IXSOR Vendor Profiles.
Profiles of legal AI tools, built from each vendor's own primary documentation: trust center, data processing addendum, help docs, whitepapers. Each carries an IXSOR vendor-tier rating that reflects the vendor's publicly-committed data-handling posture, not its marketing.
The library. #
-
Harvey AI enterprise
Harvey AI Inc.Domain-specific AI platform for legal and professional services.
-
Vincent AI (vLex / Clio) enterprise · legal
vLex (now part of Clio) / ClioLegal AI assistant grounded in vLex's 1B+ document global legal database.
-
Lexis+ with Protégé (formerly Lexis+ AI) enterprise · legal
LexisNexis (a RELX company) / RELXLexisNexis's integrated AI assistant grounded in primary law and Shepard's citations.
-
Westlaw Advantage (Thomson Reuters) enterprise · legal
Thomson Reuters / Thomson Reuters CorporationThomson Reuters's agentic AI legal-research platform.
-
Midpage.ai professional
Midpage Inc.Independent legal AI focused on grounded research and document workflows.
The IXSOR vendor tiers. #
- Consumer: ChatGPT free/Plus, Claude free, Gemini consumer tier. Should not be used with client matter materials. The post-Heppner v. United States privilege analysis treats consumer-tier disclosure as third-party communication.
- Professional: Tools with structured terms but consumer-grade defaults. Useful for non-confidential work; requires explicit data-handling commitments in writing before use with matter materials.
- Enterprise: SOC 2 Type II, ISO 27001, contractually-committed no-training-on-customer-data, named auditor attestation chain. Suitable for matter-data use after firm-level vendor diligence.
- Enterprise · fit for legal: Enterprise tier plus citation-grounded retrieval and legal-corpus integration. The post-Mata verification duty is structurally easier to satisfy when the underlying corpus is named and bounded.
How to read these profiles. #
Each profile reports what the vendor publicly commits to in writing, not what the vendor markets. Where the vendor has not published a specific commitment (training-data policy, retention windows, BAA availability), the profile says so. The diligence is in the absence as much as the presence: a vendor that does not publish its training-data commitment is not the same as a vendor that does.
The IXSOR tier rating is editorial, not a certification. It reflects how the publicly-committed posture maps to the IXSOR governance framework documented in AI vendor diligence: contract clauses to redline.
Vendor profiles are compiled from publicly-available primary documents at the date of the profile. Vendor terms change frequently; the firm should verify current terms with the vendor before relying on any summary. Not legal advice. Dan Hughes is not an attorney; IXSOR does not provide legal services.