

No region is named, and nothing says which plan or contract carries single tenancy or a private model environment. The Privacy Policy says personal information may be transferred, processed and stored anywhere in the world.

The certifications are named, and the evidence cannot be reached. The security page states SOC 2 Type 2 certification with independently audited controls, full ISO 27001 certification, GDPR compliance by design, and that PointOne meets HIPAA requirements for firms in practices close to healthcare. No auditor, scope statement, report period or date appears. There is no trust portal or route to request a report, and no penetration test is mentioned. Neither the SOC 2 report nor the scope of the ISO certificate can be obtained from the published site.

The security page offers customizable base models and the ability to run models within a private Azure cloud, and commits to zero data retention by the AI models, without naming a model, version or provider. Nothing states where inference runs by default as opposed to in the private option, and no commitment is published to notify customers when the models behind their time entries change.

No price, rate or unit of charge is published. There is no pricing page, no plan, no rate per timekeeper and no trial, and every route ends at a demo request. One customer quote says the software more than pays for itself, which is the closest the site comes to a commercial statement.

The range of buyer is evidenced rather than asserted, and the edges are not drawn. Named customers run from small firms and boutiques (Elevare Law, Bevilacqua PLLC, North City Law, Legal Scale) to larger national firms (O'Hagan Meyer, Scarinci Hollenbeck, McAngus Goudelock & Courie, Bell Nunnally, Lydecker) and a state Attorney General's office with more than 300 timekeepers, and the product pages say the review workflow is flexible enough for firms of all sizes while the security page addresses the needs of the world's largest firms.

Worked examples span trademark prosecution, insurance defense, patent litigation and M&A. Nothing states which practice types or billing arrangements the capture handles poorly, and the customer count differs between pages: the homepage says more than 200 firms, the April 2026 release says more than 100.