S

Supio

Supio was founded in 2021 to build this product, with no earlier product to attach models to. CaseAware AI is named as its proprietary technology, described as distinguishing facts from opinions across large volumes of records, which is a claim about what the model does. Every deliverable is generated: chronologies from raw medical records, demand letters, case economics ledgers, litigation drafts and deposition analysis.

Supio Agent, launched in the first half of 2026, is directed by natural language instruction rather than configured through forms, an agentic design rather than an assistant added to a case system. Without the models there is no product, only a connection to case management systems the firm already owns.

Grounding is built in, with no published measurement. Citations point to the page of the source document for any claim in a demand, the right level of detail for medical records, where one treatment note in a 400 page file may be the evidence. Checking is also built into the workflow: for high value cases, human experts verify medical bill totals and damage calculations before delivery, targeting the arithmetic most likely to be wrong and most costly if it is.

Nothing measured is published: no extraction accuracy, recall on treatment events, error rate on bill totals, or evaluation of CaseAware's separation of facts from opinions. Nothing says what happens when records are illegible, contradictory or incomplete. The one circulating figure, 80 or more hours saved per case, measures speed, not accuracy, and independent material reporting it notes that most such figures come from vendor marketing.

Oversight varies with case value, and this is published plainly. For high value cases, human experts verify medical bill totals and damage calculations, so the human check targets the numbers that drive settlement. The agentic layer works on the attorney's explicit instructions. Published examples show the lawyer specifying what to emphasize and asking the system to recheck a medical bill total, which keeps the attorney in the loop by design.

Every output is presented as a draft with linked sources for checking. The boundaries are undefined: nothing says what makes a case high value enough for expert review, what the experts check or against what standard, whether generated content carries any confidence signal, or what Supio Agent may do unattended once instructed.

Company milestones are well evidenced, and customer outcomes are not. Supio has raised about $85m to $91m across three rounds: a $25m Series A on leaving stealth in August 2024 and a $60m Series B in April 2025 led by Sapphire Ventures, with investors including Thomson Reuters Ventures, Mayfield, Greylock and Menlo Ventures. A strategic partnership with Thomson Reuters, expanded in 2026, is meaningful outside validation, since that company is also an investor.

Supio Agent launched in the first half of 2026. No law firm is named in the material located, and there is no case study with a method and no usage figure. The one outcome claim, 80 or more hours saved per case when combining chronologies with demand letters, has no baseline, sample or definition, and independent material notes that such figures generally come from vendors. Funding is not evidence that the product works.

Health privacy credentials are broad, and legal privilege is not addressed. The vendor states SOC 2 Type II certification and compliance with HIPAA, PHIPA and GDPR. PHIPA, Ontario's Personal Health Information Protection Act, governs health information custodians in Canada. Naming it alongside Canadian data centers shows the vendor addressed a specific regional health privacy law rather than treating HIPAA as enough everywhere.

For a platform holding complete medical records of injured claimants, protecting a third party's health information under the right law is the core confidentiality question, and it is answered. Nothing addresses legal professional privilege or attorney work product, although demand strategy, case economics ledgers and litigation drafts are work product.

Not located. The platform drafts demand letters sent under the firm's name to adverse insurers, produces litigation drafts, and generates case economics that inform settlement advice to an injured client. Nothing published addresses the supervising attorney's duty over machine drafted advocacy, the professional responsibility dimension of relying on generated damage calculations when advising a client whether to accept an offer, or any bar guidance.

The human expert verification tier is a quality control mechanism operated by the vendor rather than a statement about the attorney's own professional obligations.

Nothing is published about how the models are governed, evaluated or monitored: no AI policy, model card, bias or fairness testing, evaluation method or result, accuracy monitoring, drift statement, named governance body or ISO 42001. The product produces case economics ledgers and damage calculations that shape what an injured claimant is told their case is worth. Any systematic tendency in how the models weigh treatment, life impact or pain and suffering evidence would fall on claimants rather than on the firm, and nothing indicates it has been tested.

CaseAware is named for separating facts from opinions in medical records, an interpretive judgment about clinical documents, and nothing indicates that judgment has been evaluated.

Data handling is backed by several credentials, and the training question is unanswered. SOC 2 Type II, HIPAA, PHIPA and GDPR compliance show that safeguards over health and personal data have been addressed, and data centers in three countries suggest a deliberate design. Nothing says whether medical records, case files, demand drafts or deposition transcripts submitted by firms are used to train or improve CaseAware, how long client content is kept, or whether a firm can require deletion when a matter closes.

GDPR implies rights for data subjects, but an injured claimant whose records sit in the platform is not a party to the customer relationship, which makes deletion harder to arrange. A credential about how data is protected says nothing about how it is used.

No published position located. Nothing was found on liability for AI output, warranty, service levels or remedy. The exposure is specific and asymmetric: an understated medical bill summation or a missed treatment event flows into a demand and can settle a claim below its value, and the person who bears that loss is the injured claimant, who is not a party to the contract between the firm and the vendor and has no visibility into how the number was produced.

The vendor's own answer to this risk is operational, being human verification on high value cases, rather than contractual, and no contractual position is public.

The integrations a plaintiff firm needs are named. Litify, MyCase and CasePeer are case management systems where plaintiff firms keep intake, treatment tracking, deadlines and the matter file. Westlaw Advantage is integrated for legal research through a strategic partnership with Thomson Reuters, giving generated documents an established citation source. Document management integration is stated in general terms. The vendor says the platform connects to a firm's case management, records and intake systems rather than replacing them.

Depth is not documented: nothing says what moves in which direction for any named system, no authentication or permission detail or API documentation is published, and nothing says whether finished work returns to the matter file automatically.

A substantive residency statement is published. The vendor names data centers in the United States, the United Kingdom and Canada and pairs them with the matching health privacy regimes: HIPAA for the US, PHIPA for Canada, and GDPR. That suggests residency was designed around regulation, and it answers the first question a firm's compliance review asks about a vendor holding claimant medical records. The detail stops at the country list.

No hosting provider is named, nothing says whether a customer can choose or is guaranteed a region, no single tenant or dedicated option is described, and nothing says whether processing, backup and model inference all happen in the same country as storage.

Four regimes are named, none is evidenced, and there is no route to the underlying documents. The vendor states SOC 2 Type II certification and HIPAA, PHIPA and GDPR compliance, a set that matches its data center locations. No auditing firm is named, and no examination period, scope or certificate date is published, so currency cannot be established. No trust center, security page or self serve route to request documents is published, and nothing suggests a gated one exists.

Nothing located. CaseAware AI is named and presented as the vendor's own technology, which is an ownership statement rather than a supply chain disclosure. No foundation model provider is named, nothing states whether third party models sit underneath CaseAware or process any part of the pipeline, and no subprocessor list is published. The Thomson Reuters and Westlaw Advantage integration establishes at least one external data relationship, and the stated three country data center footprint implies infrastructure providers, and none of those parties is identified.

For a platform processing protected health information across three regulatory regimes, the identity of every processor is a question a customer's HIPAA and PHIPA diligence asks directly and it cannot be answered from public material.

No pricing published at any level. No price, no range, no unit of charge, and no indication of whether the model is per case, per seat, per page of records processed or per demand produced, which matters because those scale very differently for a plaintiff firm and determine whether the cost is a case expense or firm overhead. Independent review notes the product is sold entirely behind a demo with no published pricing.

Every route is a sales conversation. The absence carries the same additional weight noted on EvenUp: contingency fee firms advance case costs and recover them from a claimant's settlement, so undisclosed per case pricing is undisclosed cost to an injured person.

The scope is deliberately narrow and stated honestly, with real depth inside it. The vendor says the platform is built only for plaintiff law and is of no use outside it, and independent review agrees. Within that scope it covers the whole case lifecycle: intake, medical chronologies, demand letters, case economics ledgers, litigation drafting, deposition analysis and firm analytics. Mass tort is named alongside personal injury, a different workload of thousands of claimants against common defendants.

Coverage is not described at the level a buyer would check. Nothing says which record types, providers or formats ingestion handles, what jurisdictions the litigation drafting covers, or how deep the mass tort support is compared with single plaintiff work.