---
title: "Evatt AI (Dawnview AI Pty Ltd)"
url: "https://ailawframework.com/software/evatt-ai"
type: "software_profile"
site: "AI Law Framework"
id: "evatt-ai"
vendor: "Dawnview AI Pty Ltd"
category: "Legal-specific"
segment: "Legal research"
confidence: "medium"
last_reviewed: "2026-10-10"
---

# Evatt AI (Dawnview AI Pty Ltd)

> Web legal AI assistant marketed to lawyers in Australia and five other jurisdictions that answers legal questions with citations, drafts contracts and flags clauses in uploaded documents from a vendor-stated case and…

Canonical page: https://ailawframework.com/software/evatt-ai  
Last reviewed: 2026-10-10

Site index for agents: https://ailawframework.com/llms.txt

Plan covered: The self-serve Free and paid plans at evatt.ai, with the application at evattai.com: legal research, contract drafting and document review across six named jurisdictions. Team or volume arrangements are by email and need separate review.

Web legal AI assistant marketed to lawyers in Australia and five other jurisdictions that answers legal questions with citations, drafts contracts and flags clauses in uploaded documents from a vendor-stated case and statute database.

## Capabilities

- Legal research
- Contract drafting
- Contract review and redlining

## Key facts

| Fact | Value |
| --- | --- |
| Deployment | SaaS |
| Hosting regions | Unknown |
| Australian region | Unknown |
| Assurance | SOC 2: the vendor's own page states "and never shared. - Zero data retention. - No model training. - Privilege-first infrastructure. - SOC 2 compliant. The Real Cost ## What Is Manual Research _Actually Costing Your Fi" (https://evatt.ai/, checked 2026-10-10). |
| Training on customer content | No |
| Retention | The security page states 'Zero data retention. No model training. Session purged on logout.' and 'Queries and documents aren't retained after your session. No logs kept beyond your control.' Neither the terms and conditions nor the privacy policy read on 2026-09-27 mentions queries, uploaded documents, retention periods, backups or a deletion process, so the retention position rests on marketing pages alone. |
| Legal content coverage | The vendor states a database of 45 million cases and statutes across six jurisdictions: Australia, New Zealand, the United Kingdom, the United States, Canada and India. The retrieval-source list on the product page names Westlaw, LexisNexis, AustLII, CanLII and UK Legislation; the basis on which the two subscription products' content is accessed is not stated. Currency, court coverage and update frequency are not published. |
| Pricing | Free plan at $0 a month with 500 credits, responses to 4,000 words and default templates. Paid plan published at $110 a month with a 14-day free trial, billed monthly after it, unlimited prompts, responses to 10,000 words, premium templates, 24/7 support and multi-step AI agents. The paid plan is labelled 'Enterprise' on the plan card and 'PROFESSIONAL' in the plan detail below it, and a comparison block on the same page states '$50 - $110/mo'. Currency is stated only on the security page, as USD. No contracts, cancel any time, major credit cards accepted; team purchases are by email. A vendor page checked 2026-10-10 states "$0/month". |
| Australian presence | Yes. The contact block in both the terms and conditions and the privacy policy publishes the entity as 'Evatt AI (By Dawnview AI) ABN 79155289858', with an Australian mobile support number and 'Australia (GMT +8 AWST)'. The site footer reads 'Copyright 2025 Dawnview AI Pty Ltd - All rights reserved'. No ACN is published on the six pages read and the ABN was not checked against the Australian Business Register or the ASIC register within the operation budget. The privacy policy states 'Although we operate from Australia, we proudly serve clients in the United States, the United Kingdom, India, Canada, and New Zealand.' The about page records the first prototype in Munich in 2023 and beta testing from Perth, Western Australia in 2024. No hosting region is stated anywhere on the six pages read, so there is no published basis for any Australian data-residency position or for inference running in Australia. |
| Website | https://evatt.ai/ |

## What the research found

| Topic | Status | Finding | Open question | Sources |
| --- | --- | --- | --- | --- |
| Plans and what is in each | Public claim only | The pricing page (read 2026-09-27) publishes two plans. Free: $0 a month, 500 credits a month, responses to 4,000 words, default templates, three cross-checking models, access to the stated 45 million case and statute database. Paid: $110 a month after a 14-day free trial, billed monthly, unlimited prompts, responses to 10,000 words, premium templates, 24/7 technical support, all three functions, 'Multi-step AI agents for better accuracy' and six jurisdictions. The paid plan is titled 'Enterprise' on the card and 'PROFESSIONAL' in the detail list beneath, and the comparison block states '$50 - $110/mo'. | How many plans exist, what are their exact names and prices in Australian dollars, and what is the $50 figure in the comparison block? | [Pricing - Evatt AI](https://evatt.ai/pricing) |
| What the product does | Public claim only | Three functions are published. Legal research returns a jurisdiction-specific answer with clickable citations the vendor states link to the actual case or statute rather than a summary. Contract drafting produces first drafts the vendor describes as jurisdiction-aware with governing law and compliance clauses included. Document review takes an uploaded document, flags risky clauses by severity and identifies missing protections. The vendor describes a verification layer it calls Osiris in three stages: the query is matched only against its database; three separate AI models then check the proposed answer against the source material without seeing each other's outputs, and any disagreement means the answer is flagged and not shown; then a cited answer is returned. Named features also include 'Access to CaseBase' and default or premium templates. | Demonstrate the Osiris flagging path on a question where the database has no answer, and show what the user sees when the three models disagree. | [Legal AI is Not ChatGPT Wearing a Suit - Evatt AI product page](https://evatt.ai/legal-ai); [Pricing - Evatt AI](https://evatt.ai/pricing) |
| Jurisdictions covered | Public claim only | The vendor states coverage of six jurisdictions: Australia, New Zealand, the United Kingdom, the United States, Canada and India. The security page maps each to a privacy framework, listing Australia against the 'Privacy Act 1988 (reformed)' and stating only that the product 'is built to meet each one - not a single, watered-down global standard'. Court coverage, currency and how Australian state and federal material is handled are not published. | Which Australian courts, tribunals and consolidated legislation are in the database, to what date is each current, and how often is it refreshed? | [Legal AI is Not ChatGPT Wearing a Suit - Evatt AI product page](https://evatt.ai/legal-ai); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security) |
| Third-party content licensing | Public claim only | The product page's stage-one retrieval-source list names 'Westlaw' and 'LexisNexis' alongside AustLII, CanLII and UK Legislation as sources the query is matched against. Westlaw and LexisNexis are third-party subscription products, and no page read states the basis on which their content is accessed or licensed. The terms and conditions state that all content and intellectual property rights on the platform 'belong to Evatt AI and/or its licensors' without identifying any licensor. A vendor page checked 2026-10-10 states "$0/month". Unverified, not applied (2026-10-10): pricing claim ROI on Evatt AI plan280xvs $110/mo plan cost (https://evatt.ai/). not a price for this product. Unverified, not applied (2026-10-10): pricing claim At $30,800/month recovered, Evatt AI pays for itself in the first research hour it replaces. (https://evatt.ai/). not a price for this product. | On what licence is Westlaw and LexisNexis content used in your retrieval database, and can you name the licensors and produce the licences? | [Legal AI is Not ChatGPT Wearing a Suit - Evatt AI product page](https://evatt.ai/legal-ai); [Evatt AI Terms & Conditions (undated on the page read)](https://evatt.ai/terms-and-condition); [SOC 2 on the vendor's site](https://evatt.ai/) |
| Release stage and scale | Public claim only | The about page states the first prototype was built in 2023 during a law school exchange in Munich, that about 50 solo practitioners in Australia and New Zealand were beta testers in 2024, that the product launched publicly on Product Hunt in February 2025 with more than 500 signups in the first week, that the Osiris verification layer shipped in late 2025, and that more than 2,500 lawyers across six jurisdictions use it in 2026. The same figure, '2.5k+', appears on the security and pricing pages. None of these figures is independently sourced. | How many paying Australian firms and users are on the product today, and can you provide reference customers we may contact? | [About - Evatt AI (origin, timeline and stated user numbers)](https://evatt.ai/about); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security); [Pricing - Evatt AI](https://evatt.ai/pricing) |
| Vendor content addressed to AI systems, and two page observations | Public claim only | Checked on 2026-09-27: a URL map of evatt.ai returned 31 URLs including the full blog with no /llms.txt, /ai-info or /for-ai path, and the six pages read contain no block addressed to AI models, assistants or crawlers and no instruction on how the product should be described. Two dated page observations are recorded because a firm doing due diligence would want them, with no conclusion drawn from either. First, as at 2026-09-27 the security page displays a customer quotation attributed to 'Zoomerr' whose attribution line beneath reads 'Author NameRole, Firm', which is unfilled placeholder text. Second, the pricing page carries a competitor comparison block, sourced to 'Competitor pricing from public sources and verified user reports - Q1 2025', which sets out other vendors' prices and buying processes. | What is the source and date of each customer quotation on the security page, and of each competitor figure in the pricing comparison block? | [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security); [Pricing - Evatt AI](https://evatt.ai/pricing) |
| Published quality evidence | Public claim only | The published figures are the vendor's own and are not tied to any method or dataset: '45M CASES INDEXED', '3x AI models cross check every answer', '0 Unverified claims published', 'Hallucination rate drops to near-zero', and on the pricing page a saving calculator using 'Evatt's 85% saving'. No evaluation method, benchmark, test set, error rate or third-party assessment is published on any page read, and the three models are not identified. The vendor also states 'Every response Evatt AI provides is anchored in primary legal sources, and includes clickable citations for quick verification.' | Provide the measurement behind '0 unverified claims published', the 85 per cent saving and the near-zero hallucination rate: the query set, the date, the method and who ran it. | [Legal AI is Not ChatGPT Wearing a Suit - Evatt AI product page](https://evatt.ai/legal-ai); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security); [Pricing - Evatt AI](https://evatt.ai/pricing); [About - Evatt AI (origin, timeline and stated user numbers)](https://evatt.ai/about) |
| Task fit and stated limits | Public claim only | The vendor states the product cannot replace lawyers and assists with legal research, contract drafting and document review. Its FAQ cites the American Bar Association's Formal Opinion 512 on lawyers' duties when using generative AI; no Australian professional-conduct rule, practice direction or court notice on AI use is cited anywhere on the pages read, although Australia is the first-named jurisdiction and the product is marketed to Australian lawyers. | Which Australian court practice notes and professional-conduct obligations on generative AI use have you mapped the product against, and where is that published? | [Legal AI is Not ChatGPT Wearing a Suit - Evatt AI product page](https://evatt.ai/legal-ai); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security) |
| Support | Public claim only | The paid plan lists '24/7 technical support'; the Free plan's support entry in the comparison table is blank as published. Published contact points are a support email address, an Australian mobile number and a 'Contact our support' link; team discounts are arranged by email. No response-time commitment, incident contact or security contact was found on any page read. The terms state that a link-approval request may take 2 to 3 weeks to answer. | What are the actual support hours, response targets and escalation path for an Australian firm, and who is the security contact? | [Pricing - Evatt AI](https://evatt.ai/pricing); [Evatt AI Terms & Conditions (undated on the page read)](https://evatt.ai/terms-and-condition); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security) |
| Uploading client documents | Not confirmed | Document review works by uploading a document, so client material leaves the firm. The security page asserts the product is aligned with 'the highest legal-ethical standards' and poses the question 'Could a disclosure to Evatt waive attorney-client privilege?', answering it with per-firm isolation, zero retention and no training. Neither the terms and conditions nor the privacy policy read on 2026-09-27 contains any confidentiality undertaking, data-processing clause, privilege provision or restriction on what may be uploaded, and there is no DPA. The privacy policy addresses only personal information collected through the website and enquiry forms. | Will you sign a confidentiality and data-processing agreement covering uploaded client documents and prompts, and where is the privilege and confidentiality position stated contractually rather than on the security page? | [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security); [Evatt AI Terms & Conditions (undated on the page read)](https://evatt.ai/terms-and-condition); [Evatt AI Privacy Policy (undated on the page read)](https://evatt.ai/privacy-policy) |
| Foundation model providers | Not confirmed | No foundation-model provider is named on any of the six pages read. The vendor refers repeatedly to '3x AI models', 'Powered by 3x AI language models' and 'Three separate AI models check the proposed answer against the source material', and to a verification layer it calls Osiris, without identifying any model, provider, version or hosting arrangement. No customer model choice is described. | Name each of the three models, its provider, the entity you contract with, and the country in which each model endpoint runs. | [Legal AI is Not ChatGPT Wearing a Suit - Evatt AI product page](https://evatt.ai/legal-ai); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security); [Pricing - Evatt AI](https://evatt.ai/pricing) |
| Subprocessors | Not confirmed | No subprocessor list exists on any page read. The privacy policy names categories only: 'Hosting providers, Payment processors, Email or analytics service providers', and states such third parties receive information 'as long as they agree to keep this information confidential'. The three AI models are not identified, so the model providers are also unnamed. The pricing page mentions payment by major credit cards or a 'Link wallet' without naming the payment processor. | Provide a dated subprocessor list with entity, country and purpose, covering model providers, hosting, payments, email and analytics. | [Evatt AI Privacy Policy (undated on the page read)](https://evatt.ai/privacy-policy); [Pricing - Evatt AI](https://evatt.ai/pricing) |
| Training on customer content | Public claim only | The statement is unambiguous but appears only on marketing pages. The security page states 'No model training on client data. Not your prompts, your documents, or your outputs. Evatt never trains on client data - full stop.' and lists 'Train on your data' under 'What we never do'; the pricing page footer line states 'Your data is never used for training'. Neither the terms and conditions nor the privacy policy read on 2026-09-27 mentions model training, prompts or uploaded documents at all, and there is no DPA to carry the commitment. | Put the no-training commitment into the agreement, extended to the three model providers and to any fine-tuning, evaluation or prompt-improvement use, and confirm who can vary it. | [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security); [Pricing - Evatt AI](https://evatt.ai/pricing); [Evatt AI Terms & Conditions (undated on the page read)](https://evatt.ai/terms-and-condition); [Evatt AI Privacy Policy (undated on the page read)](https://evatt.ai/privacy-policy) |
| Feedback and usage data | Not confirmed | No feedback control, rating mechanism or telemetry statement for the product was found on any page read. The privacy policy says personal information may be used to 'Improve Our Software and Website - Gather feedback to enhance user experience and functionality', which is about website and enquiry information rather than queries or documents, and describes cookies used for preferences and analytics. Nothing states whether prompts, answers or usage events are retained for product improvement, which sits in tension with the zero-retention statement on the security page. | What usage data, prompts or outputs do you retain for product improvement or debugging, for how long, and can a firm switch that off? | [Evatt AI Privacy Policy (undated on the page read)](https://evatt.ai/privacy-policy); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security) |
| Retention of queries and documents | Public claim only | The security page states 'Zero data retention - Queries and documents aren't retained after your session. No logs kept beyond your control.' and 'Retain beyond your session' appears under 'What we never do'; the FAQ adds that privilege is maintained 'by erasing your data as soon as you log out'. No period, no backup position and no exception list is given. Neither the terms and conditions nor the privacy policy read on 2026-09-27 mentions retention of queries or documents. The paid plan advertises persistent-sounding features such as premium template access, and the Free plan a monthly credit allowance, without explaining what is stored to support them. | Define 'session' and 'zero retention' precisely: what is written to disk or to logs during a session, what survives logout, and what is in backups? | [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security); [Pricing - Evatt AI](https://evatt.ai/pricing); [Evatt AI Terms & Conditions (undated on the page read)](https://evatt.ai/terms-and-condition); [Evatt AI Privacy Policy (undated on the page read)](https://evatt.ai/privacy-policy) |
| Deletion and erasure | Not confirmed | No deletion process is published. The security page relies on session purge at logout rather than a deletion right, and the privacy policy contains no data-subject request process, no erasure right and no timeframe, offering only a support email address as a contact point. Account closure is described only as cancelling a subscription, with no statement about what happens to stored data. | How does a firm request deletion of its account, uploaded documents and query history, within what period, and will you certify deletion in writing? | [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security); [Evatt AI Privacy Policy (undated on the page read)](https://evatt.ai/privacy-policy); [Pricing - Evatt AI](https://evatt.ai/pricing) |
| Vendor access to content | Not confirmed | The security page raises 'Who has access to your data?' as one of three questions it says firms are right to ask, and answers it with architecture claims: 'Each firm's data lives in its own isolated environment - no shared indices, no cross-tenant leakage', and 'Share across firms' and 'Sell or expose your data' under 'What we never do'. No page read states whether vendor personnel can read queries or uploaded documents, under what approval, or whether such access is logged. | Can any of your staff or contractors read a firm's queries or uploaded documents, under what approval, and is that access logged and available to the firm? | [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security) |
| Access control and administration | Not confirmed | Nothing on the pages read describes single sign-on, multi-factor authentication, roles, seat administration or an audit log. Access is by login at evattai.com; the vendor states no credit card is needed to start the Free plan, that setup takes 'under 4 minutes', and that there is no seat minimum, with team purchases arranged by email. The security page uses the phrase 'object-level security' without defining it. | Does the product support single sign-on, enforced multi-factor authentication, firm-level administration and an exportable audit log of who ran which query? | [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security); [Pricing - Evatt AI](https://evatt.ai/pricing); [About - Evatt AI (origin, timeline and stated user numbers)](https://evatt.ai/about) |
| Encryption | Public claim only | The security page states 'Every query and document is encrypted in transit and at rest with AES-256-GCM. Nothing moves or sits in the clear.' and lists 'AES-256-GCM' among its standards. No key-management arrangement, customer-managed key option or protocol version for transport is described, and the claim appears only on a marketing page with no report or certificate behind it. | Who holds and rotates the encryption keys, are customer-managed keys available, and which independent report evidences the AES-256-GCM implementation? | [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security) |
| Independent security assurance | Public claim only | The security page lists four items under 'Certifications & standards' and states the vendor is 'clear about what's certified versus in progress', without labelling which is which: 'SOC 2 Type II - Security, availability, and confidentiality controls, independently audited', 'AES-256-GCM', 'GDPR compliant', and 'ISO/IEC 27001 - Information-security management aligned to the standard'. 'Aligned to the standard' is not a certification claim. No auditor, report period, certificate number or scope is named for the SOC 2 Type II item, and security documentation is available only through a meeting-booking link. The FAQ separately refers to 'complying with SOC2 Type 2 data encryption'. SOC 2: the vendor's own page states "and never shared. - Zero data retention. - No model training. - Privilege-first infrastructure. - SOC 2 compliant. The Real Cost ## What Is Manual Research _Actually Costing Your Fi" (https://evatt.ai/, checked 2026-10-10). | Provide the SOC 2 Type II report with auditor, period and scope, and state plainly whether ISO/IEC 27001 certification has been granted, is in progress, or is an alignment claim only. | [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security); [SOC 2 on the vendor's site](https://evatt.ai/) |
| Contract terms, entity and forum | Public claim only | The terms and conditions read on 2026-09-27 carry no version or date. Their six clauses cover cookies, a licence limiting use of content to 'personal, non-commercial reference only', hyperlinking permissions, an 'as is' disclaimer of warranties as to completeness, reliability and availability, changes effective immediately on posting, and a contact block publishing 'Evatt AI (By Dawnview AI) ABN 79155289858', an Australian mobile number and 'Australia (GMT +8 AWST)'. There is no data-processing, confidentiality, security, retention, service-level, indemnity or liability clause, no governing law or jurisdiction clause, and no subscription or payment terms, despite the pricing page selling a monthly subscription. The site footer names Dawnview AI Pty Ltd; no ACN is published. | Provide a subscription agreement and DPA with governing law, confidentiality, security obligations, liability and termination, confirm the full contracting entity name and its ACN, and state whether the licence clause limiting use to 'personal, non-commercial reference' is intended to apply to fee-earning legal work. | [Evatt AI Terms & Conditions (undated on the page read)](https://evatt.ai/terms-and-condition); [Pricing - Evatt AI](https://evatt.ai/pricing); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security) |
| Hosting region and cross-border transfers | Not confirmed | No hosting region, data-centre location or processing country is stated anywhere on the six pages read, including the security page. The privacy policy states 'Although we operate from Australia, we proudly serve clients in the United States, the United Kingdom, India, Canada, and New Zealand', and names hosting providers only as a category of third party. There is no Australian Privacy Principle 8 statement, no standard contractual clauses and no transfer-safeguard description, and the security page's jurisdiction table asserts the product 'is built to meet' each framework without naming a location. | In which country are queries and uploaded documents stored and processed, in which country does each of the three models run, and is an Australia-only option available? | [Evatt AI Privacy Policy (undated on the page read)](https://evatt.ai/privacy-policy); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security) |
| Incident notification | Not confirmed | No breach-notification commitment, period or incident history was found in the terms and conditions, the privacy policy or the security page. The privacy policy states that no method of electronic storage or transmission 'can be guaranteed to be 100% secure'. The security page's jurisdiction table lists 'mandatory breach notification' as part of the Australian and New Zealand frameworks the product is said to be built to meet, which is a description of the law rather than an undertaking to the customer. | What is your contractual notification period from discovery of an incident affecting our documents or queries, including an incident at a hosting or model provider? | [Evatt AI Terms & Conditions (undated on the page read)](https://evatt.ai/terms-and-condition); [Evatt AI Privacy Policy (undated on the page read)](https://evatt.ai/privacy-policy); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security) |
| Change notice | Public claim only | The terms state: 'Evatt AI reserves the right to modify these Terms at any time. Any changes become effective immediately upon posting. If we make significant changes, we will post a notice on our website or otherwise inform you.' The privacy policy contains the same mechanism for itself. Neither document is dated or versioned on the page read. Nothing constrains changes to the three unnamed models, to the Osiris layer or to the database, and no notice period applies to them. | What advance written notice will we get before the models, the verification layer, the database or the terms change, and will you maintain a dated version history? | [Evatt AI Terms & Conditions (undated on the page read)](https://evatt.ai/terms-and-condition); [Evatt AI Privacy Policy (undated on the page read)](https://evatt.ai/privacy-policy) |
| Export and exit | Not confirmed | No export capability is described for research answers, drafts, document-review findings or query history, and no exit provision appears in the terms. Cancellation is described on the pricing page as available at any time, including during the 14-day trial, with the FAQ adding that downgrading is done by cancelling the subscription. Nothing states what happens to a firm's data on cancellation, beyond the general session-purge claim on the security page. | On cancellation, what can we export, in what format, and what is deleted and when? | [Pricing - Evatt AI](https://evatt.ai/pricing); [Evatt AI Terms & Conditions (undated on the page read)](https://evatt.ai/terms-and-condition); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security) |
| Connectors and integrations | Not confirmed | No integration with Microsoft Word, Outlook, a document-management system or a practice-management system is described on any page read. Document review is performed by uploading a file into the web application, and the vendor presents the product as 'All three in one workspace. No switching tools, databases or subscriptions.' No application programming interface is advertised. The terms include a section on third parties linking to the website, which is unrelated to product integration. | Are there any Word, Outlook, document-management or practice-management integrations or an API, and what data would each transfer? | [Legal AI is Not ChatGPT Wearing a Suit - Evatt AI product page](https://evatt.ai/legal-ai); [Evatt AI Terms & Conditions (undated on the page read)](https://evatt.ai/terms-and-condition); [Pricing - Evatt AI](https://evatt.ai/pricing) |
| Open-web access | Public claim only | The product page states: 'Your question is matched exclusively against our database of cases and statutes - never the open internet, never Wikipedia, never a legal blog', and the FAQ states the product's 'training is restricted to a verified database of 45 million+ cases and statutes'. The exclusion is asserted on marketing pages only and the database itself is not described in verifiable terms, beyond the retrieval-source list naming Westlaw, LexisNexis, AustLII, CanLII and UK Legislation. | Does any part of the product issue an outbound internet request at query time, including for citation links, and can you evidence the closed-corpus claim? | [Legal AI is Not ChatGPT Wearing a Suit - Evatt AI product page](https://evatt.ai/legal-ai); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security) |
| Agent actions and confirmation | Public claim only | The paid plan lists 'Multi-step AI agents for better accuracy' on the pricing page, with no further description of what those agents do, what tools they can call or whether any step runs without the user. Everything else described on the pages read returns content to the user inside the application: answers with citations, drafts, and clause flags by severity. Nothing describes the product sending email, filing, or writing to any external system. | What do the multi-step agents actually do, which steps run without a user action, and can any of them reach outside the session? | [Pricing - Evatt AI](https://evatt.ai/pricing); [Legal AI is Not ChatGPT Wearing a Suit - Evatt AI product page](https://evatt.ai/legal-ai) |
| Human review before use | Public claim only | The vendor states every citation is clickable and traceable to the primary source, that 'If any model cannot find a supporting source, the answer is flagged - not published', and that the product 'Flags uncertainty - never presents unsupported claims as fact'. Its FAQ states the product cannot replace lawyers. No product control requiring a named reviewer, sign-off or recorded verification before an output is used is described, and the terms contain no clause allocating responsibility for checking outputs. | What in-product control records that a lawyer has opened the cited authority before an answer is relied on, and can that be made mandatory for a firm? | [Legal AI is Not ChatGPT Wearing a Suit - Evatt AI product page](https://evatt.ai/legal-ai); [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security); [Evatt AI Terms & Conditions (undated on the page read)](https://evatt.ai/terms-and-condition) |

## Notes

Six pages read, including both documents the vendor presents as binding: the terms and conditions and the privacy policy. Both were reached, and that is the central finding rather than a gap: neither mentions queries, uploaded documents, model training, retention, deletion, security obligations, liability, governing law or jurisdiction, and there is no DPA, subprocessor list or trust centre on the site. Every material data-handling statement, including zero retention, no training, per-firm isolation, AES-256-GCM encryption and SOC 2 Type II, sits on the security marketing page only, which is why those considerations are vendor_claim and facts.assurance is empty. Two Phase 2 open items are now closed. The entity: the terms and privacy contact blocks publish 'Evatt AI (By Dawnview AI) ABN 79155289858' and the footer 'Dawnview AI Pty Ltd'; no ACN is published and the ABN was not checked against the Australian Business Register or ASIC within the four-operation budget. Pricing: the pricing page publishes $0 and $110 a month with no currency stated, the security page states 110 USD a month, and the same pricing page labels the paid plan 'Enterprise' on the card and 'PROFESSIONAL' in the detail beneath, so the roster's note that the product is marketed in Australian dollars is not supported by anything read; the currency question stands. Still not established and not guessed: hosting region and whether any inference runs in Australia, which is unstated on all six pages and is the most important open Australian fact here; the identity of the three models and of any subprocessor; and the status of the SOC 2 Type II report and the ISO/IEC 27001 position. facts.trainingOnCustomerContent is 'no' because that is the vendor's clear and repeated published position, with the trainingUse consideration recording that it is a claim on marketing pages and absent from both binding documents. Carried forward from Phase 2 unchanged: category, segment, all three capability values and the AI position as the whole of the product. No people are named anywhere in this profile; the about page's founder and naming narrative is left out for that reason. CONFIDENCE is recorded as low deliberately: of the 20 critical controls, 10 ended not_verified, 7 rest on vendor claims and only two (contract and changes) are established by a published document, so a firm should treat almost the whole control set as unanswered until the vendor responds. Recheck 2026-10-10: 2 claims left unverified and not applied. Confidence raised from low to medium on 2026-10-10 because a security or hosting quote on the vendor's own domain was applied.

## Sources

- [Legal AI is Not ChatGPT Wearing a Suit - Evatt AI product page](https://evatt.ai/legal-ai) (checked 2026-09-27)
- [Legal AI, crafted for security - Evatt AI security page](https://evatt.ai/security) (checked 2026-09-27)
- [Pricing - Evatt AI](https://evatt.ai/pricing) (checked 2026-09-27)
- [Evatt AI Terms & Conditions (undated on the page read)](https://evatt.ai/terms-and-condition) (checked 2026-09-27)
- [About - Evatt AI (origin, timeline and stated user numbers)](https://evatt.ai/about) (checked 2026-09-27)
- [Evatt AI Privacy Policy (undated on the page read)](https://evatt.ai/privacy-policy) (checked 2026-09-27)
- [SOC 2 on the vendor's site](https://evatt.ai/) (checked 2026-10-10)

A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.