Product and intended use
Define the configuration, people, information and tasks being assessed.
Publications versus LEAP bundle
Public claim only
By Lawyers Holdings Pty Ltd, Sydney. Privacy: global parents’ subsidiaries/affiliates at leaplegalsoftware.com/subsidiaries-and-affiliates. Footer/nav: By Lawyers in LEAP. About: publications, matter plans and precedents; 35,000 users claimed.
Ask: Is our licence standalone or included in LEAP, and which country libraries?
AU/UK/CA/NZ/IE hosting
Public claim only
Privacy: Service hosted and operated in Australia, Canada, Ireland, New Zealand and the United Kingdom, through By Lawyers and service providers. Personal information may be accessed in those places and by affiliates in US, Canada, UK, Ireland, Poland, Australia and NZ.
Ask: Where is our Australian library hosted, and do LEAP integrations copy matter files there?
Precedents and matter plans
Public claim only
About: commentaries, matter plans and precedents; forms library; processes through to invoice and file close. No generative assistant is described on the about or privacy pages reviewed.
Ask: Does our SKU include any generative drafting, or only precedents?
AU, UK, CA, NZ libraries
Public claim only
About: available in the United Kingdom, Australia, Canada and New Zealand. Canadian launch 2023 (ON/BC/AB); NZ 2024; CA/NZ sites 2025.
Ask: Which Australian jurisdictions and current consolidations are in our library?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Processor when accessed via a firm
Public claim only
Privacy: where accessed via a client organisation, that entity is controller and By Lawyers is processor. Matter files via integrations may include sensitive ID documents.
Ask: Do we need client consent if LEAP syncs matter files into By Lawyers?
None named
Not confirmed
No LLM provider is named on the privacy, terms or about pages reviewed. Product is publications/precedents.
Ask: If any generative feature is enabled via LEAP, name the model provider.
Affiliates and unnamed hosts
Public claim only
Privacy: affiliates in US, Canada, UK, Ireland, Poland, Australia and NZ; unnamed third parties for billing, marketing, hosting, backup, security, improvement and analytics. No dated named list.
Ask: Provide the current named hosting and analytics list with locations.
Deidentified usage for internal training
Public claim only
Privacy: deidentified data about how you use the Services may be used for internal training and troubleshooting and to improve the Services. That is usage telemetry, not a statement about training foundation models on matter files. Matter files via integrations are used to facilitate the Services.
Ask: Confirm matter-file contents are not used to train any model.
Aggregated non-PII
Public claim only
Where permitted, By Lawyers may aggregate non-personally identifiable data to analyse or improve the Services.
Ask: Can document text appear in aggregated analytics?
Follows client contract when processor
Public claim only
As processor, processing follows client instructions/contract. Controller retention not numbered.
Ask: State default retention for saved matter plans and uploaded files.
Rights described; SLA not numbered
Not confirmed
Privacy describes access, deletion and correction choices. No 30-day certified-deletion SLA extracted.
Ask: On exit from LEAP, are By Lawyers copies of our files deleted and certified?
Support and affiliates
Public claim only
Support information is used to respond to requests. Affiliates in several countries may access personal information. Need-to-know staff protocol not numbered.
Ask: When may By Lawyers or LEAP staff open our matter files?
Organisation administrator
Public claim only
Administrators submit role/billing-rate information. Session and CSRF cookies described. SSO/MFA not described on pages reviewed.
Ask: Is SSO available when launched from LEAP?
Not specified
Not confirmed
Privacy lists hosting and security providers as categories. TLS/at-rest algorithms are not stated.
Ask: Confirm TLS and at-rest encryption for Australian hosting.
No SOC 2/ISO claim found
Not confirmed
No SOC 2 or ISO 27001 claim was found on the privacy, terms or about pages reviewed. Parent LEAP group may hold separate certifications not inspected here.
Ask: Does By Lawyers or LEAP hold ISO 27001/SOC 2 covering this product?
Organisation contract plus privacy
Public claim only
Privacy: organisation contract may restrict processing further. Terms page exists. No public DPA URL. LEAP group affiliation via leaplegalsoftware.com subsidiaries list.
Ask: Is By Lawyers on our LEAP agreement, and will you sign a DPA?
Multi-country hosting and affiliates
Public claim only
Hosting in AU, CA, IE, NZ, UK. Affiliates in US, CA, UK, IE, Poland, AU, NZ. Use of the Services is acknowledgement of those transfers.
Ask: Map every country that can see our Australian matter files.
No public 72-hour SLA
Not confirmed
Privacy does not state a customer-notification period for a Notifiable Data Breach.
Ask: Commit to notify us within 72 hours of a confirmed incident.
Policy by using the Services
Public claim only
Submitting personal information or using the Services is acknowledgement of the Policy. Organisation contracts may override.
Ask: Will material hosting or affiliate changes be notified in writing?
Not numbered
Not confirmed
No public export/deletion timetable extracted from terms/privacy in this pass.
Ask: What export exists, and when are copies purged after we leave LEAP?
LEAP integration
Public claim only
Integration partners may transfer matter information and files into the Services. LEAP is the named exclusive integration.
Ask: What data leaves LEAP into By Lawyers, and can we disable the sync?
Not a web assistant
Not confirmed
Product is a publication library. Open-web search was not described.
Ask: Confirm there is no open-web browsing in the product.
No agentic product described
Not confirmed
No outbound agent actions were described on about/privacy. File close and invoicing are process steps in the matter plan, not autonomous sending.
Ask: Confirm By Lawyers cannot send email or file documents unattended.
Lawyer-authored precedents
Public claim only
Content is practitioner-authored guidance. Lawyers remain responsible for adapting precedents to the matter.
Ask: Will we require a named lawyer to accept each assembled document before sending?