X

Xakia

Xakia sells AI as an add on for its Advance and Professional plans, includes it with usage caps in Enterprise and includes it without caps in All In. Customers on the lower plans can run the product without AI. The core is matter and task management, intake and triage, contracts, spend and budgets, documents, entities and reporting, all workflow and record keeping with no model behind them. The AI features are contract review and redlining in Word against the customer's playbook, contract summaries and key terms extraction.

Smart Search turns a plain English request into a query the user can edit and save. Xakia's AI page also describes invoice review against billing guidelines, which the plan comparison lists as coming soon. An MCP server with connectors to Claude and Copilot is listed as coming soon for All In. The AI page makes every AI feature opt in, and the FAQ describes AI as a set of features Xakia is still expanding.

Xakia's AI points back to the customer's own documents. Key terms extraction returns each term with a confidence score, the clause it came from and the exact text it relied on. A user reviews each value, corrects it and clicks Apply before anything reaches the contract repository. Contract review marks up a third party contract in Word against the customer's chosen playbook, governing law, market practice and basic drafting standards, at a Pragmatic, Balanced or Strict setting.

It flags each deviation with a suggested redline for the lawyer to review. Smart Search shows the query it built from a plain English request, which the user can edit and save. The AI addendum says output may not be accurate or up to date and must be reviewed by a lawyer. The FAQ commits to expanding AI without compromising accuracy, and Xakia gives no accuracy figure, error rate or test results.

People make every key decision in Xakia. Legal teams route and tag intake requests, set up matters from templates and assign tasks, and the Enterprise plan adds intake workflows and contract approval and signing workflows that the legal team configures. The AI features work on documents a user has open, offering redlines, summaries and extracted terms rather than acting on their own. The AI addendum requires a lawyer's review of output and bars automated decisions with legal or similarly significant effects on individuals without human review.

Xakia describes no agent that acts unattended, no threshold at which the AI stops or hands work to a person, and no remedy when an output is wrong.

Xakia names its customers and the people it quotes. Case studies cover Coca-Cola Europacific Partners, Medibank, Škoda Auto, Cancer Council Queensland, Healthscope, Axiom Medical, Movember, Syneos Health and JERA. At Coca-Cola Europacific Partners, the Australian legal team replaced paper forms compiled monthly into a spreadsheet, whose reports could run up to two months behind, with reporting that is current on any day.

Medibank's legal department of about 25 people deployed Xakia with NetDocuments in a matter of weeks, according to senior legal counsel Kerryn Saric. Testimonials name the general counsel of BlueScope Buildings and Kiwi Property and staff at Tabcorp and the City of Murfreesboro. Chief legal officer Chuck Kable says Xakia has saved him hundreds of hours. The case studies carry no publication date, and none attaches a measured figure to an AI feature.

Xakia controls access with role based permissions at user, team or matter level, sensitive matters can be restricted to named individuals, and outside counsel see only what the customer shares through Xakia Connect. Single sign on runs through the customer's identity provider. The AI addendum bars Xakia and its third party AI tools from training any model on inputs or outputs, processes inputs transiently and keeps no inputs or outputs once output is delivered.

It also lets Xakia train its AI features on anonymized data and statistics derived from inputs. Data and uploaded documents are encrypted in use, in transit and at rest, under ISO 27001:2022 and SOC 2 Type 2 certification. The terms and the addendum treat customer data as confidential without separate treatment of privilege or work product.

Section 5.3 of Xakia's AI addendum, effective 1 February 2026, states that AI output is general information and does not constitute legal advice. The AI features are not a substitute for legal or professional skill, judgment and experience. They must be used only by or under the direct supervision of legal practitioners in line with applicable professional conduct rules. Users must validate or ignore notifications using their own professional judgment, because output may not be accurate or up to date.

Section 5.4 requires a lawyer to review output as appropriate for the use case. Section 3.2(a) bars automated decisions with legal or similarly significant effects on individuals without proper human review in line with professional ethics rules. The buyer is an in house legal team. No specific bar guidance is named.

Xakia's AI controls sit in the features and the contract rather than in a governance framework. Its AI page makes every feature opt in, so the customer decides what its team uses and when, and gives each feature a human checkpoint so nothing is applied without a user's sign off. The AI addendum bars automated decisions with legal or similarly significant effects on individuals without proper human review, and bars uses that are discriminatory or bias inducing.

It also requires a lawyer to review output. The FAQ says Xakia expands its AI with a focus on saving time without compromising accuracy or security. Xakia sets out no AI principles, owner of AI governance, testing before release or bias findings, holds no ISO/IEC 42001 certification, and its security page covers information security.

Xakia publishes the terms that govern data handling. Its Terms of Service keep subscriber data for 30 days after termination, during which the subscriber can request a copy, and then delete it permanently. The AI addendum says inputs are processed transiently and that Xakia keeps no inputs or outputs once the output is delivered. The data processing addendum commits Xakia to notify the subscriber of a security breach involving its personal data without undue delay, with the information needed for its own reporting duties.

The trust center lists subprocessors in effect since 1 April 2024, including Microsoft for hosting, HubSpot, Intercom, Stripe, Twilio and Xero, each with its country and purpose, and keeps earlier lists. Data and uploaded documents are encrypted in use, in transit and at rest, data and access logs are backed up, and role based permissions reach down to matter level with single sign on. Annual third party penetration tests and continuous vulnerability scanning support the ISO 27001:2022 and SOC 2 Type 2 certifications.

Xakia publishes the Terms of Service for its platform, effective 1 October 2025, and section 5.5 of its AI addendum applies their warranty disclaimers and liability limits to the AI features. Each party's liability is capped at the amounts paid or payable in the 12 months before the first incident. Xakia's liability for breaching its data security or confidentiality obligations, or any data processing addendum, rises to three times that cap.

Indirect, consequential and lost profit damages are excluded. Xakia defends the subscriber and its users against third party claims that the platform, used as authorized, infringes intellectual property. Trials and betas carry no warranty or indemnity, and Xakia's liability for them is capped at $1,000. The AI addendum says output may not be accurate or up to date and must be reviewed by a lawyer, and Xakia gives no indemnity specific to AI output.

Xakia's pricing page lists its integrations by plan. Every plan includes Outlook, Word, SharePoint, Gmail and Microsoft Teams integrations, API access, and single sign on through Entra, Okta, SCIM or ADFS. Professional and above add iManage and NetDocuments integrations and connections to Brightflag, DocuSign, Ironclad and Josef. Slack and Salesforce appear on the higher plans, with Salesforce at extra cost. Xakia offers to keep documents in the customer's own SharePoint rather than migrating them, and the API carries no charge.

The pages name each connection without saying what data moves in which direction or what an administrator configures. An MCP server with connectors to Claude and Copilot is listed as coming soon for All In.

Xakia runs on Microsoft Azure, and customers choose where data is stored in Australia, Canada, the Netherlands, the United Kingdom or the United States, with a Middle East location listed as coming soon. Different users in one account can have different data locations. European and UK customers can keep data on Azure servers in the United Kingdom or the Netherlands, and the Terms of Service, effective 1 October 2025, are built around the data location the subscriber selects.

Section 1.4 of the AI addendum says AI processing runs where the third party AI tools are available and may differ from the selected location, with the processing location shown in the subscriber's account. Separate privacy policies cover Australia, the United States, Europe and Canada. Whether customers share infrastructure is not stated.

Xakia states certification to ISO/IEC 27001:2022, SOC 2 Type 2 and HIPAA compliance on its security page, FAQ and pricing page, with regular independent audits of its applications, systems and networks. Its trust center shows compliance monitoring and controls and offers the ISO 27001:2022 certificate, a penetration test attestation and the SOC 2 Type 2 report on request. The data processing agreement and current and past subprocessor lists sit beside them.

Third party experts test the application and infrastructure once a year, and third party tools scan the platform for vulnerabilities continuously. The platform is hosted on Microsoft Azure in Tier III facilities certified to ISO 27001:2022, SOC 2, PCI DSS, HIPAA and FedRAMP, with Australia's IRAP and the UK's G Cloud among the regional standards. The open pages name no auditing firm, audit period or report date.

Xakia's AI addendum refers to third party AI tools, defined as the third party language models and AI technology behind its AI features, without naming any of them. It says Xakia does not control their operation or continued availability, and that their processing location may differ from the subscriber's data location and is shown in the subscriber's account. Section 6 says any flow down terms the providers require are displayed at trust.xakiatech.com, and section 8.3 gives at least thirty days' notice of changes to the addendum.

The subprocessor list in Xakia's trust center names Microsoft and business systems such as HubSpot and Stripe but no AI model provider. Neither the third party AI tools nor Xakia may train models on customer inputs or outputs.

Xakia's pricing page lists four plans priced per user per month, with Advance at $100, Professional at $125, Enterprise at $155 and All In at $230. A currency selector shows prices in Australian dollars, United States dollars, euros or pounds. Plans run month to month with no lock in, and annual billing takes up to 10 percent off. AI access adds $50 per user a month on Advance and $30 on Professional, priced in United States dollars with usage caps, and is included with caps on Enterprise and without caps on All In.

Onboarding is a separate one off fee, with light and full options covering data migration, best practice guidance and training, and its amount is quoted rather than shown. A free 14 day trial needs no payment card. Internal requesters, outside counsel on the Connect portal and invoice volume carry no charge, and Xakia takes no percentage of invoice value, which it calls a clip of the ticket. A stakeholder license gives non legal users access to contracts and entity management at a flat annual rate.

Xakia targets in house legal teams of roughly 2 to 200 people, a range it repeats on its pricing page. The platform can be configured in English, Japanese, Spanish, French, Danish, Dutch and Brazilian Portuguese, and the spend module supports all currencies. Xakia has offices in Melbourne, Kansas City and London and says it has many hundreds of clients worldwide. Scope is stated by module, covering matters, intake, contracts, spend, documents, entities, disputes and reporting, with a stakeholder license for non legal users.

Customers store data in Australia, Canada, the Netherlands, the United Kingdom or the United States and can set different data locations for different users. Industry segments and practice areas are not described.