R
Red Marker
Red Marker helps enterprise legal, compliance and marketing teams review advertising for regulatory and brand risks. Document Scanning applies configured rules to draft assets, while Web Reports checks owned and partner websites for issues such as misleading claims, missing disclaimers and outdated promotions. Its RiskGPT feature proposes replacement wording for selected risky sentences. Users can accept a change, request another suggestion or send the asset for professional review.
Word and PowerPoint integrations place feedback in the authoring workflow. A separate Approvals tool directs material to specified reviewers in sequence and shows its current stage. Rule libraries address financial advertising requirements, and implementation teams configure additional rules for each organization's policies and risk tolerance. Angle Auto Finance uses Red Marker with IntelligenceBank's repository and workflow tools for dealer advertising and website checks.
Founded in Australia in 2013 and acquired by IntelligenceBank in 2024, Red Marker serves financial services and several other regulated industries. The service is quoted privately, with distinct scanning and reporting offerings. Its terms require professional approval before publication and prohibit storage of personally sensitive data. Third party model training is barred, although deidentified service improvement and consented custom model development retain separate contractual permissions.
Red Marker, head to head
Side by side on the same 15 capability axes and 12 legal signals: where the two part company, and what neither one publishes.
Alternatives to Red Marker
Vendors in the same categories as Red Marker whose graded profiles look most alike, with a line on what each product does.
Similar is not the same, so check that each one does the job you need. No vendor pays for placement.
- TTrustArcTrustArc is a privacy management platform for privacy, legal and compliance teams, sold as a suite of applications.
- HHadriusHadrius is an AI compliance platform for firms regulated by the SEC and FINRA, sold by Quantbase Investments, Inc. of New York.
- BBleeBlee is an AI marketing compliance platform from Blee, Inc. of New York, sold to legal, compliance and risk teams that review marketing, product and sales content, with marketing and…
- CCredo AICredo AI, based in Los Altos, California, sells an AI governance platform that inventories the AI an organization runs and checks it against regulatory obligations.
- DDataGrailDataGrail is a privacy management platform that runs the statutory data protection program for an in house legal, privacy or security team.
- EEthycaEthyca is a data governance and privacy engineering platform for enterprises.
Ordered by how closely the graded profiles match across the 15 capability axes, inside the same categories. See how each axis is graded in the methodology.
Capability grades
All 15 axes, graded from public sources on the date shown. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
Machine learning identifies risky language and images within marketing assets, while RiskGPT generates alternative wording for selected passages. Natural language processing, optical character recognition and sentence embeddings work alongside customer specific logic and rule libraries. The service also scans websites and produces reports about regulatory and brand concerns. Users can route content through sequential approvals and follow its review status.
Those workflow and rule management functions have value independent of generated wording. AI drives the interpretation and revision of content within a broader compliance platform that also provides conventional controls, reporting and structured coordination between marketing and legal teams.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
RiskGPT generates proposed replacements for content that Red Marker's detection models have flagged. The vendor acknowledges that natural language generation is probabilistic and allows users to request a different suggestion. That warning does not quantify error rates or identify a test set for legal accuracy. Rule libraries name relevant regulatory provisions, but the output description does not promise an openable primary source for every suggested correction or test subsequent legal treatment.
Reviewers receive contextual risk feedback and retain responsibility for approval. No independently reproducible evaluation establishes the frequency of unsupported regulatory assertions, missed issues or incorrect replacement language in this workflow.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
RiskGPT is enabled by customer choice and leaves each proposed change under user control. A marketer can insert the suggestion, reject it or request another version before sending content for compliance review. The separate Approvals function routes an asset to named individuals or teams in sequence and displays its current stage. Contract terms require trained legal or compliance professionals to check and approve content before publication.
These controls establish review responsibility and visible intervention points. The service does not publish a confidence threshold that stops processing, a mandatory automated escalation rule or a defined recovery process after a mistaken compliance conclusion.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
Angle Auto Finance describes combining Red Marker with IntelligenceBank's repository and workflow platform for a network of more than 800 dealerships and other partners. Its November 2024 account reports a 30 day deployment, two minute asset reviews and 45 internal and external users. Dealers submit advertising for diagnostic feedback before final approval, while websites receive monthly light scans and quarterly deep scans.
Named customer staff describe the process and its benefits. The numerical results lack a comparable baseline and a reproducible calculation for the claimed labor savings. The account therefore supports an operating deployment without isolating the contribution of Red Marker from the combined platform.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
The customer retains ownership of uploaded data, and both parties undertake confidentiality obligations covering employees, agents and subcontractors. Third party model training is prohibited, while a separate clause permits deidentified customer data to improve service accuracy. Purchased custom models require consent and must benefit the particular customer's use. The service also prohibits storage of personally sensitive information, including financial identifiers and health records.
It is therefore not presented as a repository for unrestricted client confidences. Attorney client privilege, legal work product and matter level retrieval barriers are not directly treated, and conditional provider retention language does not promise universal zero retention.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
The contract expressly treats the service as a business tool for competent personnel and denies that it supplies legal or regulatory advice, opinions or signoff. Trained compliance or legal professionals must still check and approve material before it is published. Product guidance allows marketers and content creators to use the tool without a legal qualification, with expert reviewers responsible for final decisions.
This establishes the intended professional boundary and a supervision requirement. It does not map lawyer competence or client consent duties to named jurisdictions, or describe separate disclosures for consumers receiving generated guidance. The principal use remains internal marketing compliance review.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
Red Marker acknowledges variability in generated suggestions and keeps acceptance of AI output with the customer. Rule configuration is tailored with implementation staff and optimized through continuing support. Its security engineering principles concern software and infrastructure protection, while claims of more objective review concern the consistency of compliance feedback. A separate AI governance framework does not identify release approval criteria, an accountable model risk owner or test results for uneven performance across languages and industries.
The expansion into multiple languages is not accompanied by comparative reliability measurements. Customer supervision and customization are visible, but a vendor model assurance process remains unspecified.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
Encryption, customer controlled accounts, backups and restoration commitments govern service data. The privacy policy promises notice of a confirmed personal data breach within 24 hours and distinguishes account records, aggregated usage and uploaded service content. Paid service data remains for at least 30 days after the last transaction, subject to audit or legal needs; active prompt and output lifetimes are not fixed.
Terms name several model providers, but the wider service provider inventory largely identifies functions instead of companies. Some optional tools process information in other regions. These policies describe operational safeguards without a complete subprocessor inventory or a universal deletion schedule.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
IntelligenceBank promises material conformity to agreed service specifications, supplies response and restoration targets and indemnifies customers for specified intellectual property infringement and unlawful acts. Aggregate liability is generally capped at payments made during the relevant 12 month period, with consequential losses excluded. Technology professional indemnity, cyber and other insurance categories are identified without policy limits.
A customer terminating for an unremedied qualifying breach can receive unused prepaid fees under the stated procedure. These are contractual remedies, but the terms expressly disclaim responsibility for detecting every legal breach and do not warrant the accuracy of individual compliance suggestions or generated replacements.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
Word and PowerPoint integrations let authors invoke a scan and receive contextual compliance findings while creating material. The privacy notices explain that authorized document content is extracted, analyzed and returned as annotations. RiskGPT then displays suggested changes in the application or office add in, where a user can insert a revision or request another. This specifies the input, returned result and user's control over writing back to the original asset.
The public integration list separately marks Jira, Red Oak, Seismic and Veeva connections as forthcoming or proposed. Those planned links do not carry the same operational status as the described authoring integrations.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
The service uses regional cloud hosting, with Red Marker customers assigned to United States, Australian or European infrastructure. Its FAQ identifies AWS regions in Northern Virginia, Sydney and London, with disaster recovery locations in Oregon, Tokyo and Ireland respectively. Advanced AI rules use private models in named regional markets, and a model outside the customer's data geography requires prior consent. Some separately purchased IntelligenceBank services have their own processing locations.
The published information does not map every RiskGPT operation, model version and subscription option to a complete processing route. Storage regions and conditional model geography are clearer than the full feature level residency matrix.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
Red Marker states that it is ISO 27001 certified and describes secure engineering, authentication and infrastructure protections. The common service agreement also specifies annual external penetration testing and an ISAE 3402 or SOC 2 compliance audit, with topline results available to customers on request. Hosting provider compliance is identified separately from the service's own certification. The linked security portal was unavailable at verification, and no current certificate with scope, audit period and assessor was accessible through that link.
Consequently the public materials identify assurance standards without exposing the complete evidence needed to establish their coverage of every Red Marker AI component.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
RiskGPT's FAQ identifies OpenAI's GPT 3.5 family and explains that selected risky sentences and instructions are sent through the API, rather than the entire asset. The wider agreement names Microsoft Azure, OpenAI, AWS Bedrock and Google for third party AI capabilities, with private regional processing and consent for exceptional geographic changes. It also permits purchased custom models under customer consent. These disclosures identify providers and part of the architecture, but do not establish the model version serving each current feature.
The general right to substitute service components does not provide a specific commitment to notify customers of every model or provider replacement.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
Document Scanning and Web Reports are separately described commercial offerings with private quotes. The former includes configurable risk detection, integrations, support and rule library options; Web Reports supplies recurring reports for selected sites and requirements. The agreement invoices access fees annually in advance and permits upgrades for additional users, data allowances, modules and features. It does not publish a rate, a definite charge per scan or rule, or a standard allowance attached to a named price.
Implementation and custom configuration are scoped with the customer. The product split is visible, while actual pricing and the selected charging units depend on the order.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
Red Marker serves legal, compliance and marketing teams in regulated enterprises. Named sectors include financial services, insurance, healthcare, pharmaceuticals, telecommunications, automotive and food businesses. Rule library modules cover particular financial advertising requirements, and organizations can add their own brand standards and risk logic. The product checks drafts before publication and reviews owned or partner websites afterward, with authoring tools and structured approvals supporting both legal and marketing users.
It also advertises expanded language coverage for international teams. A complete jurisdiction and language exclusion list is not supplied, and the service is not described as general legal research or client matter management.
6 public documents
The public pages on file for Red Marker, with the recorded signals each one supports and the date it was last read. Open any of them and check the reading against the record.
-
redmarker.ai/en-us/terms-of-use5 signals
Client Data in Training, Ethical Walls and Matter Segregation, Bar Guidance Alignment and 2 more
Read Oct 16, 2026
-
redmarker.ai/en-us/privacy-policy2 signals
Prompt and Output Retention, Third Party Request and Subpoena Notice
Read Oct 16, 2026
-
redmarker.ai/en-us/riskgpt-faqs2 signals
Good Law Verification, Refusal and Uncertainty Behavior
Read Oct 16, 2026
-
Billing and Fee Posture
Read Oct 16, 2026
-
Primary Law Corpus Provenance
Read Oct 16, 2026
-
Fabricated Citation Record
Read Oct 16, 2026
Custom subscription quote
- Scanning and website reporting have separate scopes.
- The quote sets access, data and module allowances.
- Access fees are normally paid annually in advance.
- Public rates are not supplied.
Document Scanning and Web Reports are separately scoped offerings. Access fees are invoiced annually in advance, with users, data allowances and modules specified in the order.
Implementation: Configuration, training and ongoing support are described; no public implementation fee is supplied.
Note: Rates, minimum spend and standard volume allowances are private. Upgrades can be prorated during the term; reductions do not create a refund.
Legal Signals
What each signal meansA signal records what public sources say on the date shown. It is not a grade and it is not a recommendation. Where a signal reads Not addressed, it means the index did not locate the material in public sources on that date, which is a statement about disclosure rather than about the product.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
The published agreement expressly reserves a right to train on customer content, with no opt out located. Any de identification, anonymization or aggregation qualifier is recorded in the summary.
The agreement's accuracy improvement license permits use of deidentified customer data without restricting that permission to a named technical method. Separate provisions prohibit training third party models and require customer consent for purchased models tailored to that customer's use. Those narrower protections do not expressly remove the broader service improvement license for the vendor's own systems. RiskGPT's policy also excludes OpenAI API training.
The permission recorded here concerns the residual contractual improvement right; it does not mean that third party training is allowed or that customer specific model training occurs automatically.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
Retention is acknowledged in public materials with no stated period.
Paid service content is kept for at least 30 days after the last customer transaction, with auditing and legal exceptions. Account data and anonymized aggregated usage may remain indefinitely, while other contact records have separate periods. The contract also describes nightly database backups retained for 30 days and customer download options before expiry. These are backup and exit arrangements, not a fixed active lifetime for every prompt and output.
Advanced models use zero day retention only where available, so that phrase does not establish a universal no storage policy.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
Segregation is asserted in public materials with no published detail on how it is enforced.
Customers administer authorized user access and can provide a customer success manager with a support license. Approvals can be directed to specified teams or individuals, and the agreement defines a dedicated customer platform with its own settings and data allowance. These arrangements describe account administration and workflow participation. They do not explain whether model retrieval checks permissions on each query, inherits a source system's access rules or separates individual client matters inside an organization. A reviewer assignment is not itself a restriction on what information an AI component can retrieve.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
Terms reserve discretion over whether to notify.
The privacy policy allows disclosure without consent when legal process requires it, including court orders, subpoenas and tax investigations. Its promise to notify applies only where notice is possible and appropriate. That qualification leaves a discretionary judgment beyond a simple prohibition imposed by law. The confidentiality clause separately permits disclosure required by law or securities exchange rules, without adding an unconditional customer notice obligation.
No published transparency report explains how often requests occur or how disputed demands have been handled for customers.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
Sources are identified without stating the license or rights basis.
Rule modules identify FINRA Rule 2210, SEC advertising rules, Regulation Z, MiFID II, SFDR and other named regulatory frameworks. Customers add internal requirements and custom risk rules for their content. This identifies the legal standards the compliance checks apply, but not a complete set of source publications, a licensing or public domain basis for each text, or a stated update delay across the collection. Customer configured logic and generated replacement language also remain distinct from an open library of authoritative legal materials with documented provenance.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
No located public material addresses whether authority is checked for subsequent history.
The service detects problematic claims, missing disclaimers and other advertising risks against configured requirements. No commercial citator or proprietary method for reviewing the later treatment of judicial authority is described. Website rescanning and rule maintenance can address changing content, but neither establishes that an opinion cited in a legal explanation remains valid. The RiskGPT process rewrites selected risky sentences rather than presenting a described legal history analysis.
Human legal review is required before publication, without a separate product function that verifies subsequent case treatment.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
No located public material addresses what the product does when it cannot ground an answer.
RiskGPT warns that probabilistic generation can return varying suggestions and offers another attempt when a user dislikes the result. It does not describe an explicit refusal when a compliant rewrite lacks support, a confidence cutoff or a no answer response for an unresolved legal question. The user can decline a suggestion and send material to compliance, but that is human intervention rather than model abstention.
The published workflow therefore explains revision and review controls without establishing what the AI returns when it cannot justify a proposed correction.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
No court order, opinion or disciplinary record addressing fabricated or hallucinated legal citations produced by this product has been located as of the date shown. This is a statement about the public record on that one subject, not a finding about the product, and this signal is not a litigation history.
The current AI Hallucination Cases database has no matching entry for Red Marker, RiskGPT or IntelligenceBank concerning fabricated legal citations as of October 16, 2026. Red Marker is used primarily for marketing compliance analysis and suggested changes to advertising content. Its own terms still require trained professionals to approve material and disclaim detection of every legal breach. Absence of a matching court record does not validate each compliance finding or generated sentence. It concerns fabricated citations specifically and carries no conclusion about the product's overall reliability.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
Public materials refer to professional responsibility in general terms without naming guidance.
The service contract requires trained legal or compliance professionals to check material before publication and treats the software as a tool used with competent business judgment. These statements engage with supervision and responsibility in general terms. The vendor does not map the product to a named lawyer ethics opinion or specify how client consent and competence obligations differ among jurisdictions. A general FAQ quotation defining law technology does not supply that mapping.
Regulatory advertising rules in the rule libraries address content standards, rather than the professional conduct duties of a lawyer using AI.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
The product does not touch a fee between a lawyer and a client. It operates before an engagement exists, or it is bought by a team that bills no client for the work. Savings claims aimed at the buyer’s own cost are recorded in the summary and do not make the row a savings claim, because no client bill is in the loop.
Marketing and compliance departments buy Red Marker to reduce their own content review effort and coordinate approval inside an enterprise. Advertised time savings concern that internal process, including work by marketing teams and reviewers. The service is not described as producing legal invoices, measuring outside counsel fees or turning reduced hours into a client charge. Its software subscription is paid by the organization using the workflow.
The Angle Auto Finance example concerns dealer advertising and operational capacity, with no outside lawyer to client billing relationship specified in the deployment.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
A current subprocessor or model provider list is published.
The service agreement names Microsoft Azure, OpenAI, AWS Bedrock and Google for AI capabilities, and describes other optional services involving Zapier or processing in particular AWS regions. The RiskGPT FAQ adds a named model family and the limited sentence content sent to its API. That supplies a public model provider list, although it does not map all providers to each subscription or offer a complete inventory of support vendors. A standard client consent letter or outside counsel disclosure package is not included with those public materials.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
Some elements of the record are available, short of a document level export.
Approval status identifies where an asset sits in a sequence of reviewers, and the common service agreement provides for returning workflow history and database records as CSV files when applicable. Web Reports can also deliver findings in CSV or PDF form. These artifacts can help explain compliance review to a regulator or examiner. They do not form a described export combining the exact model, retrieved legal sources and human verification for every generated passage. The available operational history therefore covers part of the review account without a complete AI disclosure record.