---
title: "Kira (Litera (Freedom Solutions Group, L.L.C. dba Litera))"
url: "https://ailawframework.com/software/kira"
type: "software_profile"
site: "AI Law Framework"
id: "kira"
vendor: "Litera (Freedom Solutions Group, L.L.C. dba Litera)"
category: "Legal-specific"
segment: "Due diligence and data rooms"
confidence: "medium"
last_reviewed: "2026-09-20"
---

# Kira (Litera (Freedom Solutions Group, L.L.C. dba Litera))

> Litera's due-diligence and high-volume contract-review product: 1,400+ extraction fields, custom trained fields, collaborative review grids, plus optional Azure OpenAI generative features.

Canonical page: https://ailawframework.com/software/kira  
Last reviewed: 2026-09-20

Site index for agents: https://ailawframework.com/llms.txt

Plan covered: Kira SaaS (additional terms for subscriptions from 14 May 2024) and Kira on-premises. Shared or private cloud; customer-chosen AWS region. Litera Draft, Lito, Foundation and Transact need separate profiles.

## Capabilities

- Due-diligence document review
- Contract review and redlining
- Document summarisation
- Knowledge search
- Clause libraries and playbooks

## Key facts

| Fact | Value |
| --- | --- |
| Deployment | SaaS, On-premises, Private cloud |
| Hosting regions | United States, European Union / EEA, Canada |
| Australian region | Unknown |
| Model providers | Kira predictive extraction (vendor fields), Azure OpenAI (generative; region matched where applicable) |
| Assurance | ISO/IEC 27001:2022, SOC 2 Type 2, SOC 3 |
| Training on customer content | Unknown |
| Retention | Cloud: customer controls deletion during the term; Litera deletes Customer Data on expiry of the Subscription Term (Kira DPA schedule). SaaS Terms: customer retrieves data before termination; Litera then deletes promptly except backups until their normal cycle. Kira additional terms: 30 days' limited access after termination to download. Customer Provisions are deleted on expiry unless otherwise agreed. |
| Legal content coverage | 1,400+ pre-built smart fields for M&A, real estate, banking and finance review. No licensed Australian primary-law citator described. |
| Pricing | No public list prices. Kira SaaS additional terms bill by Document Tier and Document Storage Limit, with Flexible Usage Fees and Storage Fees if exceeded. Shared cloud vs private cloud (about two weeks to deploy). Support hours 24/5; Premier Support is an add-on. |
| Australian presence | Yes. DPA contracting entities include DocsCorp Pty. Ltd (Australia) as well as Freedom Solutions Group, L.L.C. dba Litera and Workshare Limited. AWS jurisdiction for Kira is chosen by the customer; the Azure matching table is an unread image so an Australian region is not confirmed. No named Australian Kira customer found. |
| Website | https://www.litera.com/capabilities/review |

## What the research found

| Topic | Status | Finding | Open question | Sources |
| --- | --- | --- | --- | --- |
| Plan, entity and Kira vs other Litera products | Public claim only | Kira is a Litera product. Contracting entity on the DPA is whichever of Freedom Solutions Group, L.L.C. dba Litera, Workshare Limited or DocsCorp Pty. Ltd signs the Customer Contract. Kira SaaS additional terms (from 14 May 2024) plus Master Terms (November 2025 version on the May 2025 PDF) plus SaaS Terms (March 2025). Shared or private cloud, or on-premises. Lito, Draft, Foundation and Transact have separate subprocessor lists and are out of this profile. | Confirm the contracting entity (including whether DocsCorp Pty Ltd can sign for Australia), cloud vs on-prem vs private cloud, Document Tier, and that Lito/You.com/Anthropic are not in our Kira tenancy. | [Kira Software DPA schedule (on-premises and cloud)](https://www.litera.com/master-data-protection-addendum-dpa/kira-software-on-premises-and-cloud); [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf); [Litera Master Terms (May 2025 PDF, November 2025 version mark)](https://www.litera.com/sites/default/files/file/2025-05/Litera-Master-Terms.pdf); [Litera SaaS Terms (March 2025)](https://www.litera.com/sites/default/files/file/2025-03/Litera%20SaaS%20Terms.Mar2025.pdf); [Litera Our Story](https://www.litera.com/our-story) |
| Cloud, private cloud and on-premises | Public claim only | Kira DPA schedule covers on-premises (data on customer systems; Litera stores support tickets only) and cloud (data on Litera cloud applications). Additional terms: shared cloud within three business days; private cloud target two weeks. AWS jurisdiction chosen by the customer. No code is delivered for cloud. | Will we take shared cloud, private cloud or on-premises, in which AWS region, and is the tenancy single-tenant? | [Kira Software DPA schedule (on-premises and cloud)](https://www.litera.com/master-data-protection-addendum-dpa/kira-software-on-premises-and-cloud); [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf) |
| Product features in scope | Public claim only | Review page: 1,400+ pre-built smart fields plus customer-trained fields; natural-language queries over a contract set; collaborative review grids for M&A, real estate, banking and finance; summaries and export-ready reports. Predictive extraction is paired with generative AI. Additional terms: not intended as a virtual data room; customers should delete unused documents annually. | Which field packs, generative/Ask features, client End User collaboration and export formats will be enabled and billed? | [Litera Review / Kira](https://www.litera.com/capabilities/review); [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf) |
| Governing law and Australian coverage | Not confirmed | Master Terms PDF scrape did not capture a governing-law clause (document is paginated/truncated). DPA SCCs: Ireland (EU SCCs) and England and Wales (UK Addendum). Contracting entities include an Australian company (DocsCorp Pty Ltd). HQ listed as Chicago. No Australian-law option was found in the pages fully extracted. | Provide the full November 2025 Master Terms governing-law clause; will you accept Australian law and courts (or DocsCorp as counterparty with NSW/federal courts) and an APP addendum? | [Litera Master Terms (May 2025 PDF, November 2025 version mark)](https://www.litera.com/sites/default/files/file/2025-05/Litera-Master-Terms.pdf); [Litera Master Data Protection Addendum](https://www.litera.com/master-data-protection-addendum-dpa); [Litera Our Story](https://www.litera.com/our-story) |
| Licence, document tiers and price | Public claim only | Worldwide internal-business and client-service licence. Document Tier and Storage Limit on the Order Form; overage Flexible Usage Fees and Storage Fees invoiced at year end or renewal, due in 30 days. Auto-renewal at Litera's standard rate for the applicable Document Tier. No public dollar list. Master Terms: customer may not publish performance or functional evaluation results without Litera's prior written approval. | Quote Document Tier, storage, private-cloud premium, generative features and year-two rates, and confirm we may run and share an internal evaluation. | [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf); [Litera Master Terms (May 2025 PDF, November 2025 version mark)](https://www.litera.com/sites/default/files/file/2025-05/Litera-Master-Terms.pdf) |
| DMS, Word and identity integration | Not confirmed | Kira product, additional terms and Kira subprocessor pages read do not name iManage, NetDocuments, Word add-in, SSO or SCIM. Litera as a group has Word/Outlook add-ins under other products. Do not assume those connectors apply to Kira. | List every DMS/PMS/Word connector for Kira with scopes, and confirm SSO-only, SCIM and exportable audit logs on our plan. | [Litera Review / Kira](https://www.litera.com/capabilities/review); [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf); [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/) |
| Support channels and hours | Public claim only | Hours of Coverage 24/5. Premier Support and private-cloud support are Exhibit A add-ons (not fully extracted). Support chain subprocessors: Office 365, Salesforce, Y Meadows, Mimecast, Zoom Contact Center, Forethought, Intellek — several hosted in the United States. No public severity credits in the additional terms beyond a service-provider aggregate liability for service-level breaches (cap text truncated). | State contractual severity definitions, 24/5 vs 24/7, AEST/AEDT coverage, whether US support tools receive document text, and whether missed targets attract credits. | [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf); [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/) |
| Measured quality and hallucination evidence | Public claim only | Marketing: lawyer-trained extraction, answers linked to source contracts, 'legal-grade accuracy lawyers can verify'. Responsible AI principles (9 Oct 2024): internal impact assessments, hallucination reduction, users told to check outputs. No independent Vals/Stanford-style study or published field-level precision/recall was found. Master Terms forbid publishing evaluation results without approval. | Provide under NDA field-level precision/recall (including Australian-law documents), generative error rates, and written permission to run our own evaluation. | [Litera Review / Kira](https://www.litera.com/capabilities/review); [Litera Responsible AI Principles (9 October 2024)](https://www.litera.com/sites/default/files/file/2024-12/AI%20Principles%20-%20external%20facing%20document%20%28FINAL%20VERSION%2009OCT2024%29.pdf); [Litera Master Terms (May 2025 PDF, November 2025 version mark)](https://www.litera.com/sites/default/files/file/2025-05/Litera-Master-Terms.pdf) |
| Task fit for due diligence | Public claim only | Positioned for high-volume, high-stakes review and due diligence rather than as a VDR or a licensed research citator. Custom fields for deal-specific questions. Client End Users may be invited to collaborate but cannot create new projects. | On a sample of our deal rooms, show provision hit-rate, missed issues, time to verify, and how AI use is recorded for client disclosure. | [Litera Review / Kira](https://www.litera.com/capabilities/review); [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf) |
| Client-facing use and authority to process | Public claim only | End Users may include the customer's clients for collaboration on the customer's matter. Customer warrants it has all rights to use Documents without breaching confidentiality or law, and indemnifies Litera for Customer Data claims (SaaS Terms). Master Terms: Litera may use the customer's name and logo in customer lists and marketing. DPA: customer warrants it may transfer Personal Information to Litera and subprocessors worldwide. | Will clients be invited into our Kira projects; provide engagement-term wording covering AWS region, Azure OpenAI, US support tools and NewRelic logs; and opt us out of logo use? | [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf); [Litera Master Terms (May 2025 PDF, November 2025 version mark)](https://www.litera.com/sites/default/files/file/2025-05/Litera-Master-Terms.pdf); [Litera Master Data Protection Addendum](https://www.litera.com/master-data-protection-addendum-dpa) |
| Extraction and generative-model providers | Public claim only | Core extraction is Kira's predictive/smart-field models (vendor-trained). Kira subprocessor list: Azure OpenAI for hosting of generative models; Azure regions match the Kira hosting region where applicable, otherwise data is transferred to an Azure region with comparable privacy controls (exact mapping is an unread image dated Aug 2025). Trust Centre Bedrock/Anthropic/You.com rows are labelled for Litera Platform / Lito, not the Kira product list. | Name every model family and Azure region that will process our Kira content; produce Azure OpenAI ZDR/DPA artefacts; can we disable generative features; and confirm Lito/Anthropic/You.com are off. | [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/); [Litera Security and Trust Centre](https://trust.litera.com/); [Litera Review / Kira](https://www.litera.com/capabilities/review) |
| Kira subprocessors | Public claim only | Kira list: AWS (jurisdiction chosen by customer); Office 365, Salesforce, Y Meadows, Mimecast, Zoom Contact Center, Intellek, Atlassian, Forethought (US); Pendo (EU analytics); NewRelic for Kira cloud logs (United States); Azure OpenAI. DPA: subscribe to be notified; five days to object on reasonable data-protection grounds or either party may terminate. Five days is short. Support/email tools in the US may see ticket content even if AWS is elsewhere. | Provide the dated list with legal entities and data types; 30-day notice; disable NewRelic/Pendo/Forethought if they receive document text; and confirm Azure OpenAI region for our AWS choice (unread table). | [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/); [Litera Master Data Protection Addendum](https://www.litera.com/master-data-protection-addendum-dpa) |
| Training and secondary use | Not confirmed | Customer Provisions (custom extraction models trained in-product) are exclusive to the customer during the term and are deleted on expiry unless otherwise agreed. No Kira-specific contractual sentence was found that Azure OpenAI or Kira's predictive models will not train on Customer Data. Trust Centre no-training language is attached to Litera Platform Bedrock and Anthropic rows, not the Kira Azure OpenAI row. Responsible AI principles discuss vendor training data generally, not a customer opt-out. | Confirm in the Order that Documents, prompts, outputs, embeddings and Customer Provisions are not used to train any Azure, OpenAI or Litera foundation/extraction model used by other customers, and produce the Azure ZDR setting. | [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf); [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/); [Litera Security and Trust Centre](https://trust.litera.com/); [Litera Responsible AI Principles (9 October 2024)](https://www.litera.com/sites/default/files/file/2024-12/AI%20Principles%20-%20external%20facing%20document%20%28FINAL%20VERSION%2009OCT2024%29.pdf) |
| Feedback, ratings and product improvement | Public claim only | Pendo is listed for Kira as an analytics processor for how users interact with the application, in-app notification, training and user sentiment (EU). Responsible AI principles mention features for users to report errors and provide feedback. How that feedback is used to train models is not specified. | Can Pendo and in-product feedback be disabled or confined so that our matters never leave the tenant for product improvement? | [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/); [Litera Responsible AI Principles (9 October 2024)](https://www.litera.com/sites/default/files/file/2024-12/AI%20Principles%20-%20external%20facing%20document%20%28FINAL%20VERSION%2009OCT2024%29.pdf) |
| Retention of documents, logs and LLM copies | Public claim only | Cloud DPA: customer-controlled deletion during the term; Litera deletes on Subscription Term expiry. SaaS Terms: retrieve before termination; then prompt deletion except backups until their cycle. Kira additional terms: 30 days' limited access after termination. NewRelic logs processed in the United States. Azure OpenAI retention is not stated on the Kira list. On-prem: Litera does not store documents except temporary support tickets. | For our tenancy, list retention for documents, Customer Provisions, Azure OpenAI, NewRelic, Pendo and backups, and whether generative features are zero-retention. | [Kira Software DPA schedule (on-premises and cloud)](https://www.litera.com/master-data-protection-addendum-dpa/kira-software-on-premises-and-cloud); [Litera SaaS Terms (March 2025)](https://www.litera.com/sites/default/files/file/2025-03/Litera%20SaaS%20Terms.Mar2025.pdf); [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf); [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/) |
| Deletion on instruction and on exit | Public claim only | Customer should delete unused documents annually. On termination, customer downloads/deletes; 30 days' limited access. Litera then deletes Customer Data except backups on their schedule. Customer Provisions deleted on expiry. No deletion certificate clause was found. On-prem support-ticket PI is 'deleted routinely'. | Contract a numbered deletion including backups, NewRelic, Azure OpenAI, Customer Provisions and a written certificate, with a 30–90 day retrieval window. | [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf); [Litera SaaS Terms (March 2025)](https://www.litera.com/sites/default/files/file/2025-03/Litera%20SaaS%20Terms.Mar2025.pdf); [Kira Software DPA schedule (on-premises and cloud)](https://www.litera.com/master-data-protection-addendum-dpa/kira-software-on-premises-and-cloud) |
| Vendor and contractor access to content | Public claim only | Kira DPA: Litera does not monitor cloud documents; limited access when the customer opens a support ticket. On-prem: telemetry (can be turned off in certain applications) plus support tickets. Forethought/Y Meadows triage support text. Security Addendum: Litera staff laptop encryption and ISO 27001 office controls. Customer-exportable vendor-access logs were not found. | Enumerate every human-access path; can we require per-ticket consent and disable telemetry; is access logged and exportable? | [Kira Software DPA schedule (on-premises and cloud)](https://www.litera.com/master-data-protection-addendum-dpa/kira-software-on-premises-and-cloud); [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/); [Litera Security Addendum 2023](https://www.litera.com/security-addendum-2023) |
| SSO, MFA, admin controls and audit logs | Not confirmed | Security Addendum describes Litera's own cloud AES-256/TLS 1.2+ and customer audit via ISO/SIG/pentest summaries. SSO, SAML, SCIM, MFA-for-users and exportable Kira audit logs were not documented on the Kira pages read. | On the plan we are buying, confirm SSO-only, MFA, SCIM, IP allow-listing, and an exportable audit log of uploads, queries, exports, admin changes and vendor access. | [Litera Security Addendum 2023](https://www.litera.com/security-addendum-2023) |
| Encryption in transit and at rest | Public claim only | Security Addendum (2023): cloud customer data encrypted at rest AES-256; TLS 1.2+ in transit; certificates used to encrypt keys. Customer-managed keys were not offered. Whether Kira embeddings and Azure OpenAI links use the same KMS is not specified. | Name algorithms for every Kira store (including embeddings, NewRelic and Azure OpenAI), who holds keys, rotation, and whether customer-managed keys are available. | [Litera Security Addendum 2023](https://www.litera.com/security-addendum-2023) |
| Independent security assurance | Public claim only | Trust Centre: ISO/IEC 27001:2022 (plus SoA), SOC 2 Type 2, SOC 3 — request-access, not inspected. Security Addendum: annual pentest summary, ISO certificate, SIG/CAIQ on written request at no extra cost. Cloud providers said to have SOC 2 Type II and ISO 27001. IRAP was not found. Scope of the SOC report (whether it includes Kira and Azure OpenAI) is unknown until the report is read. | Provide under NDA the current SOC 2 Type II (scope including Kira/Azure OpenAI, period, exceptions), ISO 27001:2022 certificate, latest pentest, and any Australian Essential Eight/IRAP mapping. | [Litera Security and Trust Centre](https://trust.litera.com/); [Litera Security Addendum 2023](https://www.litera.com/security-addendum-2023) |
| Contract, DPA, confidentiality, IP and liability | Public claim only | Master Terms (Nov 2025) + SaaS Terms + Kira additional terms + DPA. Direct-damages cap: fees in the prior 12 months on the applicable Ordering Document; cap does not apply to Litera's IP indemnity (s 7.4). Consequential damages excluded except indemnities. DPA liability is subject to the same Customer Contract caps. Logo use permitted. No APP-specific addendum. Amendments in writing signed by the party to be charged. Customer may not assign without consent; Litera may subcontract freely. | Will you sign an APP-aligned DPA, Australian law, no logo use, a cap that is not eroded for confidentiality/privacy, and flow-down to Azure OpenAI/NewRelic? | [Litera Master Terms (May 2025 PDF, November 2025 version mark)](https://www.litera.com/sites/default/files/file/2025-05/Litera-Master-Terms.pdf); [Litera SaaS Terms (March 2025)](https://www.litera.com/sites/default/files/file/2025-03/Litera%20SaaS%20Terms.Mar2025.pdf); [Litera Master Data Protection Addendum](https://www.litera.com/master-data-protection-addendum-dpa); [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf) |
| Cross-border processing and Australian residency | Public claim only | DPA 6.1: Litera is highly likely to process Personal Information in a number of jurisdictions around the world; restricted transfers use SCCs. AWS region is customer-chosen. Azure OpenAI may leave that region if no matching Azure region exists. NewRelic logs for Kira cloud are processed in the United States. Several support tools are US-hosted. Trust Centre Azure row (platform) names US, Canada or EU. An Australian Kira AWS region is not confirmed (mapping image unread). DocsCorp Pty Ltd exists as a possible contracting entity. | Is an Australian AWS region available and will you lock AWS plus matching Azure OpenAI there, excluding US NewRelic/support tools from document content? | [Litera Master Data Protection Addendum](https://www.litera.com/master-data-protection-addendum-dpa); [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/); [Litera Security and Trust Centre](https://trust.litera.com/) |
| Breach notification and incident history | Public claim only | DPA: notify the customer without undue delay and in any event within 72 hours after becoming aware of a Personal Information Breach. No public incident register. Security Addendum describes an incident program at a high level only. | Contract 72-hour notice for any suspected incident affecting Customer Data (not only GDPR Personal Information), NDB cooperation, Australian-hours security contact, and disclose material incidents in the last 24 months. | [Litera Master Data Protection Addendum](https://www.litera.com/master-data-protection-addendum-dpa); [Litera Security Addendum 2023](https://www.litera.com/security-addendum-2023) |
| Change of terms, models and control | Public claim only | Amendments must be in writing and signed by the party against whom they are asserted. Subprocessor changes: subscribe then five days to object. Azure OpenAI region fallback when no matching region exists is at Litera's mapping (unread table, Aug 2025). End-of-life clause exists in Master Terms but was truncated in the scrape. Litera may subcontract freely. | Lock Azure OpenAI region and model version on the Order; require 30-day notice and a testing window before generative-model changes; and give termination and data-return rights on assignment, change of control or discontinuance. | [Litera Master Terms (May 2025 PDF, November 2025 version mark)](https://www.litera.com/sites/default/files/file/2025-05/Litera-Master-Terms.pdf); [Litera Master Data Protection Addendum](https://www.litera.com/master-data-protection-addendum-dpa); [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/) |
| Export, transition and shutdown | Public claim only | Thirty days' limited access after termination to download Documents, Reports and Customer Data. SaaS Terms: Litera then has no obligation to maintain data and deletes promptly except backups. Customer Provisions deleted. No bulk-export API or escrow found. Product is not a VDR, so long-term archive is on the customer. | Demonstrate a full project export (documents, annotations, Customer Provisions, reports, logs) in open formats, a 30–90 day retrieval window, deletion including Azure/NewRelic with a certificate, and transition assistance rates. | [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf); [Litera SaaS Terms (March 2025)](https://www.litera.com/sites/default/files/file/2025-03/Litera%20SaaS%20Terms.Mar2025.pdf) |
| DMS and generative connectors | Not confirmed | Azure OpenAI is the documented generative connector for Kira. Support/analytics connectors (Salesforce, Pendo, NewRelic, Forethought) may see tickets or usage data. DMS connectors were not found on Kira primary pages. Client End Users are a collaboration connector of sorts. | For each connector we would enable, show identity, scopes, whether documents are copied, how we disconnect, and how copies are purged. | [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/); [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf) |
| Open-web retrieval | Not confirmed | You.com is listed on the Trust Centre as web search applicable to Lito, not on the Kira subprocessor page. No Kira open-web search was documented. | Confirm Kira cannot call You.com or any other web retrieval for our tenancy. | [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/); [Litera Security and Trust Centre](https://trust.litera.com/) |
| Actions, exports and confirmation gates | Not confirmed | Users upload documents, train custom fields, query in natural language and export reports. Client End Users can be granted access. No public list of send/share/delete gates or prompt-injection testing for generative features was found. | List every action (including client End User actions and generative redrafts); which require explicit approval; how untrusted contract text is isolated; and provide the latest injection/red-team summary. | [Litera Review / Kira](https://www.litera.com/capabilities/review); [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf) |
| Human review of outputs | Public claim only | Marketing emphasises validating findings in context and linking answers to the source contract. Responsible AI principles say UX and educational materials should tell users to check AI output. No mandatory supervisor gate or exportable per-output review log with model version was found. Master Terms restrict publishing evaluations. | Can we require supervisor sign-off before reports leave the firm, export a per-document record of field pack/model route and reviewer, and keep generative features off for unsupervised users? | [Litera Review / Kira](https://www.litera.com/capabilities/review); [Litera Responsible AI Principles (9 October 2024)](https://www.litera.com/sites/default/files/file/2024-12/AI%20Principles%20-%20external%20facing%20document%20%28FINAL%20VERSION%2009OCT2024%29.pdf); [Litera Master Terms (May 2025 PDF, November 2025 version mark)](https://www.litera.com/sites/default/files/file/2025-05/Litera-Master-Terms.pdf) |

## Notes

Master Terms governing-law clause not in the truncated PDF scrape. Azure/AWS region mapping is an unread image. SOC/ISO reports unread. No Kira-specific no-training clause found. SSO/DMS not on Kira primary pages. Lito/Anthropic/You.com treated as out of scope unless enabled.

## Sources

- [Litera Review / Kira](https://www.litera.com/capabilities/review) (checked 2026-09-20)
- [Litera Our Story](https://www.litera.com/our-story) (checked 2026-09-20)
- [Litera Responsible AI Principles (9 October 2024)](https://www.litera.com/sites/default/files/file/2024-12/AI%20Principles%20-%20external%20facing%20document%20%28FINAL%20VERSION%2009OCT2024%29.pdf) (checked 2026-09-20)
- [Litera Master Data Protection Addendum](https://www.litera.com/master-data-protection-addendum-dpa) (checked 2026-09-20)
- [Kira Software DPA schedule (on-premises and cloud)](https://www.litera.com/master-data-protection-addendum-dpa/kira-software-on-premises-and-cloud) (checked 2026-09-20)
- [Kira SaaS additional terms (November 2024)](https://www.litera.com/sites/default/files/file/2024-11/kira-saas-additional-terms_Nov2024.pdf) (checked 2026-09-20)
- [Subprocessors for Kira Product](https://www.litera.com/list-of-subprocessors/kira-product/) (checked 2026-09-20)
- [Litera Master Terms (May 2025 PDF, November 2025 version mark)](https://www.litera.com/sites/default/files/file/2025-05/Litera-Master-Terms.pdf) (checked 2026-09-20)
- [Litera SaaS Terms (March 2025)](https://www.litera.com/sites/default/files/file/2025-03/Litera%20SaaS%20Terms.Mar2025.pdf) (checked 2026-09-20)
- [Litera Security and Trust Centre](https://trust.litera.com/) (checked 2026-09-20)
- [Litera Security Addendum 2023](https://www.litera.com/security-addendum-2023) (checked 2026-09-20)

A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.