Product and intended use
Define the configuration, people, information and tasks being assessed.
Plan and modules
Public claim only
The page describes one matter-management module for in-house teams, deployed into Microsoft 365, and says a team can be running in one day. It does not name tiers. A linked contract-management page was not read.
Ask: Is matter management the whole subscription, and is the contract module a separate product?
Deployment and hosting
Public claim only
Cubed is described as a Microsoft Power Platform solution deployed directly into the customer's Microsoft 365 environment, using Outlook and SharePoint. The page says data stays in the customer's Microsoft ecosystem. It does not name an Australian region of its own.
Ask: Which Microsoft tenant and region will hold matter data, and does any Cubed service outside that tenant receive it?
Product surfaces
Public claim only
The page describes intake through a Dynamic Microsoft Form, matter assignment and status, automated email filing to the matter, SharePoint document storage, dashboards and Power BI or Excel export, alerts, and an activity timeline. No generative model is named.
Ask: Which of those steps are configuration in our tenant, and which depend on a Law Squared-hosted service?
Jurisdiction and legal content
Not confirmed
The page does not name a jurisdiction, a legal-research collection or an Australian hosting region.
Ask: Is Cubed sold for Australian in-house teams, and where does the Power Platform environment sit?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Client authority and client-facing use
Not confirmed
The page does not discuss client authority. Intake is described for legal matters inside the organisation.
Ask: Can an external client submit the form, and what data-use notice do they see?
Model providers
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on model providers.
Ask: What is the written position on model providers for the deployment we would buy, and which contract or policy states it?
Subprocessors
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on subprocessors.
Ask: What is the written position on subprocessors for the deployment we would buy, and which contract or policy states it?
Training on customer content
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on training on customer content.
Ask: What is the written position on training on customer content for the deployment we would buy, and which contract or policy states it?
Feedback and secondary use
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on feedback and secondary use.
Ask: What is the written position on feedback and secondary use for the deployment we would buy, and which contract or policy states it?
Retention
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on retention.
Ask: What is the written position on retention for the deployment we would buy, and which contract or policy states it?
Deletion and export
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on deletion and export.
Ask: What is the written position on deletion and export for the deployment we would buy, and which contract or policy states it?
Human access to customer content
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on human access to customer content.
Ask: What is the written position on human access to customer content for the deployment we would buy, and which contract or policy states it?
Access control
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on access control.
Ask: What is the written position on access control for the deployment we would buy, and which contract or policy states it?
Encryption
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on encryption.
Ask: What is the written position on encryption for the deployment we would buy, and which contract or policy states it?
Assurance and certifications
Public claim only
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on assurance and certifications. GDPR: the vendor's own page states "olicy+-+Australia+and+New+Zealand+-+15112023.pdf). If you live in the UK or Europe, please see our [GDPR Policy](https://static1.squarespace.com/static/621325cea6138f0a61d0885b/t/64a86" (https://www.cubedlegal.com/intake-matter-management, checked 2026-10-10).
Ask: What is the written position on assurance and certifications for the deployment we would buy, and which contract or policy states it?
Contract, DPA and liability
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on contract, dpa and liability.
Ask: What is the written position on contract, dpa and liability for the deployment we would buy, and which contract or policy states it?
Cross-border transfers
Public claim only
The page says keeping data in the customer's Microsoft ecosystem eliminates the risk of it leaving that ecosystem. It does not name the tenant region.
Ask: Confirm that no Cubed subprocess stores a copy outside our Microsoft tenant, and record the tenant region.
Incidents and breach notice
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on incidents and breach notice.
Ask: What is the written position on incidents and breach notice for the deployment we would buy, and which contract or policy states it?
Changes to terms and models
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on changes to terms and models.
Ask: What is the written position on changes to terms and models for the deployment we would buy, and which contract or policy states it?
Exit, return and deletion
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on exit, return and deletion.
Ask: What is the written position on exit, return and deletion for the deployment we would buy, and which contract or policy states it?
Connectors and external tools
Public claim only
The connectors described are Microsoft 365 services in the customer's tenant. No third-party AI connector is named.
Ask: List every Power Automate or connector flow that can read mail or documents, and who can edit those flows.
Web search and open-web grounding
Not confirmed
The pages read on 2026-10-10 (the Cubed intake and matter-management page) do not state a position on web search and open-web grounding.
Ask: What is the written position on web search and open-web grounding for the deployment we would buy, and which contract or policy states it?
Actions the system can take
Public claim only
The page says the form can create and assign matter records and automate notifications and email filing. It does not say a lawyer must approve each automated file.
Ask: Which automated actions run as soon as a form is submitted, and which wait for a person?
Human review of output
Not confirmed
No review step for automated filing or notifications is described.
Ask: Who confirms a new matter and its email filings before they are treated as the record?