T

Theo Ai

The AI is the product, with nothing underneath it to sell. Every published function is model output: building a picture of the caseload from documents collected automatically, extracting structure from emails and invoices, finding patterns across a portfolio, projecting costs, flagging underreserved matters, summarizing each case with attribution to sources, and recommending which claims to settle or fight. There is no repository, workflow engine, billing system or document store that a customer would still license without the models.

The vendor calls it a prediction engine, and its earliest description was of a proprietary data model and prediction engine. Announcements from 2024 and 2025 describe using funding to expand proprietary data pipelines, improve its legal data and reinforce supervised learning with legal experts. This says nothing about how well the models work or how much is disclosed about them.

Grounding is claimed and nothing is measured on any vendor page. The only grounding claim is one sentence: every case is summarized with clear attribution to source material. That is a real claim about how the product works, not a bare assertion that it does not hallucinate, but nothing supports it further. No accuracy figure, test set, error rate, evaluation or benchmark appears on any vendor page, and no failure mode is named.

The chief executive is quoted in a December 2025 interview with a technology publication claiming roughly 85 percent predictive accuracy against 60 to 65 percent for human reviewers. That appears in a third party publication, not a vendor disclosure, and names no test set or method. The product predicts outcomes rather than citing law, so citator and authority checks do not apply.

No oversight structure is published for a system that acts on live client matters. What the product does is clear: it recommends which claims to settle or fight, automatically and in real time, flags underreserved matters, and in the vendor's words manages the minutiae. Nothing describes what surrounds those decisions: no modes, confidence threshold, escalation path or review surface, no statement that a lawyer approves output before it is relied on, and nothing on what the system does when evidence is thin.

The Terms of Service cover the website and never mention output, and the Privacy Policy excludes information processed for enterprise customers. The nearest statement is marketing copy saying the platform lets a team review the portfolio and decide with confidence, freeing attorneys and paralegals for higher level work. That makes a human the reader of the output, not an oversight mechanism. This reflects what is published, not a finding that the product has no oversight.

An advisory board and investor list stand in for deployment evidence, and the published outcome figures have no basis. The site's main social proof is a General Counsel Board of sixteen named senior legal figures, one identified as General Counsel of SmartBiz Bank, alongside investor logos. Advisers and investors are not customers. No customer is named on the current site, and there is no case study or user logo wall.

One named partnership exists: in March 2025 the vendor announced a partnership with Mustang Litigation Funding, quoting its chief technology officer. That account looks forward, projecting that a one percent annual improvement in case selection would raise returns. The circulating figures are unattributed or from third parties: an early claim that review time falls from seven to thirty days to seconds, an assertion that early users found the platform confirmed their underwriting teams' conclusions, and the 85 percent accuracy claim made in an interview. None states a basis.

Client confidences have no stated handling in a product built to take them in. The Terms of Service, last updated August 2025, govern use of the website at theoai.ai and contain no confidentiality duty to a customer, security commitment, data handling terms or reference to case material. The Privacy Policy, last updated 6 April 2025, begins by excluding information processed for enterprise customers as a processor or service provider, which it says is governed by customer agreements.

Those agreements are not published. A buyer can therefore read nothing before signing about training on client data, separation between customers or matters, retention or deletion of case files, or what a model provider may keep. That matters because the product pulls litigation files automatically from a customer's own Microsoft, Google, Workday and Salesforce systems. Single sign on at the sign in page is an access method, not a confidentiality commitment.

A product that produces legal work draws no advice line at all. The product tells a legal team what a case is likely worth and recommends whether to settle or fight. Nothing says the vendor is not a law firm, that its output is not legal advice, that a lawyer must use independent judgment before relying on it, or that a recommendation is a suggestion rather than a conclusion. The Terms of Service disclaim warranties for the website and its content and say nothing about advice or the practice of law, and the Privacy Policy does not reach the product.

Nothing addresses who may use the platform, whether a supervising lawyer's competence duties apply when a settlement recommendation is acted on, or any jurisdictional limit. The site is marketed to litigators, paralegals and legal operations staff alike. A customer agreement, if published, may say more.

No governance position is published for a system whose output affects legal outcomes. There is no responsible AI page, set of principles, framework such as the NIST AI Risk Management Framework, certification, named accountable person, description of what is evaluated before a model change, or statement on testing. Neither published document addresses AI: the Terms of Service cover website use, and the Privacy Policy excludes processing for enterprise customers.

Bias is a live question here. A model that predicts settlement values and outcomes from historical litigation data learns from a record shaped by who was represented by whom, in which venue, against which opponent, and what each party could afford to accept. Nothing says whether output varies by claimant characteristics, venue, counsel or claim type, or whether anyone has checked. The vendor's description of reinforcing supervised learning with legal experts describes training, not governance.

Retention, deletion and access go unaddressed for a system that holds client documents, and this is a confirmed absence. The Privacy Policy has a retention section, but the policy says at the start that it does not apply to information processed for enterprise customers. Its retention language, which says only that personal information is kept as long as needed or permitted, therefore covers website visitors, not case files.

Its security section is one sentence about reasonable organizational, technical and administrative measures, with no encryption commitment, access control description or incident practice. There is no subprocessor list, security page, trust center, data processing addendum or hosting statement, and deletion of customer material is not addressed. The sign in page offers single sign on as well as passwords, which is an authentication method, not a stewardship commitment.

The Terms grant a perpetual, irrevocable, sublicensable license over user Submissions, which by its wording covers material posted through the website rather than case documents uploaded to the application.

Liability is addressed only through a standard limitation clause that disclaims the exposure the product creates. The sign in page says that signing in means agreeing to the Terms of Service, which are website terms of use, so their liability terms bind users. Section 14 supplies the site and its contents as is, where is and where available, without warranties, disclaiming merchantability, fitness for purpose, noninfringement and title.

Section 16 excludes indirect, incidental, consequential, special, exemplary and punitive damages, including lost profits, use and data. It makes stopping use the user's only remedy and caps total liability at whatever the user paid to use the site. Section 17 has the user indemnify the company for claims arising from their use. Nothing allocates the loss when a settlement recommendation or exposure figure is wrong, no indemnity covers output, and no insurance or warranty position is published.

Integrations are named in one sentence, with no documentation an implementer could use. The vendor says the platform gathers data automatically from the tools a team uses daily, naming Microsoft, Google, Workday and Salesforce, and that the emails and invoices in them become a source of intelligence. That describes, at a high level, what moves. Nothing below that level is published: no integration page, connector list, developer documentation or API, no authentication or configuration requirements, and no direction of flow.

Nothing says what is read versus written back or what a customer must do to connect a system. The application sign in page supports single sign on alongside passwords, without naming the identity provider. Technology press, not the vendor, reports that the product is designed to work inside email rather than through a dashboard.

Where the software runs and where client data sits are both unstated. No hosting arrangement, cloud provider, region, data center, tenancy model or residency option is stated. The Terms of Service mention jurisdiction only as governing law and availability. They say the site is controlled or operated from the United States, is not meant to subject the company to other jurisdictions, may not be available everywhere, and may be limited by person, area or jurisdiction.

That concerns who may use the website, not where customer data is processed or stored. The Privacy Policy, the usual place for a processing location statement, excludes enterprise customer information. The product runs as a hosted web application on an app subdomain, which shows it is delivered from the cloud and nothing more.

No independent security attestation is published. There is no trust center, security or compliance page, or certification badge, and no reference to SOC 2, ISO 27001 or any equivalent, whether held, in progress or available on request. No penetration testing, vulnerability disclosure program or audit regime is described, and there is no contact route for a security review, so there is nothing to request. The only security statement is one sentence in the Privacy Policy about reasonable organizational, technical and administrative measures, with the usual note that no system is guaranteed secure, and that policy excludes information processed for enterprise customers. This looks like an early stage company rather than an evasive one, but a buyer can verify nothing before signing.

The vendor refers to proprietary models without identifying what sits underneath. Its language is consistent across the site and announcements: a proprietary data model and prediction engine, proprietary data pipelines, improved legal data, supervised learning reinforced with legal experts, and prediction engines built on a customer's own case history. Each describes an approach, not a component. No model, version or third party provider is named, no hosting for inference is stated, no subprocessor list exists, and there is no commitment to tell customers of changes.

Technology press reporting in late 2025, not the vendor, says the platform draws on large language models from OpenAI, Google and Anthropic and is built mainly on Google's Gemini, fine tuned for legal tasks. A customer cannot tell from the vendor what models receive its case files, which by the vendor's own account include medical and insurance records.

No pricing is published at any level, including the unit of charge. There is no pricing page, plan or tier name, band, minimum or term, nothing on whether the product is licensed per user, matter, portfolio or prediction, and nothing on what implementation or data onboarding adds. The only commercial routes are a waitlist form and a calendar link to book a demonstration. The Terms of Service contain generic sales boilerplate about products, orders, shipping and credit cards that appears to be unadapted template text rather than a description of how this product is sold. Onboarding is by invitation only, so the commercial route is both unpriced and gated.

Coverage is described with real substance, and its boundaries are left open. The buyer is identified precisely: litigation defense teams in corporate legal departments, with one solution page for the general counsel and one for product liability, and named user roles of attorney, paralegal and legal operations. Sectors are listed: retail, insurance, chemicals, hospitality and gaming including hotels, resorts, casinos and cruise ships, and pharmaceuticals and medical devices, described as sectors where litigation volume never slows.

Matter coverage is the most specific part. A published table sets out six categories the product is built for, each with indicative annual matter counts and page volumes: general liability claims, workers' compensation and employee claims, employment disputes, regulatory and compliance matters, customer and vendor disputes, and internal investigations. No jurisdiction is named, and nothing says which matter types or claim values fall outside the model's competence.

The shift in audience from litigation funders to plaintiff case selection to corporate defense is not reconciled on the current site.