Legora
Legora streamlines legal document review, research, and drafting by analyzing contracts and materials at scale while suggesting precise edits and language based on your preferences. The platform integrates into lawyers' existing workflows through Word and Outlook add-ins, helping legal teams and in-house counsel spend less time on routine document work and more time on strategy and negotiation. Built for law firms and compliance teams managing high volumes of agreements, Legora combines document intelligence with legal research access to accelerate analysis while maintaining accuracy and regulatory compliance.
Legora is an AI-powered platform that enables legal teams and compliance professionals to review, research, and draft legal documents at scale while maintaining control and precision. The tool automates the labor-intensive aspects of contract analysis—identifying key terms, flagging compliance risks, and suggesting well-crafted edits—by processing tens of thousands of documents simultaneously and drawing on legal precedent to generate ready-to-use language. Legora integrates directly into lawyers' existing workflows through Word and Outlook add-ins, and connects to legal research databases, document management systems like iManage and SharePoint, and internal content repositories, creating a unified workspace that reduces context-switching. The platform serves law firms and in-house counsel across practice areas including litigation, M&A, tax, and banking, with particular value for organizations managing high volumes of agreements or operating in regulated industries where compliance gaps carry significant risk. Rather than replacing legal judgment, Legora augments it by handling routine identification and drafting work, freeing legal professionals to focus on strategy, negotiation, and exception handling. The platform is ISO 42001 and ISO 27001 certified, SOC 2 Type 2 compliant, and GDPR compliant, with a technical team based in Sweden.
[ToS] Clause 8.3.3 explicitly states 'Legora will not use Subscriber's Confidential Information to train generative or b
No training on user data means no opt-out is necessary.
Low risk across data training, licensing, and sharing dimensions.
[ToS] Clause 8.3.3 explicitly states 'Legora will not use Subscriber's Confidential Information to train generative or base AI models, nor will it allow its subcontractors to do so, unless agreed upon separately in writing.' This provides clear protection against AI training on user data without explicit opt-in.
“[ToS] 'Legora will not use Subscriber's Confidential Information to train generative or base AI models, nor will it allow its subcontractors to do so, unless agreed upon separately in writing (e.g. for finetuning).'”
[ToS] Clause 8.2.3 grants Legora only a 'limited, non-exclusive, non-transferable, non-sublicensable (except to Affiliates), fully revocable license for the Term' to use Subscriber Content solely 'for the provision of the Services.' The license is explicitly limited in scope and duration, terminating with the agreement.
“[ToS] 'Legora grants the Subscriber a limited, non-exclusive, non-transferable, non-sublicensable (except to Affiliates), fully revocable license for the Term to use, store, copy, transmit, create derivative works of and display the Subscriber Content for the provision of the Services in accordance with the Agreement.'”
[ToS] Clause 8.3.2 permits sharing of Usage Data only when 'aggregated and anonymized such that the Subscriber and its end users cannot be identified,' and [DPA] Clause 2.7 certifies Legora will not 'sell or share Personal Data.' However, [ToS] Clause 7.2.2 permits disclosure to 'subcontractors, and consultants' with confidentiality obligations, and [DPA] Clause 4.1-4.2 allows sub-processors with limited subscriber objection rights. The sub-processor list is referenced but not provided in documents, creating moderate concern.
“[ToS] 'Legora may not share Usage Data with a third party except (i) in accordance with Section 7 or (ii) to the extent the Usage Data is aggregated and anonymized such that the Subscriber and its end users cannot be identified.' [DPA] 'Legora certifies that it will not...sell or share Personal Data.'”
[ToS] Clause 4.3.2 states Legora 'shall delete any Subscriber Content stored in the Services (if any)' upon written request, but does not specify automatic deletion timelines or retention periods. [DPA] Clause 11.1 requires deletion or return 'before the expiration of this DPA' at Subscriber's choice, but [DPA] Clause 11.2 permits indefinite retention if 'required by Swedish or EU law' with only blocking of further processing. Absence of clear default retention periods creates moderate concern.
“[ToS] 'Upon Subscriber's written request, Legora shall delete any Subscriber Content stored in the Services (if any).' [DPA] 'Before the expiration of this DPA, Legora shall, at the choice and instruction of the Subscriber, securely delete or return all Personal Data to the Subscriber, unless Applicable Data Protection Laws require Legora to store the Personal Data.'”
[ToS] Clause 8.1.2 explicitly states 'the Subscriber, its Affiliates and/or licensors owns all rights, title and interest in and to the Subscriber Content.' Clause 8.2.3 confirms the Subscriber 'reserves all right, title, and interest in and to the Subscriber Content' except for the limited license granted to Legora for service provision.
“[ToS] 'As between the parties, the Subscriber, its Affiliates and/or licensors owns all rights, title and interest in and to the Subscriber Content.' [ToS] 'Except for the aforesaid license, the Subscriber reserves all right, title, and interest in and to the Subscriber Content.'”
[ToS] Clause 7.3.2 explicitly states 'Legora is ISO 27001 certified and shall maintain the certification, or a corresponding certification or standard, throughout the Term.' The DPA references compliance with GDPR and includes Standard Contractual Clauses for data transfers. These certifications and commitments meet enterprise security standards.
“[ToS] 'Legora is ISO 27001 certified and shall maintain the certification, or a corresponding certification or standard, throughout the Term. Legora will also adhere to its information security policy, as set out on Legora's website and shall not during the term decrease the level of security.'”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai