Everlaw
Cloud-native eDiscovery platform with AI-powered predictive coding, clustering, and generative AI for document review and litigation analytics.
Everlaw is a cloud-native eDiscovery platform designed for legal teams and law firms managing large-scale document reviews and litigation. The platform combines AI-powered predictive coding and clustering to automatically categorize and prioritize documents, significantly reducing the manual effort and cost associated with discovery workflows. Its generative AI capabilities enable faster document analysis and case insights, allowing attorneys to focus on strategy rather than document triage. The platform integrates document review, analytics, and collaboration tools in a single environment, streamlining the entire litigation workflow from initial document ingestion through final production. Everlaw's approach to predictive coding learns from attorney decisions to continuously improve accuracy, while clustering algorithms group similar documents to surface patterns and relationships across large datasets. The tool is particularly valuable for complex litigation, regulatory investigations, and high-volume discovery scenarios where traditional manual review becomes prohibitively expensive and time-consuming.
Everlaw states it uses AI tools for internal operations but explicitly clarifies these tools are NOT used to develop, im
No training opt-out mechanism was identified in the legal documents.
High risk across multiple dimensions. Only use with public, non-sensitive data.
Everlaw states it uses AI tools for internal operations but explicitly clarifies these tools are NOT used to develop, improve, or train generalized AI/ML models. However, the AI Chatbot on their site shares personal information with Qualified.com, Inc., creating moderate risk for shadow AI training.
“where we use AI tools which process Personal Information (including Google Workspace APIs), these are not used to develop, improve, or train generalized AI and/or ML models.”
The document distinguishes between Customer Data (controlled by customers) and Personal Information (controlled by Everlaw). For Personal Information, the license grant is not explicitly broad, but the use cases listed are extensive. The scope is moderate rather than highly restrictive.
“Everlaw's Customers are the controllers of personal information contained in their Case Materials ('Customer Data'), and Everlaw is a processor of this information.”
Everlaw shares Personal Information extensively with service providers, affiliates, customers, partners, advertising networks, and others. The sharing is broad and includes data for marketing, analytics, and advertising purposes with multiple third-party categories.
“We may disclose Personal Information with third party service providers who are working on our behalf (e.g. billing and payment service providers, cloud hosting and storage providers, communications providers, learning management system platforms, and analytics companies).”
Everlaw states it retains Personal Information for different periods depending on use and configuration, with deletion or anonymization after retention periods expire. However, specific retention timelines are not detailed in this document, and backup archives may prevent deletion.
“We retain your Personal Information for different periods of time depending on what it is, how we use it, and how you configure your settings. We will either delete or anonymize Personal Information once it is no longer needed or after expiration of the applicable retention periods.”
The document clearly states that Customers control their Case Materials and associated Customer Data. For Personal Information generated by users, Everlaw's ownership is not explicitly claimed for user-generated content, maintaining appropriate separation.
“Everlaw's Customers are the controllers of personal information contained in their Case Materials ('Customer Data'), and Everlaw is a processor of this information.”
Everlaw demonstrates strong compliance posture by referencing GDPR compliance, Data Privacy Framework certification, SOC2 (implied through security safeguards), and offering Business Associate Agreements. Multiple compliance documents are referenced and available.
“Everlaw relies on the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, and the UK Extension to the EU-U.S. Data Privacy Framework as a legal basis for transfers of personal information from those locations to the United States.”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai