Product and intended use
Define the configuration, people, information and tasks being assessed.
What is in scope
Public claim only
Product page, checked 2026-09-27: Elsie is described as 'your AI agent inside Landchecker', switched on for invited organisations with no set-up. Four focus areas are named for the beta - Planning and Overlays (including schedule-level requirements), Permits and DAs (history, status, outcomes and nearby approvals), Hazards (bushfire, flood, heritage, erosion and other overlays) and Site identification and shortlisting - plus saved and suggested prompts by role, Projects as reusable shortlists, and alerts. The vendor states that valuations and sales comparables are not connected during the beta.
Ask: Which of the four beta focus areas are enabled for our organisation, and what will change in scope at general release?
Beta status
Public claim only
Supplementary terms cl 2: Elsie is in beta, which the vendor states means 'it's still being developed - expect bugs, gaps, and rough edges', 'features may change, break, or disappear without notice', 'we might wind down the beta at any time' and 'how it performs now isn't necessarily how it'll perform at launch'. The same clause asks users not to share details about Elsie's capabilities, outputs or the beta experience outside their organisation without the vendor's agreement.
Ask: What is the expected general-release date, and does the confidentiality request in cl 2 prevent us recording Elsie's use and limitations in our own file notes or client advice?
Where the AI sits
Public claim only
Supplementary terms cl 1: 'Every response from Elsie AI is generated by artificial intelligence, not a person. Elsie AI is powered by third-party large language models. Your queries are processed by these models to generate responses - we don't send your personal account details to these models unless it's needed to answer your specific question.' The product page states 'Elsie queries the Landchecker platform in real time, including datasets contractually acquired from government and commercial providers that aren't freely available online' and 'If data isn't connected, Elsie says so rather than speculating.' The planning, permit, hazard and title data are Landchecker's existing datasets; the AI layer is the language and retrieval step over them.
Ask: Which named third-party language models are used, and does query text ever include property identifiers, client details or file content sent to them?
Deployment model
Public claim only
Elsie is a panel inside the Landchecker web platform, opened from an icon next to the user profile and able to be pinned, moved or resized, checked 2026-09-27. No on-premises, private-cloud or API deployment is published, and the supplementary terms describe queries being sent to third-party large language models.
Ask: Is Elsie available only in the web platform, or is there an API or integration route into a practice management system?
Vendor content directing how AI describes the product
Not confirmed
Checked deliberately on 2026-09-27. A site map of landchecker.com.au returned 53 URLs and listed no /llms.txt, /ai-info, /ai or /for-ai page. The Elsie product page, the Elsie supplementary terms, the privacy policy and the platform Terms and Conditions were read and contain no heading or block addressed to AI models, assistants, LLMs or crawlers, and no instruction to describe the product in a particular way. Recorded separately as a fact: the product page carries a marketing section headed 'Why Elsie beats a generic AI chatbot' with a two-column table contrasting 'A generic AI chatbot' with 'Elsie, inside Landchecker'. That is the vendor's own comparative claim in a marketing heading, not machine-readable question-and-answer and not content directing how AI should describe the product; no comparison or ranking from it is carried into this profile.
Ask: Do you publish any page or embedded block - for example /llms.txt, an AI-information page or structured question-and-answer data - that tells AI models or crawlers how to describe Elsie?
Contracting entity and Australian law
Public claim only
The Elsie supplementary terms are headed 'Landchecker Pty Ltd (ABN 31 607 394 696)' and the privacy policy names the same entity, stating it is ultimately majority owned by Tanarra Capital Australia Pty Ltd (ACN 114 164 331) and Royal Automobile Club of Victoria (RACV) Limited (ACN 004 060 833). The privacy policy commits to the Australian Privacy Principles and the Privacy Act 1988 (Cth) and says practices and terms will be updated as Australian privacy and AI transparency requirements change. No ACN, registered office or governing law and jurisdiction clause was read; the platform terms carry a dispute resolution clause that was not read.
Ask: What is the governing law and jurisdiction of the Landchecker terms, and does Landchecker Pty Ltd contract directly with a law practice or conveyancing practice?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Putting client and file material into Elsie
Public claim only
Supplementary terms cl 4 instructs users to 'Avoid sharing sensitive personal information, confidential data, or copyrighted material through Elsie AI' and says that if personal information is included it is handled under the privacy policy. Platform terms cl 15.4: where Customer Materials include personal information the member warrants it has obtained all necessary consents and authorities, and cl 19.1 requires compliance with all laws. Clause 15.1.2 grants a licence over Customer Materials to Landchecker and its Service Providers.
Ask: Given cl 4 tells us to avoid confidential data, what may a practice type into Elsie about a client's property and transaction, and what does the vendor treat as confidential data for this purpose?
Which models process the queries
Public claim only
Supplementary terms cl 1 state that Elsie 'is powered by third-party large language models' and that queries are processed by those models, but no model, model family, provider or hosting region is named anywhere in the supplementary terms, the product page, the privacy policy or the platform terms read 2026-09-27.
Ask: Which language model providers process Elsie queries, in which country, and under what retention and no-training commitment with that provider?
Who else handles the data
Not confirmed
No subprocessor list, DPA or trust page is published; the 53-URL site map returned none. The privacy policy discloses personal information to 'Our affiliates, contractors and Service Providers, assisting Us in the provision of Our Products to You, who may be located outside of Australia, including, but not limited to the United States of America', and to the two named majority owners for 'supporting Us and Our Partners in product and service development'. The third-party language model providers referred to in the Elsie supplementary terms are not named.
Ask: Please provide the list of subprocessors for Elsie, including the language model provider and any hosting provider, with each party's country and role.
Whether inputs train models
Public claim only
Supplementary terms cl 4: 'Your inputs are not used to train the third-party language models powering Elsie AI. We may use interaction data to improve our own systems, prompts, and configurations.' The product page FAQ states interactions 'are never used to train third-party AI models' and are stored 'to improve Elsie'. Neither document states that interaction data is used to train a model operated by the vendor, and no opt-out from the improvement use is published.
Ask: Is the no-training commitment in your contract with the language model provider as well as in your terms with us, and can we opt out of interaction data being used to improve your systems, prompts and configurations?
Ratings and feedback
Public claim only
Supplementary terms cl 5: 'If you give us feedback, suggestions, or bug reports about Elsie AI, we can use that freely to improve the product. You assign us any IP rights in your feedback.' The product page states every response carries a thumbs up or down and that 'Your ratings go straight to the team building Elsie and directly shape what it becomes'. Clause 4 adds that inputs may be reviewed by the vendor's team members during the beta for quality and safety purposes.
Ask: When a lawyer rates a response with a thumbs down, what is captured with the rating - the query, the answer, the property and the user - and who sees it?
How long interactions are kept
Public claim only
Supplementary terms cl 4: 'Interaction data is encrypted and retained for up to 180 days before secure deletion, unless we're required by law to keep it longer.' The product page FAQ repeats 'stored securely for up to 180 days'. The privacy policy (effective 27 June 2025) states that personal information which is obsolete and no longer required is destroyed 'except where required for data analysis purposes', in which case it will be de-identified; it gives no fixed retention period for account or usage records.
Ask: Does the 180-day limit apply to every copy of the interaction, including logs, backups and anything held by the language model provider, and what legal requirement would extend it?
Deleting chat history and account data
Public claim only
Supplementary terms cl 4: 'You can view and delete your chat history. Content already collected before you delete it may be retained by us for the remainder of the 180-day period.' Privacy policy cl 11.6: on request the vendor will take all reasonable steps to delete personal information 'unless We need to keep it for legal reasons', and cl 11.7 allows retention of de-identified information for data analysis. No deletion certificate or organisation-wide deletion tool is published.
Ask: Can an administrator delete all Elsie interactions for the whole organisation, and will you confirm deletion from backups and from the language model provider?
Vendor staff reading what we type
Public claim only
Supplementary terms cl 4: 'Your inputs may be reviewed by Landchecker team members during the beta for quality and safety purposes.' Privacy policy cl 5.2: staff who handle personal information are subject to obligations of confidentiality and privacy. No approval process, logging or role restriction for that review is published, and no equivalent statement is published for the period after the beta.
Ask: Who may read our Elsie inputs, is each access logged and reviewable by us, and does the review right continue after the beta ends?
Who in the firm gets Elsie
Not confirmed
The product page states 'Elsie is already switched on for your organisation' and, in the FAQ, 'Yes - Elsie is enabled for your whole organisation', checked 2026-09-27. The privacy policy records Google single sign-on as an account option. Nothing read publishes a role-based control, an administrator switch to turn Elsie off for a user or a practice group, or a multi-factor authentication requirement.
Ask: Can an administrator enable or disable Elsie per user or per team, and is multi-factor authentication available and enforceable on Landchecker accounts?
Encryption of interactions
Public claim only
Supplementary terms cl 4 state that interaction data 'is encrypted' and retained for up to 180 days before secure deletion. Privacy policy cl 10.1 commits to 'all commercially reasonable steps' to protect personal information and cl 10.3 notes that overseas facilities may be used 'to process, store, and encrypt or back up information'. No cipher, key management or in-transit statement for the query sent to the language model is published.
Ask: Are interactions encrypted at rest and in transit, who holds the keys, and is the query to the language model encrypted and excluded from that provider's logging?
Certifications
Public claim only
The footer of the Landchecker legal pages displays a badge image whose file name references ISO/IEC 27001 and an audit firm, checked 2026-09-27. No certificate number, scope statement, audit period or certifying body is published in the pages read, and neither the privacy policy nor the terms make a certification claim. No SOC 2 report, penetration test summary or IRAP assessment was found.
Ask: Can you provide the ISO/IEC 27001 certificate with its scope and certifying body, and say whether Elsie and the language model provider are inside that scope?
Contract structure
Public claim only
The Elsie AI Assistant Supplementary Terms - Beta (version 4.0, July 2026) sit alongside the platform Terms of Use and privacy policy already accepted, which 'continue to apply in full - including all acceptable use, intellectual property, liability, indemnity, and dispute resolution provisions', and take priority for Elsie AI where they conflict. The platform Terms and Conditions (effective 1 July 2024) licence products by membership tier (Free, Individual, Professional, Professional Plus, Standard, Advanced and Enterprise Members) and at cl 19.3 provide the products on an as-is and as-available basis, exclude implied terms other than non-excludable guarantees, and state the products 'are not a substitute for independent professional advice'. The liability cap and indemnity clauses were not read in full.
Ask: What is the liability cap for a loss caused by an incorrect Elsie answer relied on in a conveyancing matter, and is Elsie covered by the same cap as the rest of the platform?
Where processing happens
Not confirmed
The product page FAQ states that Elsie interactions 'are processed within Australia', checked 2026-09-27. The privacy policy (effective 27 June 2025) says personal information may be disclosed to 'Our affiliates, contractors and Service Providers ... who may be located outside of Australia, including, but not limited to the United States of America', that by agreeing the user consents to that disclosure so that the vendor 'will no longer be required to take reasonable steps to ensure the overseas third parties' compliance with Privacy Legislation', and at cl 10.3 that 'We may use overseas facilities to process, store, and encrypt or back up information'. The Elsie supplementary terms say queries are processed by third-party large language models without stating where those models run. The marketing statement and the privacy policy therefore point in different directions and residency is not established.
Ask: Is every Elsie query, including the call to the language model, processed and stored only in Australia, and will you state that in writing given the overseas disclosure consent in your privacy policy?
Breach notification
Not confirmed
No commitment by the vendor to notify a customer of a security incident or an eligible data breach was found in the Elsie supplementary terms (version 4.0, July 2026), the platform Terms and Conditions (effective 1 July 2024) or the privacy policy (effective 27 June 2025) read 2026-09-27. The privacy policy covers complaints and access rights but not incident notification, and no security or trust page was found in the 53-URL site map.
Ask: Within what time will you notify us of a security incident affecting Elsie interactions, and what will you provide for our own assessment under the Notifiable Data Breaches scheme?
Changes to Elsie and to the terms
Public claim only
Supplementary terms cl 2: during the beta 'features may change, break, or disappear without notice' and the vendor 'might wind down the beta at any time'. Clause 6: 'We can update Elsie AI's features, functionality, or these supplementary terms at any time. If we make material changes (including introducing fees under section 3), we'll let you know. Continuing to use Elsie AI after changes means you accept them.' Platform terms cl 14.2 reserve the right to make any changes considered necessary or desirable, including updates and new releases. The published supplementary terms are already at version 4.0.
Ask: Will you notify us when the language model, prompts or data sources behind Elsie change, and is there a version record we can rely on for a matter reviewed months later?
Ending use and getting records out
Public claim only
Supplementary terms cl 6: the vendor 'can end the beta, or suspend or revoke your access to Elsie AI, at any time on notice', the user may stop using it at any time, and on termination the licence ends while sections 1, 4 and 5 survive. Platform terms cl 21.1 allow the vendor to terminate on 30 days' notice for any reason, cl 21.2 allow suspension on grounds including where 'a Service Provider or Government Agency requires it', and cl 21.5 provides that an email address and password expire after 30 days with cl 15 (Customer Materials) surviving. No export of Elsie chat history or saved prompts on exit is published.
Ask: On exit, can we export the Elsie interaction history and saved prompts for our matter files, and in what format?
What Elsie is connected to
Public claim only
The product page states 'Elsie moves the map, toggles layers, runs site searches, compares shortlists and builds Projects', that it can copy up to 20 candidate sites into a Project, and that prompts can be saved and reused. Its data sources are described as Landchecker's own platform datasets. The privacy policy records Google single sign-on as an account option. No integration with a practice management system, document management system or email platform, and no API for Elsie, is published in the pages read.
Ask: Can Elsie or its outputs be connected to our practice management or document management system, and is there an audit record of Elsie actions inside a Project?
Whether Elsie reaches the open web
Public claim only
The product page states 'Elsie queries the Landchecker platform in real time, including datasets contractually acquired from government and commercial providers that aren't freely available online', that it works from the parcel selected on the map, and that 'If data isn't connected, Elsie says so rather than speculating'. Nothing read states whether the underlying third-party language model may draw on its own training data or make any web request when platform data does not answer the question.
Ask: Can Elsie answer from the language model's own knowledge or from a web search when a Landchecker dataset does not cover the question, and is the source of every statement shown to the user?
What Elsie does on its own
Public claim only
Supplementary terms cl 1: 'Elsie AI does not make automated decisions that have legal or similarly significant effects on you. It provides information and suggestions - any decisions are yours to make.' The product page describes Elsie taking actions in the platform: moving the map, toggling layers, running site searches, comparing shortlists, building Projects and saving prompts, with example instructions such as 'Add these five sites to a new project'. No approval step or undo for those actions is published.
Ask: Which actions can Elsie take without a user confirming them, are they logged against the user, and can any of them be turned off?
Reliance on Elsie's answers
Public claim only
Supplementary terms cl 1: 'AI-generated content may be incorrect, incomplete, outdated, or misleading', the platform's data accuracy and 'not a substitute for professional advice' provisions at cl 19.3-19.5 of the Terms of Use apply to all Elsie outputs, and 'AI introduces an additional layer of uncertainty beyond the underlying data itself'. The product page states Elsie 'cites Landchecker data and is designed as a starting point for professional research - not planning, legal or valuation advice' and the FAQ says 'It's a research starting point: verify before acting'.
Ask: What verification step do you expect before an Elsie planning or hazard summary is relied on in advice to a client, and does the interface record which source each statement came from?
