---
title: "InfoTrack (Tilly AI and MCP) (InfoTrack Pty Limited)"
url: "https://ailawframework.com/software/infotrack"
type: "software_profile"
site: "AI Law Framework"
id: "infotrack"
vendor: "InfoTrack Pty Limited"
category: "Legal-specific"
segment: "Practice management"
confidence: "medium"
last_reviewed: "2026-09-21"
---

# InfoTrack (Tilly AI and MCP) (InfoTrack Pty Limited)

> Australian legal-search and conveyancing platform with an agentic assistant (Tilly) that acts only with explicit approval at each step, plus MCP for AI agents.

Canonical page: https://ailawframework.com/software/infotrack  
Last reviewed: 2026-09-21

Site index for agents: https://ailawframework.com/llms.txt

Plan covered: Australian InfoTrack Search Platform plus Tilly AI agent, iTrack MCP and contract-review features. Privacy 12 March 2026. New General Terms 1 August 2026 (new clients) / 1 September 2026 (existing).

## Capabilities

- Intake and triage
- Matter management
- Contract review and redlining
- Agentic workflows
- Compliance monitoring

## Key facts

| Fact | Value |
| --- | --- |
| Deployment | SaaS |
| Hosting regions | Australia |
| Australian region | Yes |
| Assurance | ISO 27001:2022 |
| Training on customer content | Unknown |
| Retention | Privacy: stored in Australia. GTCs clause 18 simplifies Retained Information on termination. Live numbered schedule not extracted. Criminal-history and InfoTrackID data must not leave Australia. |
| Integrations | Practice management systems, PEXA, Claude Cowork (named on site nav), MCP (infotrack.ai) |
| Legal content coverage | Australian property, company (ASIC), bankruptcy (AFSA) and related official searches. Tilly assists workflows; not a substitute for authorised reports. |
| Pricing | Search/product orders in AUD under General Terms. Tilly/MCP pricing not published on pages reviewed. |
| Australian presence | Yes. InfoTrack Pty Limited ABN 36 092 724 251. Personal information stored in Australia. Vietnam read-only development access under Australian supervision. Currency AUD. |
| Website | https://www.infotrack.com.au |

## What the research found

| Topic | Status | Finding | Open question | Sources |
| --- | --- | --- | --- | --- |
| Search platform plus Tilly/MCP | Public claim only | InfoTrack Pty Limited (ABN 36 092 724 251). Product includes searches, Tilly AI agent, contract review, MCP (infotrack.ai) and Claude Cowork listing. New GTCs 1 Aug/1 Sep 2026. | Which of Tilly, MCP and contract review are on our account, and on the new GTCs? | [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy); [InfoTrack — Tilly AI agent](https://www.infotrack.com.au/tilly-ai-agent/); [InfoTrack — Legal / contracts index](https://www.infotrack.com.au/legal) |
| Australian hosting | Public claim only | Privacy 12 March 2026: personal information stored in a secured location in Australia on infrastructure managed by InfoTrack. Criminal-history and InfoTrackID data must not be stored offshore. | Confirm Tilly/MCP inference also stays in Australia. | [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) |
| Tilly agent with per-step approval | Public claim only | Tilly: agentic model; acts only with explicit approval at each step; workflows and matter management. Site also lists MCP, contract review and Claude Cowork. | Which Tilly actions are live in our state, and can we disable MCP? | [InfoTrack — Tilly AI agent](https://www.infotrack.com.au/tilly-ai-agent/); [InfoTrack — Legal / contracts index](https://www.infotrack.com.au/legal) |
| Australian official searches | Public claim only | Privacy: property searches/certificates, ASIC company searches, AFSA bankruptcy searches. Australian-specific GTC schedule (AUD, Privacy Act). | List every jurisdiction Tilly can order searches in. | [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy); [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms) |
| AUD product orders | Public claim only | Australian-specific terms: AUD. Two-tier liability cap in the new GTCs. No public Tilly seat price. | What does Tilly/MCP cost per matter or per seat? | [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms); [InfoTrack — Legal / contracts index](https://www.infotrack.com.au/legal) |
| PMS, PEXA, MCP | Public claim only | Site: practice-management integration and PEXA. MCP agreement for integrator/AI-agent connections. Claude Cowork named in nav. | Which PMS connectors and MCP clients will we allow? | [InfoTrack — Legal / contracts index](https://www.infotrack.com.au/legal); [InfoTrack — home / solutions nav](https://www.infotrack.com.au) |
| Privacy Officer contact | Public claim only | Privacy Officer contact in the Privacy Policy. No published Tilly support SLA. | What are support hours for a failed Tilly search order? | [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) |
| No independent bench | Not confirmed | No independent hallucination benchmark for Tilly found. Official searches are sourced products; agent text is not. | May we trial Tilly on a sample of our conveyancing files with a scored error log? | [InfoTrack — Tilly AI agent](https://www.infotrack.com.au/tilly-ai-agent/) |
| Search orders with human approval | Public claim only | Tilly acts only with explicit approval at each step. Fit is Australian search/conveyancing workflow assistance, not unsupervised legal advice. | Will we require a lawyer click before every paid search? | [InfoTrack — Tilly AI agent](https://www.infotrack.com.au/tilly-ai-agent/) |
| Privacy Act; client data licence | Public claim only | GTCs: Client owns Client Data; licence to InfoTrack solely to provide the products, not for other purposes without consent or a legal basis. Privacy Act and APPs apply. | What do we tell clients when Tilly reads matter context to suggest searches? | [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms); [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) |
| Not named | Not confirmed | Tilly is described as an agentic model. No OpenAI/Anthropic/Google name on the Tilly or privacy pages reviewed. | Name the model provider and region for Tilly and MCP. | [InfoTrack — Tilly AI agent](https://www.infotrack.com.au/tilly-ai-agent/); [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) |
| No public dated list | Not confirmed | Privacy lists categories (marketing, hosts) and Vietnam read-only development access. No dated Tilly-model subprocessor table. | Provide the current list with locations, including the Tilly inference provider. | [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) |
| Client Data use limited | Public claim only | GTC 8.2: must not use Client Data for any other purpose without prior written consent (or a legal basis for Personal Information). No express no-training clause for Tilly was found. Privacy allows analytics of activity on the systems. | Confirm in writing that Tilly prompts and matter text are not used to train models. | [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms) |
| Analytics of activity | Public claim only | GTCs allow gathering analytics on activity, product use and Client Data (wording in the terms extract). Privacy: ISMS and improvement of products. | Can Tilly prompts appear in analytics, and can we opt out? | [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms) |
| AU storage; Retained Information on exit | Public claim only | Privacy: stored in Australia. New GTCs clause 18 simplifies Retained Information on termination. Live default not numbered. | State default retention for Tilly chats, search packets and MCP logs. | [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy); [InfoTrack — Legal / contracts index](https://www.infotrack.com.au/legal) |
| Cease use on termination | Public claim only | GTCs: on termination InfoTrack must immediately cease using Client Data (with Retained Information exceptions). Certified-deletion SLA not numbered in the extract. | Will you certify deletion of Tilly logs and MCP traces within 30 days? | [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms) |
| AU teams; Vietnam read-only | Public claim only | Privacy: overseas people (Vietnam) may have read-only access for development under secure protocols and Australian-team supervision. Employees/contractors must comply with the ISMS. | Is Tilly support access logged, and can we forbid Vietnam access to our tenant? | [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) |
| User credentials | Public claim only | GTC 22.3: protect credentials; do not share; client responsible for all use. SSO/MFA for Tilly not described on pages reviewed. | Is SSO/MFA available for Tilly and the portal? | [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms) |
| TLS and AES-256 | Public claim only | Privacy: encrypted in transit using current TLS and at rest using AES-256. | Does Tilly inference use the same encryption, including MCP? | [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) |
| ISO 27001:2022 in GTCs; ISMS 2013 in privacy | Public claim only | New GTCs clause 22: each party must maintain controls that meet or exceed ISO 27001:2022. Privacy (12 Mar 2026) describes an ISMS with full consideration of ISO27001:2013. Treat the GTC standard as the newer contractual claim; certificate not inspected. | Provide the current ISO 27001 certificate with date and scope covering Tilly/MCP. | [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms); [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) |
| AU GTCs plus MCP agreement | Public claim only | General Terms (AU schedule, Privacy Act). iTrack MCP Agreement from 27 May 2026 for AI-agent connections. Privacy 12 March 2026. No standalone public DPA URL. | Will Tilly and MCP be on the new GTCs plus the MCP agreement, with a 72-hour breach clause? | [InfoTrack — Legal / contracts index](https://www.infotrack.com.au/legal); [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms); [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) |
| AU storage; limited overseas access | Public claim only | Privacy: stored in Australia; no present disclosure to overseas organisations, but multinational groups in UK/US/NZ may receive information in Australia; Vietnam read-only development access. InfoTrackID and criminal-history data must not leave Australia. | Does Tilly inference or MCP ever leave Australia? | [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) |
| 72-hour GTC notice | Public claim only | GTC 21: notify the other party in writing without undue delay and no later than 72 hours after becoming aware of a suspected Notifiable Data Breach; cooperate on OAIC notifications. | Who is notified for a Tilly incident, and does 72 hours apply to MCP integrators? | [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms) |
| Continued use accepts new GTCs | Public claim only | Existing clients accept new GTCs by continued use from 1 September 2026; may close the account before then. Privacy may be revised by posting. | Will Tilly model-provider changes be notified in writing? | [InfoTrack — Legal / contracts index](https://www.infotrack.com.au/legal); [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) |
| Cease use; Retained Information | Public claim only | On termination, cease using Client Data; clause 18 Retained Information is simplified in the new GTCs. Export of Tilly history not described. | What export is available for Tilly conversations and search history? | [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms); [InfoTrack — Legal / contracts index](https://www.infotrack.com.au/legal) |
| MCP and Claude Cowork | Public claim only | iTrack MCP Agreement governs connecting an integrator or AI agent to the InfoTrack MCP Server. Site nav names Claude Cowork. Those paths can send client data to third-party assistants. | Which MCP clients are approved, and how do we disable Claude Cowork? | [InfoTrack — Legal / contracts index](https://www.infotrack.com.au/legal); [InfoTrack — Tilly AI agent](https://www.infotrack.com.au/tilly-ai-agent/) |
| Official searches, not open web | Public claim only | Product is official Australian searches. Whether Tilly also browses the open web was not stated. | Can Tilly browse the open web, and can we disable it? | [InfoTrack — Tilly AI agent](https://www.infotrack.com.au/tilly-ai-agent/); [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) |
| Explicit approval each step | Public claim only | Tilly page: the agent acts only with explicit approval at each step. MCP may let other agents call InfoTrack products under the MCP agreement. | Can MCP clients place paid searches without a human click in InfoTrack’s UI? | [InfoTrack — Tilly AI agent](https://www.infotrack.com.au/tilly-ai-agent/); [InfoTrack — Legal / contracts index](https://www.infotrack.com.au/legal) |
| Per-step approval claimed | Public claim only | Tilly: explicit approval at each step. GTCs still treat User Credentials use as the client’s responsibility. | Is the approval logged against a named user for every search? | [InfoTrack — Tilly AI agent](https://www.infotrack.com.au/tilly-ai-agent/); [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms) |

## Notes

Australian hosting and Privacy Act GTCs. Tilly model provider unnamed. ISO 27001:2022 in new GTCs versus ISMS described against ISO27001:2013 in privacy. Vietnam read-only development access. MCP is a separate agreement.

## Sources

- [InfoTrack — General Terms](https://www.infotrack.com.au/legal/GeneralTerms) (checked 2026-09-21)
- [InfoTrack — Tilly AI agent](https://www.infotrack.com.au/tilly-ai-agent/) (checked 2026-09-21)
- [InfoTrack — Privacy Policy (12 March 2026)](https://www.infotrack.com.au/legal/PrivacyPolicy) (checked 2026-09-21)
- [InfoTrack — Legal / contracts index](https://www.infotrack.com.au/legal) (checked 2026-09-21)
- [InfoTrack — home / solutions nav](https://www.infotrack.com.au) (checked 2026-09-21)

A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.