Legal AI vendor directory

Every score links to the vendor’s own public page. “Not disclosed” means we found no public statement, never that the vendor fails.

No overall ranking: vendors are listed by the criteria they disclose, never by a combined score.

How to read the scores

0/3weakest
1/3
2/3
3/3strongest
not disclosedNo public statement found. A question to ask, not a failure.
Editorial judgment call, with a stated rationale (hover or focus the icon).

CASUS

Switzerland

Compare

Legal AI assistant for law firms

Data in Switzerland
Auxiliary clause
No training

Storage: Storage : 3/3 – Switzerland only, or customer on-premises
AI processing: AI processing : 2/3 – Switzerland plus EU/EEA
Cloud Act: Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models
Secrecy (Art. 321): Secrecy (Art. 321) : 3/3 – Contractual auxiliary-person (Hilfsperson) status or external legal opinion
revFADP DPA: revFADP DPA : 3/3 – Public DPA that names the revFADP
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 1/3 – Infrastructure-only or planned

7/7 criteria disclosed

Checked 17 Oct 2026View profile

Clio (Duo / Work)

Canada

Compare

Law practice management software with an AI workspace

ISO / SOC 2

Storage: Storage : 2/3 – EU/EEA, or selectable region including Switzerland
AI processing: AI processing : 1/3 – Can leave the region, or relies on US LLM APIs
Cloud Act: Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: revFADP DPA : 2/3 – GDPR DPA or US framework certification only
Training: Training : 2/3 – Allows de-identified/usage-based improvement
Certifications: Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II

7/7 criteria disclosed

Checked 17 Oct 2026View profile

CoCounsel (Thomson Reuters)

Canada/US

Compare

AI assistant for research and drafting, grounded in Westlaw and Practical Law

No training
ISO / SOC 2

Storage: Storage : 0/3 – US/Canada only, no EU/CH option
AI processing: AI processing : 0/3 – Processed in the US
Cloud Act: Cloud Act : 0/3 – US-domiciled vendor or US-only processing
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: revFADP DPA : 2/3 – GDPR DPA or US framework certification only
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II

7/7 criteria disclosed

Checked 17 Oct 2026View profile

DeepJudge

Switzerland

Compare

AI search and workflows across a firm's own documents

Data in Switzerland
No training
ISO / SOC 2

Storage: Storage : 3/3 – Switzerland only, or customer on-premises
AI processing: AI processing : 2/3 – Switzerland plus EU/EEA
Cloud Act: Cloud Act : 2/3 – Swiss storage, but US-parent compute or optional exposure
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: revFADP DPA : 3/3 – Public DPA that names the revFADP
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II

7/7 criteria disclosed

Checked 17 Oct 2026View profile

Harvey

United States

Compare

AI platform for legal and professional services

No training
ISO / SOC 2

Storage: Storage : 2/3 – EU/EEA, or selectable region including Switzerland
AI processing: AI processing : 2/3 – Switzerland plus EU/EEA
Cloud Act: Cloud Act : 0/3 – US-domiciled vendor or US-only processing
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: revFADP DPA : 2/3 – GDPR DPA or US framework certification only
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II

7/7 criteria disclosed

Checked 17 Oct 2026View profile

Jurata

Switzerland

Compare

Legal AI agent for lawyers

Data in Switzerland
Auxiliary clause
No training

Storage: Storage : 3/3 – Switzerland only, or customer on-premises
AI processing: AI processing : 2/3 – Switzerland plus EU/EEA
Cloud Act: Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models
Secrecy (Art. 321): Secrecy (Art. 321) : 3/3 – Contractual auxiliary-person (Hilfsperson) status or external legal opinion
revFADP DPA: revFADP DPA : 2/3 – GDPR DPA or US framework certification only
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 1/3 – Infrastructure-only or planned

7/7 criteria disclosed

Checked 17 Oct 2026View profile

Ketl

Switzerland

Compare

AI document management system for law firms and fiduciaries

Data in Switzerland
AI in Switzerland

Storage: Storage : 3/3 – Switzerland only, or customer on-premises
AI processing: AI processing : 3/3 – Switzerland only, own or non-US models
Cloud Act: Cloud Act : 3/3 – Non-US vendor, non-US infrastructure and models
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: not disclosedrevFADP DPA : not disclosed
Training: not disclosedTraining : not disclosed
Certifications: Certifications : 1/3 – Infrastructure-only or planned

5/7 criteria disclosed

Checked 17 Oct 2026View profile

Legora (incl. former Leya)

Sweden

Compare

AI platform for lawyers

No training
ISO / SOC 2

Storage: Storage : 2/3 – EU/EEA, or selectable region including Switzerland
AI processing: AI processing : 2/3 – Switzerland plus EU/EEA
Cloud Act: Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: revFADP DPA : 2/3 – GDPR DPA or US framework certification only
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II

7/7 criteria disclosed

Checked 17 Oct 2026View profile

Lexis+ AI / Protégé

UK/US (RELX)

Compare

AI legal research and drafting on LexisNexis content

No training
ISO / SOC 2

Storage: Storage : 2/3 – EU/EEA, or selectable region including Switzerland
AI processing: AI processing : 1/3 – Can leave the region, or relies on US LLM APIs
Cloud Act: Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: revFADP DPA : 3/3 – Public DPA that names the revFADP
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II

7/7 criteria disclosed

Checked 17 Oct 2026View profile

Luminance

United Kingdom

Compare

Legal AI for contract review

ISO / SOC 2

Storage: Storage : 2/3 – EU/EEA, or selectable region including Switzerland
AI processing: AI processing : 2/3 – Switzerland plus EU/EEA
Cloud Act: Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: revFADP DPA : 2/3 – GDPR DPA or US framework certification only
Training: Training : 2/3 – Allows de-identified/usage-based improvement
Certifications: Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II

7/7 criteria disclosed

Checked 17 Oct 2026View profile

Microsoft 365 Copilot

United States

Compare

General-purpose AI assistant inside Microsoft 365

No training
ISO / SOC 2

Storage: Storage : 2/3 – EU/EEA, or selectable region including Switzerland
AI processing: AI processing : 1/3 – Can leave the region, or relies on US LLM APIs
Cloud Act: Cloud Act : 0/3 – US-domiciled vendor or US-only processing
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: revFADP DPA : 3/3 – Public DPA that names the revFADP
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II

7/7 criteria disclosed

Checked 17 Oct 2026View profile

Omnilex

Switzerland

Compare

AI legal research and contract review

Data in Switzerland
Auxiliary clause
No training
ISO / SOC 2

Storage: Storage : 3/3 – Switzerland only, or customer on-premises
AI processing: AI processing : 2/3 – Switzerland plus EU/EEA
Cloud Act: Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models
Secrecy (Art. 321): Secrecy (Art. 321) : 3/3 – Contractual auxiliary-person (Hilfsperson) status or external legal opinion
revFADP DPA: revFADP DPA : 2/3 – GDPR DPA or US framework certification only
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II

7/7 criteria disclosed

Checked 17 Oct 2026View profile

RechtsKI

Switzerland

Compare

AI legal research on Swiss federal and cantonal law, with cited sources

Data in Switzerland
No training

Storage: Storage : 3/3 – Switzerland only, or customer on-premises
AI processing: AI processing : 2/3 – Switzerland plus EU/EEA
Cloud Act: Cloud Act : 2/3 – Swiss storage, but US-parent compute or optional exposure
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: revFADP DPA : 2/3 – GDPR DPA or US framework certification only
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 1/3 – Infrastructure-only or planned

7/7 criteria disclosed

Checked 17 Oct 2026View profile

Silex

Switzerland

Compare

AI legal research for Swiss lawyers

Data in Switzerland
AI in Switzerland
No training

Storage: Storage : 3/3 – Switzerland only, or customer on-premises
AI processing: AI processing : 3/3 – Switzerland only, own or non-US models
Cloud Act: Cloud Act : 2/3 – Swiss storage, but US-parent compute or optional exposure
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: revFADP DPA : 2/3 – GDPR DPA or US framework certification only
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 1/3 – Infrastructure-only or planned

7/7 criteria disclosed

Checked 17 Oct 2026View profile

Spellbook

Canada

Compare

AI contract drafting and review

No training
ISO / SOC 2

Storage: Storage : 0/3 – US/Canada only, no EU/CH option
AI processing: AI processing : 1/3 – Can leave the region, or relies on US LLM APIs
Cloud Act: Cloud Act : 0/3 – US-domiciled vendor or US-only processing
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: revFADP DPA : 2/3 – GDPR DPA or US framework certification only
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II

7/7 criteria disclosed

Checked 17 Oct 2026View profile

Swiss-Noxtua

Switzerland

Compare

Legal AI assistant for Swiss legal professionals

Data in Switzerland
Auxiliary clause
No training

Storage: Storage : 3/3 – Switzerland only, or customer on-premises
AI processing: AI processing : 2/3 – Switzerland plus EU/EEA
Cloud Act: Cloud Act : 3/3 – Non-US vendor, non-US infrastructure and models
Secrecy (Art. 321): Secrecy (Art. 321) : 3/3 – Contractual auxiliary-person (Hilfsperson) status or external legal opinion
revFADP DPA: revFADP DPA : 3/3 – Public DPA that names the revFADP
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: Certifications : 2/3 – Claimed or partner-level

7/7 criteria disclosed

Checked 17 Oct 2026View profile

Swisslex AI

Switzerland

Compare

Swiss legal database with built-in AI functions

Data in Switzerland
AI in Switzerland
No training

Storage: Storage : 3/3 – Switzerland only, or customer on-premises
AI processing: AI processing : 3/3 – Switzerland only, own or non-US models
Cloud Act: Cloud Act : 3/3 – Non-US vendor, non-US infrastructure and models
Secrecy (Art. 321): Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term
revFADP DPA: not disclosedrevFADP DPA : not disclosed
Training: Training : 3/3 – Contractual no-training, including model providers
Certifications: not disclosedCertifications : not disclosed

5/7 criteria disclosed

Checked 17 Oct 2026View profile

Weblaw Lawsearch AI

Switzerland

Compare

Legal research across Swiss sources, with an AI assistant

Data in Switzerland

Storage: Storage : 3/3 – Switzerland only, or customer on-premises
AI processing: AI processing : 2/3 – Switzerland plus EU/EEA
Cloud Act: Cloud Act : 2/3 – Swiss storage, but US-parent compute or optional exposure
Secrecy (Art. 321): not disclosedSecrecy (Art. 321) : not disclosed
revFADP DPA: not disclosedrevFADP DPA : not disclosed
Training: not disclosedTraining : not disclosed
Certifications: not disclosedCertifications : not disclosed

3/7 criteria disclosed

Checked 17 Oct 2026View profile

Vendor	Storage	AI processing	Cloud Act	Secrecy (Art. 321)	revFADP DPA	Training	Certifications	Disclosed	Compare
CASUSSwitzerland	Storage : 3/3 – Switzerland only, or customer on-premises	AI processing : 2/3 – Switzerland plus EU/EEA	Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models	Secrecy (Art. 321) : 3/3 – Contractual auxiliary-person (Hilfsperson) status or external legal opinion	revFADP DPA : 3/3 – Public DPA that names the revFADP	Training : 3/3 – Contractual no-training, including model providers	Certifications : 1/3 – Infrastructure-only or planned	7/7	Compare
Clio (Duo / Work)Canada	Storage : 2/3 – EU/EEA, or selectable region including Switzerland	AI processing : 1/3 – Can leave the region, or relies on US LLM APIs	Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	revFADP DPA : 2/3 – GDPR DPA or US framework certification only	Training : 2/3 – Allows de-identified/usage-based improvement	Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II	7/7	Compare
CoCounsel (Thomson Reuters)Canada/US	Storage : 0/3 – US/Canada only, no EU/CH option	AI processing : 0/3 – Processed in the US	Cloud Act : 0/3 – US-domiciled vendor or US-only processing	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	revFADP DPA : 2/3 – GDPR DPA or US framework certification only	Training : 3/3 – Contractual no-training, including model providers	Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II	7/7	Compare
DeepJudgeSwitzerland	Storage : 3/3 – Switzerland only, or customer on-premises	AI processing : 2/3 – Switzerland plus EU/EEA	Cloud Act : 2/3 – Swiss storage, but US-parent compute or optional exposure	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	revFADP DPA : 3/3 – Public DPA that names the revFADP	Training : 3/3 – Contractual no-training, including model providers	Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II	7/7	Compare
HarveyUnited States	Storage : 2/3 – EU/EEA, or selectable region including Switzerland	AI processing : 2/3 – Switzerland plus EU/EEA	Cloud Act : 0/3 – US-domiciled vendor or US-only processing	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	revFADP DPA : 2/3 – GDPR DPA or US framework certification only	Training : 3/3 – Contractual no-training, including model providers	Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II	7/7	Compare
JurataSwitzerland	Storage : 3/3 – Switzerland only, or customer on-premises	AI processing : 2/3 – Switzerland plus EU/EEA	Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models	Secrecy (Art. 321) : 3/3 – Contractual auxiliary-person (Hilfsperson) status or external legal opinion	revFADP DPA : 2/3 – GDPR DPA or US framework certification only	Training : 3/3 – Contractual no-training, including model providers	Certifications : 1/3 – Infrastructure-only or planned	7/7	Compare
KetlSwitzerland	Storage : 3/3 – Switzerland only, or customer on-premises	AI processing : 3/3 – Switzerland only, own or non-US models	Cloud Act : 3/3 – Non-US vendor, non-US infrastructure and models	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	not disclosedrevFADP DPA : not disclosed	not disclosedTraining : not disclosed	Certifications : 1/3 – Infrastructure-only or planned	5/7	Compare
Legora (incl. former Leya)Sweden	Storage : 2/3 – EU/EEA, or selectable region including Switzerland	AI processing : 2/3 – Switzerland plus EU/EEA	Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	revFADP DPA : 2/3 – GDPR DPA or US framework certification only	Training : 3/3 – Contractual no-training, including model providers	Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II	7/7	Compare
Lexis+ AI / ProtégéUK/US (RELX)	Storage : 2/3 – EU/EEA, or selectable region including Switzerland	AI processing : 1/3 – Can leave the region, or relies on US LLM APIs	Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	revFADP DPA : 3/3 – Public DPA that names the revFADP	Training : 3/3 – Contractual no-training, including model providers	Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II	7/7	Compare
LuminanceUnited Kingdom	Storage : 2/3 – EU/EEA, or selectable region including Switzerland	AI processing : 2/3 – Switzerland plus EU/EEA	Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	revFADP DPA : 2/3 – GDPR DPA or US framework certification only	Training : 2/3 – Allows de-identified/usage-based improvement	Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II	7/7	Compare
Microsoft 365 CopilotUnited States	Storage : 2/3 – EU/EEA, or selectable region including Switzerland	AI processing : 1/3 – Can leave the region, or relies on US LLM APIs	Cloud Act : 0/3 – US-domiciled vendor or US-only processing	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	revFADP DPA : 3/3 – Public DPA that names the revFADP	Training : 3/3 – Contractual no-training, including model providers	Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II	7/7	Compare
OmnilexSwitzerland	Storage : 3/3 – Switzerland only, or customer on-premises	AI processing : 2/3 – Switzerland plus EU/EEA	Cloud Act : 1/3 – Non-US vendor on US-parent clouds/models	Secrecy (Art. 321) : 3/3 – Contractual auxiliary-person (Hilfsperson) status or external legal opinion	revFADP DPA : 2/3 – GDPR DPA or US framework certification only	Training : 3/3 – Contractual no-training, including model providers	Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II	7/7	Compare
RechtsKISwitzerland	Storage : 3/3 – Switzerland only, or customer on-premises	AI processing : 2/3 – Switzerland plus EU/EEA	Cloud Act : 2/3 – Swiss storage, but US-parent compute or optional exposure	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	revFADP DPA : 2/3 – GDPR DPA or US framework certification only	Training : 3/3 – Contractual no-training, including model providers	Certifications : 1/3 – Infrastructure-only or planned	7/7	Compare
SilexSwitzerland	Storage : 3/3 – Switzerland only, or customer on-premises	AI processing : 3/3 – Switzerland only, own or non-US models	Cloud Act : 2/3 – Swiss storage, but US-parent compute or optional exposure	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	revFADP DPA : 2/3 – GDPR DPA or US framework certification only	Training : 3/3 – Contractual no-training, including model providers	Certifications : 1/3 – Infrastructure-only or planned	7/7	Compare
SpellbookCanada	Storage : 0/3 – US/Canada only, no EU/CH option	AI processing : 1/3 – Can leave the region, or relies on US LLM APIs	Cloud Act : 0/3 – US-domiciled vendor or US-only processing	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	revFADP DPA : 2/3 – GDPR DPA or US framework certification only	Training : 3/3 – Contractual no-training, including model providers	Certifications : 3/3 – Own ISO 27001 or SOC 2 Type II	7/7	Compare
Swiss-NoxtuaSwitzerland	Storage : 3/3 – Switzerland only, or customer on-premises	AI processing : 2/3 – Switzerland plus EU/EEA	Cloud Act : 3/3 – Non-US vendor, non-US infrastructure and models	Secrecy (Art. 321) : 3/3 – Contractual auxiliary-person (Hilfsperson) status or external legal opinion	revFADP DPA : 3/3 – Public DPA that names the revFADP	Training : 3/3 – Contractual no-training, including model providers	Certifications : 2/3 – Claimed or partner-level	7/7	Compare
Swisslex AISwitzerland	Storage : 3/3 – Switzerland only, or customer on-premises	AI processing : 3/3 – Switzerland only, own or non-US models	Cloud Act : 3/3 – Non-US vendor, non-US infrastructure and models	Secrecy (Art. 321) : 2/3 – General confidentiality claim, no auxiliary-person term	not disclosedrevFADP DPA : not disclosed	Training : 3/3 – Contractual no-training, including model providers	not disclosedCertifications : not disclosed	5/7	Compare
Weblaw Lawsearch AISwitzerland	Storage : 3/3 – Switzerland only, or customer on-premises	AI processing : 2/3 – Switzerland plus EU/EEA	Cloud Act : 2/3 – Swiss storage, but US-parent compute or optional exposure	not disclosedSecrecy (Art. 321) : not disclosed	not disclosedrevFADP DPA : not disclosed	not disclosedTraining : not disclosed	not disclosedCertifications : not disclosed	3/7	Compare