---
title: "Clio Grow (AI features published as Grow AI) (Themis Solutions (Australia) Pty Ltd)"
url: "https://ailawframework.com/software/clio-grow"
type: "software_profile"
site: "AI Law Framework"
id: "clio-grow"
vendor: "Themis Solutions (Australia) Pty Ltd"
category: "Legal-specific"
segment: "Intake and client service"
confidence: "high"
last_reviewed: "2026-09-27"
---

# Clio Grow (AI features published as Grow AI) (Themis Solutions (Australia) Pty Ltd)

> Client intake and CRM product for law firms, with optional AI agents that answer website chat and email enquiries, assess prospective clients, check for conflicts, book appointments and follow up after a matter closes.

Canonical page: https://ailawframework.com/software/clio-grow  
Last reviewed: 2026-09-27

Site index for agents: https://ailawframework.com/llms.txt

Plan covered: Clio Grow as sold in Australia, included in Elite and Elite Work and an add-on to Core, Signature and Signature Work, with the Grow AI features governed by Product Specific Terms s 4. Clio Manage, Clio Work and Clio Draft are separate.

## Capabilities

- Intake and triage
- Conflict checking
- Document automation
- Electronic signing and execution
- Agentic workflows

## Key facts

| Fact | Value |
| --- | --- |
| Deployment | SaaS |
| Hosting regions | United States, European Union / EEA, Canada, Australia |
| Australian region | Unknown |
| Model providers | Amazon Web Services (AWS Bedrock), Anthropic, Inc, OpenAI, LLC, Google LLC (Google Vertex AI), Microsoft Corporation (Azure Foundry), Vapi Inc (voice agent) |
| Assurance | SOC 1 Type 2, SOC 2 Type 2, TX-RAMP |
| Training on customer content | De-identified and aggregated use only |
| Retention | Australian Terms of Service cl 10.7: on cancellation or termination Content is made available to the Administrator, and 'Following a period of no less than ninety (90) days from the cancellation or termination of a subscription, all Content associated with such subscription will be irrevocably deleted from the Service'. Clause 8.1 gives the same 90 days to retrieve Content. Product Specific Terms s 4.2 makes everything Grow AI collects from individuals who interact with it, 'including transcripts and call recordings', Content. Clause 2.14 separately allows Themis to collect and process Usage Data, defined as technical logs, data and learnings about use of the Services, for its lawful business purposes with no stated period. No in-life retention period is published for Grow AI chat transcripts, email threads, call recordings, Lead Assessment outputs or the vector index. |
| Integrations | Clio Manage (intake data syncs when a lead converts), the firm's own website (intake forms and web chat), email, Bandwidth (published sub-processor, SMS to clients and users), Vapi Inc (published sub-processor, AI enabled voice agent), Stripe Payments Australia Pty Ltd (Clio Payments, separate product terms) |
| Legal content coverage | No primary-law library is published as part of Clio Grow. Conflict checking is described as searching Clio itself: 'Search across all of Clio for potential conflicts of interest. Review any matches, mark their status, and get a summarised report when the check is complete.' Licensed legal Materials are governed separately by Terms of Service cl 17 and are published as part of other Clio products. |
| Pricing | Clio Grow is included in the Elite and Elite Work plans and is an add-on to Core, Signature and Signature Work, with the add-on price on application. Grow AI is metered: the Australian Grow AI page states 'Grow AI is cost-per-hired-matter pricing. That means you only pay when Grow AI helps you close business ($35 per hired matter). Plus, you can set a monthly cap to stay on budget.' The Australian plan comparison table lists AI web chat and email agents, AI lead qualification and AI engagement and nurture as 'Pay per matter hired with Grow AI's help'. Product Specific Terms s 4.3 to 4.5 make these Metered Features billed on actual usage and certain outcomes, invoiced in arrears, with rates that 'may be updated without advanced notice' and with Themis' own logs as the definitive record of usage. |
| Australian presence | Yes. The Australian Terms of Service open: 'These Terms of Service govern your use of the software and services provided by Themis Solutions (Australia) Pty Ltd (and its affiliates) (“Themis”) also known as Clio.' Clause 21.9 applies the law of New South Wales and the courts of New South Wales in Sydney; cl 21.10 states 'The Service is intended for users located in Australia.' Clause 5.7: 'Themis will comply with the Privacy Act 1988 (Cth) in relation to personal information that it collects, uses and stores in Australia, and discloses to and from Australia', and sends international transfer detail to the Australian privacy policy. The published sub-processor list names Themis Solutions (Australia) Pty Ltd as the Australian affiliate. No ACN or ABN appears in any Clio document read. The Australian Clio Grow page carries a testimonial attributed to a founder at Progressive Legal stating 'We use Clio Grow for all our lead management', which is the only Australian customer named for this product on the pages read. |
| Website | https://www.clio.com/au/grow/ |

## What the research found

| Topic | Status | Finding | Open question | Sources |
| --- | --- | --- | --- | --- |
| Product and plan covered | Public claim only | Clio Grow is published as an intake and CRM product, included in Elite and Elite Work and available as an add-on for Core, Signature and Signature Work (Australian pricing page, 2026-09-27). Grow AI is defined in a binding document rather than only in marketing: Product Specific Terms s 4.1 calls it 'certain optional AI-powered intake features within Clio Grow ... including automated engagement via website chat, email, and (where available) voice', which 'may include a web chat agent, an email agent, an inbound voice agent, consultation scheduling and automated evaluation of prospective-client information (“Lead Assessment”)'. | Which Grow AI channels and features will be activated on our subscription, and which are not available in Australia? | [Clio Australia — Pricing, plan comparison table and pricing FAQs](https://www.clio.com/au/pricing/); [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/); [Clio Australia — Clio Grow product page](https://www.clio.com/au/grow/) |
| Deployment and data locations | Public claim only | SaaS only. The published sub-processor list (last modified 20 August 2026) names Amazon Web Services, Inc. as cloud hosting for Clio Grow with data locations United States, European Union, Canada and Australia. The AI processors named for Clio Grow publish narrower locations: Anthropic and Vapi United States only; AWS Bedrock, OpenAI and Azure Foundry United States and European Union; Google Vertex AI and Turbopuffer add Canada and Australia; Braintrust Data United States. | If our tenant is hosted in the Australian AWS region, which Grow AI steps still leave Australia, and can any of them be turned off? | [Clio — Subprocessors (Exhibit C), last modified 20 August 2026](https://www.clio.com/au/tos/subprocessors/) |
| What the product does | Public claim only | The Australian product page (2026-09-27) publishes custom intake forms that flow into Grow and sync to Clio Manage on conversion, generation of engagement letters and retainers from templates with autofill, sending documents for e-signature, intake-stage tracking, conflict checks at intake, paid consultation booking, email marketing, a website builder, review requests and referral and channel reporting. The Grow AI page adds that Grow AI 'responds to every email and engages every website visitor', that 'Every lead is automatically scored against your firm's past successful cases and checked for conflicts', that it 'sends intake forms, chases down signatures, and flags what needs your attention', and that it keeps contact with past clients after a matter closes. | Show the conflict check Grow AI runs at intake, what it searches, and what it does when it finds a possible match. | [Clio Australia — Clio Grow product page](https://www.clio.com/au/grow/); [Clio Australia — Law firm client acquisition (Grow AI) page and Grow AI FAQs](https://www.clio.com/au/features/law-firm-client-acquisition/) |
| Jurisdiction and governing law | Public claim only | Australian Terms of Service cl 21.9: the agreement is governed by the laws of New South Wales and disputes are resolved by the courts of New South Wales in Sydney. Clause 21.10 states the Service 'is intended for users located in Australia'. Clause 5.7 carries a Privacy Act 1988 (Cth) compliance undertaking. Product Specific Terms s 4.9 puts the call-recording and all-party consent question on the firm: the Subscriber is 'responsible for determining whether its use of the voice agent, and of any recording or transcript, complies with applicable laws and professional responsibilities, including where the consent of all parties to a call is required'. | For each Australian state in which we practise, which party is responsible if the voice agent's audible notice does not meet the local recording-consent requirement? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/) |
| Licence, metering and fee exposure | Public claim only | Product Specific Terms s 4.3 to 4.5: Grow AI Metered Features are charged on actual usage and 'certain outcomes', apply only after the Subscriber activates the feature, are calculated at rates communicated from time to time which 'may be updated without advanced notice', are invoiced in arrears or earlier once usage reaches a threshold Themis sets in its sole discretion, and any in-product real-time usage view 'does not affect Themis' internal measurements and logs, which remain the definitive record of usage'. The Grow AI page publishes $35 per hired matter and a settable monthly cap. | How is a 'hired matter' defined and attributed to Grow AI, what does the monthly cap do when it is reached, and can the per-matter rate be fixed for our term? | [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/); [Clio Australia — Law firm client acquisition (Grow AI) page and Grow AI FAQs](https://www.clio.com/au/features/law-firm-client-acquisition/) |
| Integrations and channels | Public claim only | Published integrations for this product are the firm's own website (intake forms and web chat), email, SMS through Bandwidth (named as a Clio Grow sub-processor with data locations United States, European Union and Australia), the Vapi voice agent where the channel is offered, and the sync into Clio Manage when a lead converts. Dropbox Sign and Nintex are named in the sub-processor list for Clio Manage, not Clio Grow. | Which service signs documents sent for e-signature from Clio Grow, and where does that provider hold the signed document? | [Clio — Subprocessors (Exhibit C), last modified 20 August 2026](https://www.clio.com/au/tos/subprocessors/); [Clio Australia — Clio Grow product page](https://www.clio.com/au/grow/) |
| Support and assurance requests | Public claim only | Australian Terms of Service cl 5.4(d): within 30 days of a request Themis will provide a SOC 2 or SOC 3 audit report, an industry standard successor, or a comparable description of security measures for the data centre facilities, but 'In order to obtain such a report, Subscriber must enter into an agreement with the third party provider of the report'. The Australian pricing table lists 24/5 live chat, phone and email support on all four plans, with priority support on Signature and Elite. The Trust Centre gates its documents behind an access request. | What support path and response time applies when the Grow AI web chat or email agent misanswers a prospective client, and who can switch it off immediately? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio Australia — Pricing, plan comparison table and pricing FAQs](https://www.clio.com/au/pricing/); [Clio Trust Centre (SafeBase portal): compliance badges, document list and control headings](https://trust.clio.com/) |
| Published quality evidence | Not confirmed | Nothing read publishes an accuracy measurement for Grow AI. The Australian Terms of Service cl 14.2 takes the opposite position contractually: 'Themis does not review Output for accuracy or completeness, and Subscriber acknowledges that Output may be incomplete or inaccurate', and Product Specific Terms s 4.10 states that Grow AI outputs 'including transcripts and prospective-client assessments or scores, are AI-generated and may contain errors, inaccuracies, or be speculative in nature'. No independent study was found within budget. | Can you provide measured error rates for Lead Assessment and for the conflict flag, including how often a real conflict was missed, and how those were measured? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/) |
| Task fit and the boundary the vendor draws | Public claim only | Product Specific Terms s 4.10 draws the boundary: 'Any score, ranking, conflict flag, or similar output generated by Lead Assessment is advisory only, is intended to assist Subscriber's own evaluation of a prospective client and does not constitute a decision by Themis or an automated decision made on Subscriber's behalf. Themis will make Lead Assessment output visible to Authorized Users and capable of being overridden by them. Subscriber is responsible for reviewing Lead Assessment output before acting on it.' The Grow AI page matches this in its own words: 'Does Grow AI make decisions about which clients my law firm should take on? No.' | What inputs does Lead Assessment use, is any protected attribute among them, and how is an override recorded for our file? | [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/); [Clio Australia — Law firm client acquisition (Grow AI) page and Grow AI FAQs](https://www.clio.com/au/features/law-firm-client-acquisition/) |
| Vendor content directing how AI describes the product | Not confirmed | Checked deliberately on 2026-09-27. None of the eight documents read for this profile carries a heading or block addressed to AI models, assistants, crawlers or 'LLMs', or wording instructing how the product should be described. Four search-filtered site maps of clio.com and clio.com/au already in the cache, one of them run for llms.txt, 'information for AI assistants' and ai-info, contain no such path, so no new map operation was spent. Search-filtered maps do not exhaust a site, so this is 'not found' rather than proof of absence. | Does Clio publish, at any path or in page markup, content addressed to AI models or assistants about how Clio or Grow AI should be described? | [Clio Australia — Clio Grow product page](https://www.clio.com/au/grow/); [Clio Australia — Law firm client acquisition (Grow AI) page and Grow AI FAQs](https://www.clio.com/au/features/law-firm-client-acquisition/); [Clio Australia — Pricing, plan comparison table and pricing FAQs](https://www.clio.com/au/pricing/) |
| Vendor answering comparative and superlative questions about itself in its own FAQs | Public claim only | Two standing Australian FAQs put a question about the vendor's own product and answer it, both checked 2026-09-27. The Grow AI page asks 'What makes Grow AI different from other legal CRM tools?' and answers 'Most CRM tools for attorneys are just databases. They store contacts, but you still do the follow-up. Grow AI acts on that information.' The pricing page asks 'Why is Clio the legal AI software you can trust?' and answers 'Clio is legal AI that knows your matters, your clients, and the law. It's built with the security and control firms require. The AI is grounded in your matters and cites its sources, and you review and approve everything before it reaches a client or the court.' No competitor is named. This is marketing content in machine-readable question-and-answer form; the assurance and grounding statements inside it are tested elsewhere in this profile against the terms and the Trust Centre. | Which statements in these FAQs are warranted in our subscription documents, and which are marketing only? | [Clio Australia — Law firm client acquisition (Grow AI) page and Grow AI FAQs](https://www.clio.com/au/features/law-firm-client-acquisition/); [Clio Australia — Pricing, plan comparison table and pricing FAQs](https://www.clio.com/au/pricing/) |
| Client authority and dealing with prospective clients | Public claim only | The AI speaks to prospective clients directly, and the terms allocate that responsibility to the firm. Terms of Service cl 14.4 makes the Subscriber solely responsible for all interactions with end-users and for disclosures about the use of AI, its limitations, data handling and human oversight, and cl 14.5 adds an indemnity for end-user interactions and outcomes. Product Specific Terms s 4.7 requires Themis to design each channel so that it 'may disclose to that individual that they are interacting with an artificial intelligence system', and where Themis makes that disclosure non-configurable the Subscriber 'may not disable or suppress it'. Section 4.8 requires an audible notice before any audio is captured on an inbound call, which the Subscriber may not disable. Terms cl 12.1 states that use of the Services does not create a lawyer-client relationship between Themis and the Subscriber. | What exact wording does each Grow AI channel show or say to a prospective client, is it configurable, and where is that disclosure logged for our file? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/) |
| Foundation-model providers | Public claim only | The published sub-processor list (last modified 20 August 2026) names, as AI Service Providers applicable to Clio Grow: Amazon Web Services (AWS Bedrock), Anthropic, Inc, OpenAI, LLC, Google LLC (Google Vertex AI), Microsoft Corporation (Azure Foundry), Braintrust Data, Inc (AI analytics, evaluation and testing), Turbopuffer, Inc (vector database) and Vapi Inc (AI enabled voice agent). Product Specific Terms s 4.6 names Vapi.ai for the voice agent. No model name, version or endpoint region is published, and nothing read says which provider performs which Grow AI step. | Which provider and model performs the web chat agent, the email agent and Lead Assessment for an Australian tenant, and in which region does each run? | [Clio — Subprocessors (Exhibit C), last modified 20 August 2026](https://www.clio.com/au/tos/subprocessors/); [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/) |
| Sub-processors and change notice | Public claim only | The sub-processor page is dated and product-scoped, listing the providers above plus Bandwidth for SMS, and naming Themis Solutions (Australia) Pty Ltd among the Clio affiliates engaged as sub-processors with access to customer data. Objection rights sit in a document that does not cover Australia: the Data Protection Addendum applies only where the data relates to individuals in the EEA or where the Subscriber is established in the EEA or UK, and its cl 3.2 gives a 30-day objection and a right for either party to terminate on 30 days' notice. The Australian Terms of Service contain no equivalent sub-processor notice or objection clause, and prior versions of the list are not published. | What written notice will an Australian subscriber receive before a new Grow AI sub-processor is added, and what is our objection route given the addendum does not cover Australian data? | [Clio — Subprocessors (Exhibit C), last modified 20 August 2026](https://www.clio.com/au/tos/subprocessors/); [Themis Data Protection Addendum for GDPR Compliance (Exhibit B)](https://www.clio.com/tos/data-protection-addendum/); [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/) |
| Training on customer content | Public claim only | Australian Terms of Service cl 14.6: 'Themis may de-identify and aggregate the Content submitted to, and Output received from, AI Services and use the same in order to improve and ensure the quality of the AI Services. Subscriber's use of AI Services does not grant Themis the right to use any of Subscriber's Confidential Information for the purpose of training generalized LLMs.' Clause 14.3 bars the Subscriber from using outputs to train a model. The Grow AI page states in its own FAQ that data is 'never used to train external models', which is narrower than cl 14.6 and is marketing text. Nothing read says whether de-identified aggregation is available as an opt-out. | Can our tenant be excluded from the de-identification and aggregation permitted by cl 14.6, and what exactly is derived from Grow AI chat transcripts and Lead Assessment outputs? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio Australia — Law firm client acquisition (Grow AI) page and Grow AI FAQs](https://www.clio.com/au/features/law-firm-client-acquisition/) |
| Feedback, evaluation and usage analytics | Public claim only | Terms of Service cl 2.14 grants Themis the right to collect 'technical logs, data and learnings about Subscriber's use of the Services' as Usage Data and to use, share and process it for its lawful business purposes provided Themis does not publicly identify the Subscriber as the source, with no stated period, and requires the Subscriber not to interfere with that collection. Clause 14.6 covers de-identified aggregation of AI inputs and outputs for quality. The sub-processor list names Braintrust Data, Inc for 'AI Analytics, Evaluation and Testing' for Clio Grow, with data location United States. | What Grow AI content reaches Braintrust Data, in what form, and is it de-identified before it leaves our tenant? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio — Subprocessors (Exhibit C), last modified 20 August 2026](https://www.clio.com/au/tos/subprocessors/) |
| Retention of transcripts, recordings and assessments | Public claim only | Product Specific Terms s 4.2 makes information Grow AI collects from individuals, 'including transcripts and call recordings generated in connection with such interactions', Content. Terms of Service cl 10.7 then deletes Content 'following a period of no less than ninety (90) days' after cancellation or termination, and cl 8.1 gives 90 days to retrieve it. Section 4.8(b) makes the Subscriber responsible for 'its own use, retention, and disclosure of call recordings and transcripts within the Service'. No in-life retention period, and no period for Lead Assessment outputs or the vector index, is published. | What is the default and configurable retention for Grow AI chat transcripts, email threads, call recordings, Lead Assessment scores and the vector index, and can a single prospective client's record be purged on request? | [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/); [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/) |
| Deletion and certified erasure | Public claim only | Terms of Service cl 10.7: 'all Content associated with such subscription will be irrevocably deleted from the Service' after no less than 90 days from cancellation or termination. The addendum's deletion-or-return election within 90 days (cl 7.1) and its retained-by-law exception (cl 7.2) apply only to EEA and UK data. No certificate of deletion is offered to an Australian subscriber in any document read, although the Trust Centre lists 'Certificates of Destruction' among its control headings with detail gated. | Will you certify deletion of Grow AI transcripts, recordings and vector entries across AWS, Vapi, Braintrust and Turbopuffer for an Australian subscription, and within what period? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Themis Data Protection Addendum for GDPR Compliance (Exhibit B)](https://www.clio.com/tos/data-protection-addendum/); [Clio Trust Centre (SafeBase portal): compliance badges, document list and control headings](https://trust.clio.com/) |
| Vendor and affiliate access to content | Public claim only | Terms of Service cl 4.2: Themis and the third-party vendors and hosting partners it uses 'shall hold Content in strict confidence and shall not use or disclose Content except (a) as required to perform their obligations or exercise their rights under this Agreement; (b) in compliance with Section 7 of this Agreement, or (c) as otherwise authorized by you in writing'. Clause 7.1 to 7.3 allow disclosure required by law with prior notice where permitted, and route legal requests through a published process. The sub-processor page states that Clio affiliates 'may have access to customer data in that capacity' and lists affiliates in Canada, the United States, the United Kingdom, Ireland, Australia, Spain, Colombia, Mexico, Brazil, Chile and Peru. Nothing read states which countries support staff read Grow AI content from, or whether access is logged to the subscriber. | From which countries can Themis staff or affiliates read our Grow AI transcripts and prospective-client records, under what approval, and will you give us those access logs? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio — Subprocessors (Exhibit C), last modified 20 August 2026](https://www.clio.com/au/tos/subprocessors/) |
| Access control, SSO and audit | Public claim only | The Australian plan comparison table lists 'SAML-based single sign-on (SSO)' as not available on EasyStart or Core and available on Signature and Elite, so SSO depends on the plan. Terms of Service cl 3.3 states Themis 'may, at its discretion, require all Authorized Users to use two-factor authentication', and that a user may disable it through account settings subject to additional requirements Themis imposes. The Trust Centre lists Multi-Factor Authentication, Audit Logging, Access Monitoring, Access Log Management and Data Access as control headings, with the underlying documents behind an access request. | Can two-factor authentication be enforced for every user on our account without exception, and can we export a complete audit log of Grow AI actions and overrides? | [Clio Australia — Pricing, plan comparison table and pricing FAQs](https://www.clio.com/au/pricing/); [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio Trust Centre (SafeBase portal): compliance badges, document list and control headings](https://trust.clio.com/) |
| Encryption in transit and at rest | Public claim only | The Australian pricing FAQ states 'Your data is encrypted in transit and at rest', and the Grow AI FAQ states 'All data is encrypted, processed in line with regional data protection laws, and never used to train external models'. The Trust Centre lists Disk Encryption among its control headings. The Australian Terms of Service commit only to information security best practices and industry standards for transmitting and storing Content (cl 5.4(a)) and to transmitting passwords in an encrypted format (cl 5.1(b)); the Article 32 obligation in the addendum applies to EEA and UK data. No algorithm, key length or customer-managed key option is published. | Provide the encryption standard for Grow AI transcripts, recordings and vector entries at rest, and state whether customer-managed keys are available on an Australian tenant. | [Clio Australia — Pricing, plan comparison table and pricing FAQs](https://www.clio.com/au/pricing/); [Clio Australia — Law firm client acquisition (Grow AI) page and Grow AI FAQs](https://www.clio.com/au/features/law-firm-client-acquisition/); [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio Trust Centre (SafeBase portal): compliance badges, document list and control headings](https://trust.clio.com/) |
| Independent security assurance | Public claim only | The Trust Centre (read 2026-09-27) publishes compliance badges for SOC 1 Type 2, SOC 2 Type 2 and TX-RAMP, and regulatory badges for GDPR and HIPAA, with the SOC 1 and SOC 2 reports, a pentest report summary, an AI Overview document and liability insurance listed as documents behind 'Get access'. No ISO 27001 or ISO/IEC 42001 badge appears. Terms of Service cl 5.4(d) gives a right to a SOC 2 or SOC 3 report within 30 days of request, subject to entering an agreement with the report provider. No report was inspected. | Provide the current SOC 2 Type 2 report and the Trust Centre AI Overview, and confirm Clio Grow, Grow AI and the Vapi voice path are inside that audit scope. | [Clio Trust Centre (SafeBase portal): compliance badges, document list and control headings](https://trust.clio.com/); [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/) |
| Contracting entity, liability and document set | Public claim only | The Australian Terms of Service name Themis Solutions (Australia) Pty Ltd as the contracting party, incorporate the Privacy Policy and the Exhibits, and are supplemented by the Product Specific Terms (cl 16), whose s 4 governs Grow AI. Clause 11.1 limits liability to Themis' choice of re-supplying the services or paying the cost of re-supply for liability that cannot be excluded but can be limited, and excludes indirect and consequential loss (cl 11.2), with Australian Consumer Law guarantees preserved (cl 12.1). No ACN or ABN appears. The Data Protection Addendum read is the GDPR addendum, governed by Irish law (cl 8.1), and by its own terms applies only to EEA or UK data, so no Australian data processing agreement was found. | Is there an Australian data processing agreement, and if not, which document carries our processor obligations under the Privacy Act for Grow AI? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/); [Themis Data Protection Addendum for GDPR Compliance (Exhibit B)](https://www.clio.com/tos/data-protection-addendum/) |
| Cross-border transfers and APP 8 | Public claim only | Terms of Service cl 5.7 carries a Privacy Act 1988 (Cth) undertaking and sends international transfer detail to the Australian privacy policy, which was not read within this wave's budget. The published data locations do the rest of the work: for Clio Grow, hosting is United States, European Union, Canada or Australia, while Anthropic and Vapi are United States only and AWS Bedrock, OpenAI, Azure Foundry and Braintrust are United States or European Union. Product Specific Terms s 2.4, written for Web Search, states that sub-processors 'may process data in a location other than your jurisdiction or your selected data processing region', and puts the assessment of that on the Subscriber. | List every country in which a Grow AI chat, email, call recording or Lead Assessment is processed for an Australian tenant, and the transfer mechanism relied on for each under APP 8. | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio — Subprocessors (Exhibit C), last modified 20 August 2026](https://www.clio.com/au/tos/subprocessors/); [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/) |
| Incident notification and history | Public claim only | Australian Terms of Service cl 5.5: Themis must report to the Subscriber, with all relevant details except those that could prejudice other customers' security, 'any event that Themis reasonably believes represents unauthorized access to, disclosure of, use of, or damage to Content (a “Security Breach”) ... within 72 hours after learning of the Security Breach'. Clause 5.6 sets out cooperation on cause, affected Content, investigation and mitigation. The Trust Centre lists Data Breach Notifications, Incident Reporting Process, Designated Response Personnel and a Forensic Retainer as control headings. No incident history is published on the pages read. | Does the 72-hour clock in cl 5.5 cover an incident at a Grow AI sub-processor such as Vapi or Turbopuffer, and has any material incident affected Clio Grow in the last 24 months? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio Trust Centre (SafeBase portal): compliance badges, document list and control headings](https://trust.clio.com/) |
| Change notice for features, models, fees and processors | Public claim only | Terms of Service cl 2.11 lets Themis modify or discontinue any feature 'with or without notice', except that 30 days' notice is given of a modification that materially reduces functionality, during which an Administrator may cancel and take a pro-rata refund. Clause 21.7 requires notice of material changes to the agreement 'prior to their enactment' with no minimum period. Product Specific Terms s 4.3 allows Grow AI usage rates to be 'updated without advanced notice'. The sub-processor page is dated without published version history. Nothing read commits Themis to notice before the model behind Grow AI changes. | What notice will we receive before the model or the voice provider behind Grow AI changes, and before a per-hired-matter rate change takes effect? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/); [Clio — Subprocessors (Exhibit C), last modified 20 August 2026](https://www.clio.com/au/tos/subprocessors/) |
| Export and exit | Public claim only | Terms of Service cl 8.1 and cl 10.7 give 90 days after cancellation or termination to retrieve Content before irrevocable deletion. Clause 10.2 makes cancellation effective only at the end of the then-current term, cl 10.3 makes the whole unpaid balance for the remainder of the term immediately payable on mid-term cancellation with no adjustment for unused services, and cl 10.4 requires the Administrator to call support to complete a cancellation, with cancellations 'not be accepted by any other means'. No export format is published for Grow AI records. | What format does the 90-day export take for Grow AI chat transcripts, email threads, call recordings, Lead Assessment scores and conflict-check results? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/) |
| Connectors and third-party services | Not confirmed | Each Grow AI channel is a connector the firm switches on: website chat, email, SMS through Bandwidth, the Vapi voice agent where offered, and the sync into Clio Manage. Product Specific Terms s 4.3 makes Metered Features chargeable only after the Subscriber activates them. Terms of Service cl 18 governs Third Party Services generally. Enabling each is the firm's decision and each adds a published data location. | List each Grow AI channel that will be enabled for us, the sub-processor behind it, and the data that channel receives. | [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/); [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio — Subprocessors (Exhibit C), last modified 20 August 2026](https://www.clio.com/au/tos/subprocessors/) |
| Open-web retrieval | Public claim only | Product Specific Terms s 2 defines Web Search as an AI Services feature that queries publicly available websites, states it can be disabled at account level by the Administrator and per conversation by a user, names OpenAI as the current provider, and warns in s 2.4 that its sub-processors 'may process data in a location other than your jurisdiction or your selected data processing region'. Nothing read applies Web Search to Clio Grow or Grow AI, and no open-web retrieval is described for the intake agents. | Does any Grow AI channel query the open web or any external data source about a prospective client, and can that be disabled? | [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/); [Clio Australia — Law firm client acquisition (Grow AI) page and Grow AI FAQs](https://www.clio.com/au/features/law-firm-client-acquisition/) |
| Agent actions and confirmation gates | Not confirmed | Grow AI acts on the firm's behalf towards people outside the firm: it answers emails and website visitors, answers inbound calls where that channel is offered, books appointments, sends intake forms, chases signatures and sends post-matter outreach. The only confirmation the terms mandate is disclosure to the person interacting with it (Product Specific Terms s 4.7) and an audible notice before audio is captured (s 4.8). Nothing read requires the firm to approve an outbound message before it is sent. | Which Grow AI actions send a message to a prospective or former client without a staff member approving it first, and can each be put behind approval? | [Clio Australia — Law firm client acquisition (Grow AI) page and Grow AI FAQs](https://www.clio.com/au/features/law-firm-client-acquisition/); [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/) |
| Human review before use | Public claim only | Terms of Service cl 14.2: 'Themis does not review Output for accuracy or completeness', all AI Services and Output are provided as is, and the Subscriber agrees 'to only use the AI Services and Output with human oversight' and is responsible for reviewing Output before disclosing or using it. Product Specific Terms s 4.10 makes Lead Assessment output advisory, visible to Authorized Users, capable of being overridden, and the Subscriber's to review before acting. The tension is that the chat, email and voice agents deliver their output straight to a prospective client, which no clause read requires a person to approve first. | How is cl 14.2 human oversight satisfied for a message the web chat or email agent sends to a prospective client before any staff member has seen it? | [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/); [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/) |

## Notes

Binding documents were read for most critical controls: the Australian Terms of Service, the Product Specific Terms (s 4 Grow AI), the dated sub-processor list and the GDPR Data Protection Addendum. Five of the eight sources were read from cache scraped on 2026-09-27 for sibling Clio profiles, so no credits were re-spent on them. Not verified within the five-operation budget: the Australian privacy policy at https://www.clio.com/au/privacy, which is where the terms send the reader for international transfer detail, notifiable data breach handling and retention of personal information; and https://www.clio.com/security/, linked from the Grow AI FAQ. Trust Centre documents are gated behind an access request and were not obtained. facts.australianRegion is recorded as unknown, not yes: Australia is published as one of four hosting locations for Clio Grow and Product Specific Terms s 2.4 refers to a 'selected data processing region', but no document read states that an Australian firm's Grow tenant or its AI processing sits in Australia, and Anthropic, Vapi, Braintrust, AWS Bedrock, OpenAI and Azure Foundry publish no Australian location. facts.trainingOnCustomerContent is recorded as unknown because cl 14.6 permits de-identified aggregated use of AI inputs and outputs to improve the AI Services while barring use of Confidential Information to train generalised large language models: the controlled TRAINING list has no value for that middle position, and the finding carries the clause verbatim. Ownership and headquarters country are left null because no document read establishes them. No ACN or ABN was found in any Clio document read. The voice channel is recorded as region-dependent and no transcription capability is claimed for Australia: Product Specific Terms s 4.1 makes channel availability vary by region, the Australian pricing table lists only web chat and email agents, and the sub-processor list names Vapi Inc for Clio Grow with data location United States. A numbering inconsistency in the vendor's own documents is recorded rather than resolved: Product Specific Terms s 4.2 calls Grow AI an AI Service 'described in Section 15 of the Terms of Service', while the Australian Terms of Service number AI Services as section 14. Training re-mapped to deidentified_aggregate_only on 2026-09-27 when that value was added to the controlled TRAINING list (previously 'unknown'), matching clio-duo: AU ToS cl 14.6 permits de-identified aggregated use to improve the AI Services and prohibits only training of generalised LLMs.

## Sources

- [Clio Australia — Clio Grow product page](https://www.clio.com/au/grow/) (checked 2026-09-27)
- [Clio Australia — Law firm client acquisition (Grow AI) page and Grow AI FAQs](https://www.clio.com/au/features/law-firm-client-acquisition/) (checked 2026-09-27)
- [Clio Australia — Product Specific Terms, s 2 Web Search and s 4 Grow AI](https://www.clio.com/au/tos/product-specific-terms/) (checked 2026-09-27)
- [Clio Australia — Terms of Service (Themis Solutions (Australia) Pty Ltd), including cl 5 security, cl 10 term and termination and cl 14 AI Services](https://www.clio.com/au/tos/) (checked 2026-09-27)
- [Clio — Subprocessors (Exhibit C), last modified 20 August 2026](https://www.clio.com/au/tos/subprocessors/) (checked 2026-09-27)
- [Themis Data Protection Addendum for GDPR Compliance (Exhibit B)](https://www.clio.com/tos/data-protection-addendum/) (checked 2026-09-27)
- [Clio Australia — Pricing, plan comparison table and pricing FAQs](https://www.clio.com/au/pricing/) (checked 2026-09-27)
- [Clio Trust Centre (SafeBase portal): compliance badges, document list and control headings](https://trust.clio.com/) (checked 2026-09-27)

A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.