T

Tavrn

Models have been at the center since founding, and the retrieval layer shows it most clearly. AI voice agents contact medical providers the same day a request is placed and keep calling until records arrive, across thousands of providers in all fifty states. That is a model acting in the world on the firm's behalf rather than analyzing documents it was handed, and it is the part of the product a firm cannot replicate without the models.

Downstream, page classification and indexing sort document types, chronologies are generated, intake scoring extracts facts and classifies injury severity, and demand letters are generated from the structured output of the pipeline. Remove the models and what remains is a fax inbox.

Grounding is at page level, reinforced by owning the pipeline, and unmeasured. Chronology entries link back to the specific source page, output is stated to link directly to its source, and every page carries a Bates number. The vendor argues that because one platform retrieved the records, classified the pages and built the timeline, the structured data carries into the demand without manual rekeying. That avoids a model drafting from unstructured files and misstating what the records show.

Nothing is quantified: no extraction accuracy, page classification error rate, recall on treatment events, measure of whether retrieval obtained the complete file, or evaluation of any kind.

Visibility is documented and boundaries are not. For retrieval, the vendor publishes complete oversight to create and track requests, real time status tracking on every request, all fax and email inbounds in one place, and real time editing control over generated demand letters. A firm can see what the system is doing at any moment, but not what it may do unattended. The voice agents call providers and persist until records arrive, acting on a firm's behalf toward third parties that hold a claimant's health information.

Nothing published says what an agent may say, whether it identifies itself as automated, what happens when a provider disputes a request, or where a person must step in. Tracking an action after the fact does not bound it.

Operational figures are specific and no customer can be identified. Published figures include 50 to 70 percent reductions in record review time, average retrieval turnaround cut by 12 days and chronologies delivered in under 24 hours. No law firm is named anywhere in located material. The one return on investment claim, a reported 6x return on platform cost within a single quarter, carries the note that the testimonial is on file, so the vendor states the evidence exists and does not show it.

A business associate agreement is offered for HIPAA workflows, and privilege itself is not addressed. A BAA is the contract HIPAA requires between a covered entity and a business associate handling protected health information, so offering one goes beyond stating HIPAA compliance: it is a document a firm can execute. The vendor also claims a SOC 2 Type II attestation and publishes its encryption standards. Nothing treats attorney client privilege or work product, or the confidentiality of the demand strategy and case valuation the platform generates.

No position is published on two features that raise the question. The platform scores incoming cases on a numeric scale with configurable thresholds, a machine assessment feeding the decision whether to accept a client, and nothing addresses the attorney's role in it. Generated demand letters go out under the firm's name to adverse insurers. No statement says output is not legal advice, and nothing addresses the supervising attorney's duty.

Nothing is published on how the models are governed, evaluated or monitored. There is no AI policy, model card, bias or fairness testing, evaluation method, accuracy monitoring, drift statement, named governance body or ISO 42001. Intake scoring shows why this matters: it assigns a numeric case score with configurable thresholds from extracted facts and injury severity, so a model helps decide which injured people a firm takes on.

Any systematic tendency in that scoring falls on prospective claimants who are never told a score existed, and nothing published shows it has been examined.

Protection is specified precisely, and use of the data is not addressed. The vendor publishes AES 256 bit encryption for stored data, TLS 1.2 for network traffic in transit and a secure upload portal. Training use, retention and deletion of the records it holds are not covered by any published statement. The vendor retrieves records itself, directly from providers, so it is the original recipient of claimant health information rather than a processor of files a firm already had.

No position is published beyond the BAA, which allocates HIPAA obligations rather than product liability. Nothing was found on liability for AI output, warranty, service levels or remedy. The retrieval layer's failure mode is an incomplete file rather than a wrong sentence: a chronology built on records never obtained will look complete and consistent while omitting a whole course of treatment. Nothing published addresses what happens when retrieval misses a provider, and no service level commitment is published for a platform sold on turnaround time. The retrieval and products pages held nothing further.

Four case management systems are named, among them Filevine, Litify and Smokeball, and the Smokeball link is confirmed by a listing in Smokeball's own partner marketplace. API access is offered for systems without a native connector. Records are delivered organized, named and tagged directly into the case file. No API documentation is published, nothing says what moves in which direction with any named system, and no authentication, permission or field mapping detail is published.

No hosting provider, region, residency commitment or dedicated instance option is published. Security material refers in passing to a broader cloud environment without naming it. The platform retrieves claimant medical records from providers nationwide and holds them, and the BAA governs obligations, not where that data sits or how it is separated. Security material and navigation showed nothing more on 29 August 2026.

A SOC 2 Type II attestation is claimed, and the vendor's own wording is inconsistent. One set of material states the Type II attestation; other material describes the same posture as a security program aligned with SOC 2 criteria and HIPAA compliance standards. Alignment with criteria is a self assessment, while a Type II attestation is an independent examination over a period, so the two statements describe different things.

No auditing firm, examination period or date is published, and no trust center or route to request documentation is published.

No foundation model provider, model family or version is named, no subprocessor list was found, and nothing says whether outside models sit under any component. The product runs several distinct kinds of model work: voice agents making telephone calls to providers, page classification, chronology generation, intake scoring and drafting. No speech provider is identified for the voice agents. Under a BAA, every subprocessor touching protected health information is a party the covered entity is entitled to know about, and none can be identified from public material.

No price is published at any level. A free trial lets a firm evaluate the product without a sales conversation, but a trial shows the product, not the price. No figure, range, tier structure or unit of charge is published, and nothing says whether pricing runs per record page, per request or per seat, which for a retrieval product are very different economics. Independent material describes the target as contingency fee practices that need predictable costs. In contingency work, an undisclosed cost per case is an undisclosed cost to an injured claimant.

Practice coverage is wide and operational reach is stated in numbers, though the reach is asserted rather than characterized. Five practice areas are named, from personal injury and medical malpractice to SSDI, so disability and compensation work with different record profiles is included. Retrieval covers thousands of providers nationwide across all fifty states, at roughly 1,000 requests a day, through fax, email and portal channels.

Independent material puts the target firm size at roughly 10 to 75 professionals. No provider network is listed or described, no retrieval success rate is published, and nothing shows whether coverage is even across states.