Product and intended use
Define the configuration, people, information and tasks being assessed.
Plan
Public claim only
Gemini Enterprise for Legal (preview as at 25 Aug 2026) is an industry pack on Gemini Enterprise: legal skills, MCP connectors, partner agents and a governance control plane (VPC, CMEK). Distinct from consumer Gemini and from standard Gemini for Workspace. Launch customers named were US/UK firms.
Ask: Are we buying Gemini for Workspace, Gemini Enterprise, or the Legal pack, and is it generally available in Australia?
Deployment
Public claim only
Runs on Google Cloud / Gemini Enterprise. Control plane advertised as enforcing VPC and CMEK and private data isolation. Australian region availability for the Legal pack was not stated on the launch blog.
Ask: Which Google Cloud region will host our Legal tenant, and is CMEK on by default?
Legal skills
Public claim only
Skills advertised: contract review/redlining, playbook creation, regulatory scanning, legal research, DSAR, redaction, NDA drafting. Connectors: Workspace, Microsoft 365, iManage, NetDocuments, Docusign, Everlaw, Relativity, Thomson Reuters HighQ, CourtListener, Harvey, Legora, Solve Intelligence.
Ask: Which skills and connectors are in our preview/GA SKU?
Australia
Not confirmed
Launch customers named were not Australian firms. CourtListener is US case law. No AU primary-law collection was described. Google has Australian infrastructure; Legal-pack residency was not specified.
Ask: Is Gemini Enterprise for Legal offered to Australian tenants with an AU region?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Client-facing
Not confirmed
Sold to firms and legal departments. Partner Courtroom5 is a public-litigant dataset. No AU unqualified-practice controls documented.
Ask: Will any client-facing agent be enabled?
Model provider
Public claim only
Google Gemini models on Google Cloud. Partner agents (Harvey, Legora, Deloitte, etc.) may call other models — confirm per agent.
Ask: Will any enabled partner agent send our data to a non-Google model?
Subprocessors
Not confirmed
Google Cloud subprocessors apply; partner connectors are additional processors. No Legal-pack-specific published list was found in this review.
Ask: Provide the subprocessor list for Gemini Enterprise for Legal including each enabled connector.
Training
Public claim only
Launch blog: client data, playbooks, custom agents and outputs stay private and are never used to train or fine-tune Google's foundation models. This is a blog statement; put it in the contract.
Ask: Confirm no-training in the signed Cloud/Workspace terms for this pack, including logs and evaluations.
Feedback
Not confirmed
No Legal-pack feedback-training article was found.
Ask: Is any thumbs-up/bug channel allowed to use our legal content?
Retention
Not confirmed
Not specified on the launch blog beyond private isolation.
Ask: What retention applies to prompts, agent transcripts, connector caches and logs?
Deletion
Not confirmed
Not specified on the launch blog.
Ask: Matter-level deletion, backup purge and a deletion certificate — confirm in the DPA.
Vendor access
Not confirmed
Not specified beyond enterprise governance claims.
Ask: When can Google or a partner engineer read our matter content, and is it logged?
Access control
Public claim only
Inherits DMS/eDiscovery permissions; Workspace/Cloud IAM; CMEK and VPC advertised.
Ask: SSO/SCIM via Google Cloud/Workspace — confirm for the Legal pack admin plane.
Encryption
Public claim only
CMEK advertised on the control plane. Google Cloud default encryption otherwise. Details not in the launch blog.
Ask: Confirm encryption in transit/at rest and CMEK coverage of prompts and indexes.
Assurance
Public claim only
Google Cloud holds extensive ISO/SOC certifications at platform level. Legal-pack scope was not separately evidenced.
Ask: Are Gemini Enterprise for Legal and its connectors inside our Google Cloud SOC 2/ISO scope?
Contract
Not confirmed
Likely Google Cloud terms plus Gemini Enterprise addendum. Not inspected.
Ask: Provide the MSA/DPA covering this pack, liability cap, and law/forum.
Transfers
Not confirmed
Google Cloud regions exist in Australia; Legal-pack default region unknown. Connectors may send data to US legal-tech partners.
Ask: Feature-by-feature location map including Harvey/Legora/TR connectors.
Incidents
Not confirmed
Google Cloud incident process likely applies; not confirmed for this pack.
Ask: Breach notice timeline and NDB cooperation for Gemini Enterprise for Legal?
Changes
Public claim only
Preview as at Aug 2026; partner agents will be added. Launch customers named.
Ask: What notice before a new partner agent is switched on in our tenant?
Exit
Not confirmed
Not specified.
Ask: Export of agents, playbooks, transcripts and connector configs, then deletion.
Connectors
Public claim only
MCP connectors to iManage, NetDocuments, M365, Workspace, eDiscovery and research tools, claimed permission-bound. Each connector is an additional disclosure.
Ask: List connectors that will be on and confirm unused stay off.
Web search
Not confirmed
CourtListener is a connected corpus. Open-web search default for the Legal pack was not stated.
Ask: Can open-web search be disabled while leaving DMS connectors on?
Agents
Not confirmed
Product is agentic: DSAR compilation, redlines, policy drafts. Human confirmation for high-impact actions was not specified.
Ask: Which agent actions require explicit lawyer confirm, and how do we halt them?
Oversight
Public claim only
Blog says outputs held to verifiable grounding with traceable citations and practitioner review for policy drafts/redaction. No forced gate documented.
Ask: What audit log of agent actions can we export?