Product and intended use
Define the configuration, people, information and tasks being assessed.
Plan, contracting entity and modules
Public claim only
Contracting entity is Ivo AI, Inc. (San Francisco; formerly Latch, rebranded 2024). Public Terms (20 November 2024) sit with an unpublished Services Agreement/Order Form. Privacy: when Ivo processes personal information for a Company it follows the Agreement, not the website Privacy Policy. Terms require a DPA before submitting Personal Data governed by GDPR. Modules described on llms-info: Review, Assistant, Intelligence.
Ask: Provide the Services Agreement and DPA that will govern our tenancy, and confirm which of Review, Assistant and Intelligence (including EDGAR/statutory research) are in scope.
Deployment model
Public claim only
SaaS. Review and Assistant run in Microsoft Word; homepage also lists Google Docs. Intelligence indexes existing stores without requiring migration. No private-cloud or on-premises option was found. Subprocessors for cloud and models are listed in the United States.
Ask: Is any non-US or private-cloud tenancy available, and which Office/Google Docs clients (Windows, Mac, web) are supported?
Product features in scope
Public claim only
Review: playbook redlines as Word track changes, multi-agent clause analysis, issue lists. Assistant: natural-language redlines, cross-contract Q&A, EDGAR/statutory research, comparison memos. Intelligence: AI repository over Salesforce/SharePoint/Drive/OneDrive/Dropbox, relationship mapping, risk dashboards. llms-info also describes 'intelligent benchmarks' against historical Ivo customer data and market standards.
Ask: Which modules and connectors are on the Order, and are intelligent benchmarks (historical customer data) enabled or off?
Governing law and Australian coverage
Public claim only
Terms: California law, AAA arbitration (individual), small-claims exception. No Australian law option in the public Terms. Named customers include Canva and Atlassian. Assistant research sources named are US SEC EDGAR and statutory databases, not AustLII or CaseBase.
Ask: Will you accept Australian law and courts (or a non-exclusive Australian forum) and which Australian legal collections, if any, ground Assistant research?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Who is controller, and client-matter authority
Public claim only
Privacy: Ivo is processor of Company personal information under the Agreement and customer instructions; the website Privacy Policy does not govern that processing. Terms: customer warrants it has rights in Customer Content and grants Ivo the right to use Customer Content to provide the Services. Use of the Services must be under the direct supervision of a qualified lawyer representing the customer. Public DPA URL was not found; Terms say a DPA is required before submitting GDPR Personal Data.
Ask: Confirm we are controller of matter data, attach the signed DPA, and confirm Customer Content is used only to provide the Services to us (not benchmarks).
Foundation-model provider
Public claim only
Trust Center subprocessors (locations all United States): Microsoft Azure (VMs and AI model hosting), Google Cloud Platform (storage, VMs, containers, AI model hosting), Anthropic, OpenAI, Amazon Bedrock. No customer model picker was described. Azure and GCP are both listed for AI model hosting.
Ask: Name every model and inference region that will see our contracts, whether Bedrock/Azure/GCP OpenAI/Anthropic can be limited, and whether outputs leave those providers on zero-retention terms.
Subprocessors and subprocessors list
Public claim only
trust.ivo.ai/subprocessors lists (among others) Azure, GCP, Sentry, Pylon, Anthropic, OpenAI, Postmark, Mixpanel, Genera (onboarding professional services), Pendo, WorkOS, Amazon Bedrock; the UI said 14 results and pagination may hide two more. All listed locations are the United States. Privacy points subprocessors to the Trust Center. No public change-notice period was found on the list page.
Ask: Provide the full 14-row list with functions, whether Mixpanel/Pendo/Sentry receive contract text, Genera's access, and the subprocessor change-notice period.
Training and secondary use of customer content
Not confirmed
llms-info: Ivo does not train AI models on customer contract data; customer data remains the customer's. Privacy allows service providers to use information that does not identify you (aggregated or de-identified) except as prohibited by law or contract. llms-info also says Review 'compares contract terms against historical Ivo customer data and market standards' (intelligent benchmarks). Those two statements need reconciling.
Ask: Is our Customer Content used to train Ivo or foundation models, and is the historical-customer-data benchmark corpus in or out of our Order?
Feedback and evaluation use
Public claim only
Terms: Feedback is given AS IS; Ivo may use it freely and will own IP in Feedback incorporated into the Services. Privacy: a thumbs-down rating may temporarily store the associated contract for 14 days to investigate, then delete or de-identify unless law requires longer. Mixpanel and Pendo are listed as product-analytics subprocessors.
Ask: Is thumbs-down storage the only evaluation path, can it be contracted off, and do Mixpanel/Pendo receive contract text or only UI events?
Retention of prompts, documents and logs
Public claim only
Privacy: retain Personal Information while there is a business or operational purpose, then for legal, dispute, fraud and enforcement needs. Thumbs-down contracts: 14 days. Terms: backups may retain Confidential Information under standard backup policies. No public day-count for prompts, embeddings or Intelligence indexes was found. Trust FAQ uptime/RPO/RTO answer was not in the scrape.
Ask: State retention for Review documents, Assistant prompts/outputs, Intelligence embeddings, logs and backups, including OpenAI/Anthropic/Bedrock retention.
Deletion and certified erasure
Public claim only
Terms: upon the customer's request after expiration or termination, Ivo will delete Customer Content within 60 days. Backups may still hold Confidential Information under ordinary retention policies. No in-term certified-deletion SLA was found. Privacy: Authorized Users may be able to delete certain information inside the Company account as the Company configures.
Ask: What is the maximum time to delete our tenancy including backups, and will you issue a deletion certificate? Can we purge in-term?
Vendor staff access to matter data
Public claim only
Genera is listed as a United States professional-services subprocessor for customer support and onboarding. llms-info: Ivo's legal engineering team digitises playbooks. Trust FAQ: a Security Response Team investigates alerts. Privacy: service providers process on Ivo's behalf and are contractually prohibited from retaining/using/disclosing except to perform services (with a de-identified-use carve-out).
Ask: Is staff and Genera access to our contracts logged, MFA-gated, limited to ticketed work, and available as an audit export?
SSO, MFA, roles and audit logs
Public claim only
Trust FAQ: SAML 2.0 SSO with Entra ID and Okta; SCIM; optional TOTP MFA if not using SSO. llms-info: SSO, RBAC, enterprise IdP integrations. 'What privacy/security settings are available?' existed on the FAQ but the answer body was not in the scrape. No public statement of exportable audit logs was found.
Ask: Will our tenancy be SSO-only with mandatory MFA, which RBAC roles exist, and can we export audit logs of document access and AI runs?
Encryption in transit and at rest
Public claim only
Trust FAQ: data at rest encrypted with AES-256 across infrastructure, storage and databases; in transit TLS 1.2 or higher. llms-info repeats encryption in transit and at rest. No customer-managed-key option was described.
Ask: Confirm TLS version in production, key custody (Azure/GCP), and whether customer-managed keys are available.
SOC, ISO and other audits
Public claim only
Trust Center lists SOC 2 Type II, ISO 27001:2022, ISO/IEC 42001:2023 and Cyber Essentials, plus Red Sentry pentest summaries, all behind request-access/NDA. Certificates were not inspected in this pass. llms-info also claims GDPR and CCPA compliance.
Ask: Provide the current SOC 2 Type II, ISO 27001 and ISO 42001 artefacts whose scope includes Review, Assistant and Intelligence, including dates and registrar.
Contract, DPA, liability and indemnity
Not confirmed
Public Terms cap cumulative liability related to the Site at USD 100, disclaim legal advice, require a qualified lawyer to supervise use, and require the customer to indemnify Ivo. A separate Services Agreement is referenced but not published; the USD 100 cap may not be the enterprise MSA figure. DPA is required for GDPR Personal Data but is not a public URL. Terms may be modified by posting; material changes get reasonable prior notice except in exigent circumstances.
Ask: Provide the Services Agreement liability cap (in multiples of fees), IP indemnity, and a signed DPA that binds subprocessors including OpenAI, Anthropic, Azure, GCP and Bedrock.
Cross-border transfers and residency
Public claim only
Every named subprocessor location on the Trust Center list is the United States (Azure, GCP, OpenAI, Anthropic, Bedrock, analytics, email, WorkOS, Genera). Privacy (EU/UK section): transfers use adequacy or SCCs. No Australian region is listed. APP 8 analysis is not published.
Ask: Map every flow of our contract text (Azure vs GCP vs Bedrock vs OpenAI vs Anthropic) and confirm whether any AU or EU residency option exists.
Breach notification
Public claim only
Trust FAQ: 'Our standard contractual breach notification period is 48 hours.' 24/7 monitoring and a Security Response Team are described. That 48-hour figure is a Trust FAQ, not a clause in the public Terms. No public incident history was found. Adverse AI-system impacts: email security@ivo.ai.
Ask: Write the 48-hour (or faster) customer-notice SLA into our Order, including the notification email and whether it covers suspected as well as confirmed breaches.
Unilateral term and product changes
Public claim only
Terms: Ivo may modify the Agreement by posting; the amended version is effective when posted unless noted; material changes get reasonable prior notice except in exigent circumstances; continued use is consent; cancel the account if you do not accept. Privacy may be changed by posting, with notice via website or the Company account for existing customers.
Ask: Will material privacy, model-provider, benchmark or liability changes require 30 days' written notice and a right to terminate without penalty?
Export, termination and lock-in
Public claim only
On expiration or termination the customer loses the right to use the Services. Upon request Ivo will delete Customer Content within 60 days. Word redlines remain in the customer's documents. No public export of the Intelligence index or playbook configuration was found. Fees are generally non-refundable.
Ask: On termination, in what formats and within how many days can we export playbooks, Intelligence data and logs, and is deletion certified including backups?
PMS, DMS and agent connectors
Public claim only
Intelligence indexes Salesforce, SharePoint, Google Drive, OneDrive and Dropbox. Word and Google Docs are editing surfaces. WorkOS is an identity subprocessor. No iManage/NetDocuments connector was found. Assistant is described as agentic across Word, the web platform and repositories.
Ask: Which connectors are in our Order, what they sync, and does Assistant take outbound actions (email, signature, CLM write-back) without a click?
Open-web search and browsing
Public claim only
llms-info: Assistant can search authoritative external sources including SEC filings (EDGAR) and statutory databases, with verified citations. That is not a general open-web browse, but it is retrieval outside the customer's corpus. Brave.com appears as a string on the subprocessors page scrape (pagination residue); it was not clearly labelled as a live subprocessor.
Ask: Does Assistant send matter text to EDGAR, statutory databases or any general web index, and can those tools be disabled on our Order?
What the tool may do without a click
Public claim only
Review applies redlines inside Word as track changes initiated by the user. Assistant is described as agentic (plain-language prompts for redlines, research, memos). Intelligence indexes connected stores. No unsupervised send-to-counterparty or e-sign action was found on the pages reviewed.
Ask: Which Assistant actions require in-product confirmation, and can repository indexing be limited to named folders?
Required lawyer review before client use
Public claim only
Terms: the Service does not provide legal advice and is not a substitute for professional legal advice; use shall be under the direct supervision of a qualified lawyer representing the customer; the customer waives malpractice/privilege claims against Ivo. Accuracy of legal materials is not guaranteed.
Ask: Will you contract that Review/Assistant output is not legal advice and must be lawyer-reviewed before sending to a counterparty?
