Product and intended use
Define the configuration, people, information and tasks being assessed.
Product and plan covered
Public claim only
The contract is stated to comprise General Terms plus Product Terms plus Third Party Terms, effective 17 August 2026. Product Terms Part A covers 'Connecting with a Lawyer' for consumers; Part B covers a Credit Pack for a 'Legal Practitioner', defined as 'a law firm or law practice that uses the LawConnect Platform to advertise its services and has elected to receive potential client connections'. The scope of the batch description as a document-sharing portal is not what the AU site now publishes.
Ask: Which Product Terms apply to our firm's account, and is the secure document sharing described on the LEAP site the same product as this platform or a separate one?
What the AI does
Public claim only
General Terms clause 9.1 states elements of the products 'are powered by artificial intelligence (AI), and use AI algorithms and technologies, including machine learning and generative AI, for activities including (but not limited to): (a) providing answers to Your questions, (b) providing suggestions of legal providers who may be able to provide assistance, (c) generating reports and summaries of legal matters, and/or (d) providing assistance with other requirements related to legal or business practice'. The AU home page describes a four-step flow ending in a summary for the lawyer and a lawyer match, and offers 'Or, start by uploading a document' without stating what is done with the document.
Ask: What does LawConnect do with a document a user uploads, and does the AI read, summarise or extract from it?
Deployment and hosting
Public claim only
Browser and mobile SaaS: the chat runs at chat.lawconnect.com, with iOS and Android apps linked from the AU home page. General Terms clause 7.2(a) reserves the right to 'store any and all data using cloud storage technology (such as Amazon Web Services), at LawConnect's discretion'. The privacy policy states the Services are 'hosted and operated in Australia, New Zealand, the United States, Canada and the United Kingdom through LawConnect and our service providers'. No private cloud or on-premises option is offered.
Ask: For an Australian account, in which of those five countries is the data at rest, and can hosting be contractually limited to Australia?
Governing law and Australian regulation
Public claim only
Schedule 1 item 1 provides that for accounts with an Australian address, 'This Agreement is governed by the law of New South Wales' with non-exclusive jurisdiction of its courts, fees are in Australian dollars, and Privacy Laws are defined to include the Privacy Act 1988 (Cth), the Australian Privacy Principles, the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth), with the Regulator including the Office of the Australian Privacy Commissioner. Clause 23.3(b) requires external mediation under the mediation rules of the Law Society of New South Wales before proceedings.
Ask: Does the Australian schedule apply to every account with an Australian address, including a firm whose parent is overseas?
Vendor content directing how AI describes the product
Not confirmed
Checked deliberately on 27 September 2026. A 60-URL map of lawconnect.com with the search terms 'ai assistant privacy terms security about' returned no /llms.txt, /ai-info, /ai or /for-ai path, and the four pages read (home, FAQs, Terms and Conditions, privacy policy) contain no heading or block addressed to AI models, AI assistants, LLMs or crawlers and no instruction about how the product should be described. No /llms.txt was guess-fetched, so its existence is unverified rather than disproved.
Ask: Do you publish any page or file, on lawconnect.com or a related domain, that tells AI models or crawlers how to describe LawConnect?
Vendor's own superlative statements in published Q&A
Public claim only
The AU FAQ answers a question about its own matching with a superlative: 'How are lawyers selected to view my case? We select the best lawyer for your case based on criteria such as your location, your specific issue, your legal needs and the capabilities of the lawyer.' Clause 9.1(b) of the terms describes the same function as 'providing suggestions of legal providers who may be able to provide assistance', and Product Terms A.2(b) states LawConnect 'does not warrant or guarantee that it will be able to connect You to a Legal Practitioner suitable for Your circumstances (or at all)'. No comparison against a named competing product was found in the material read.
Ask: What criteria and weightings decide which practitioner is shown, and how does that sit with the Part A statement that suitability is not warranted?
Stated intended use and limits
Public claim only
Clause 9.5(b) states 'AI Services do not constitute legal advice and must not be relied upon as legal advice. A qualified lawyer should review any legal-related output of the AI Services before it is relied upon'. Clause 9.5(c) states 'AI Services may not be accurate or current. You are responsible for validating AI Services based on Your own skill, judgment and experience.' Product Terms A.2(c) states LawConnect 'does not provide legal advice'. The AU site footer disclaimer states the content is for informational purposes only.
Ask: How is the clause 9.5 position surfaced to a consumer inside the chat at the point they receive an answer?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Verification of practitioners and responsibility for the connection
Not confirmed
The AU home page states '6,000+ Verified lawyers across every state & territory', 'We match you with a verified lawyer', a '4.9 Average lawyer rating based on verified client reviews' and 'Trusted by 6,000+ Australian lawyers'. The binding Product Terms state at A.2(d) that LawConnect 'does not assess or certify the licensing, competency or solvency of the Legal Practitioners', at A.3(b) that 'any ratings or feedback provided on a LawConnect Platform about Legal Practitioners does not constitute an endorsement by Us', at A.3(c) that practitioners are independent third parties not employed by or acting as agents of LawConnect, and at A.4 that LawConnect will not be liable for loss arising from the user's selection or engagement of a practitioner.
Ask: What does 'verified' mean on the consumer pages, given Product Terms A.2(d) states you do not assess or certify licensing, competency or solvency?
Model providers and where inference runs
Public claim only
General Terms clause 7.2(b) reserves the right to 'use third-party artificial intelligence technologies to assist to provide the LawConnect Products (including those provided by OpenAI and Anthropic)'. The privacy policy says AI technologies used 'including those provided by third parties' without naming them there. No model names or versions, no region for inference, and no customer selection of a model are published, and the clause is framed as a reservation of rights exercisable at LawConnect's discretion.
Ask: Which provider and model handles an Australian user's chat, in which region does inference run, and will you notify us before changing provider?
Subprocessors and third parties
Public claim only
Clause 8.3 records the client's consent that LawConnect 'may sub-license and disclose the Client Data to Third Party Suppliers and subcontractors during the Agreement Term for the limited purpose of providing' the platform and products. Clause 7.2 names Amazon Web Services as an example cloud store and OpenAI and Anthropic as AI technology providers. The privacy policy lists recipient categories (hosting and backup, maintenance and support, marketing, billing and payment, security, improvement, analytics and reporting) and states affiliated companies are 'generally located in Australia, New Zealand, United Kingdom, Ireland, Poland, United States and Canada'. No standing subprocessor list page was found.
Ask: Can you provide a named subprocessor list with locations for the Australian service, and commit to notice before additions?
Use of chat Input for training or improvement
Not confirmed
Clause 8.2 states Client Data may be used 'for the limited purpose of providing' the products and 'must not' be used for any other purpose without prior written consent. The privacy policy records a different and wider position: 'Content and chat data: information you enter or upload into the Website or Services, including chat interactions with our AI legal assistant and web forms, and documents you upload' is used, among other things, to 'improve the accuracy and relevance of the Services', on a legal basis of 'Legitimate interest (service improvement)'. Its AI section adds 'We will not input your information into Public AI' and 'To the extent we input your information into any AI Technologies, we will use that information to improve our internal business processes to deliver legal services to you.' Clause 7.2(c) also permits analytics on Client Data for internal purposes. No document read says whether Input is used to train or fine-tune any model.
Ask: Is chat Input used to train, fine-tune or evaluate any model, by you or by OpenAI or Anthropic, is zero-retention agreed with those providers, and how does that sit with clause 8.2?
Use of ratings and feedback
Public claim only
Product Terms A.5(c) states 'Notwithstanding any other provision of this Agreement, You assign to Us all rights, title, and interest (including all Intellectual Property Rights) in Your Feedback. LawConnect may use Feedback for any purpose without restriction or compensation.' A.5(b) and B.6(b) reserve a discretion to remove feedback LawConnect considers inappropriate, deceptive or non-compliant with its guidelines, which are published at a trust-and-safety page that was not opened. B.6(b) states feedback 'is the relevant user's independent opinion and does not constitute an endorsement or recommendation by Us'.
Ask: What does 'any purpose without restriction' cover for assigned Feedback, including use in model training or marketing, and how are removals of a review recorded?
Retention
Public claim only
The privacy policy states 'Where you hold an account, we generally retain your account information for the duration of your account and for 7 years after it is closed, unless a longer period is required by law or to resolve a dispute', and that retention otherwise runs only as long as necessary for the stated purposes and legal obligations. Clause 18.1(c) of the General Terms requires mutual secure deletion on termination, with exceptions including material 'stored in an archived backup'. No retention period is published for chat Input specifically.
Ask: How long is an AI chat transcript kept where the user never creates an account or never connects to a lawyer?
Deletion
Not confirmed
The AU FAQ states, of self-service account deletion in Settings, 'All your private information will be deleted when you delete an account' and 'Deleting an account will also delete all your private information held by LawConnect. If a case has been shared with a lawyer, we will endeavour to ensure that your information is removed from third-party systems.' The privacy policy states account information is generally retained for 7 years after an account is closed. The two statements are not reconciled in the documents read.
Ask: After a user deletes an account, what is actually deleted and what is retained for the 7-year period in the privacy policy, and what does 'endeavour' mean for removal from a law firm's systems?
Who can read chat content
Public claim only
The privacy policy states personal information is shared with affiliated companies 'generally located in Australia, New Zealand, United Kingdom, Ireland, Poland, United States and Canada', with third-party service providers by category, and that information 'may be accessed by or transferred to our personnel, affiliates, partners, and service providers who are located around the world'. It lists 'restricting and monitoring access to systems, including through suitable authentication measures'. No statement identifies which roles can read AI chat Input or whether such access is logged.
Ask: Which roles and which countries' personnel can read a consumer's chat content, and is that access logged and auditable?
Access control and credentials
Public claim only
Clause 22.3 places responsibility for user credentials on the client, states LawConnect may update credentials to protect platform security, and makes the client 'solely responsible for all use of your User Credentials, including by any Unauthorised Users'. Clause 7.1(e) allows suspension where there is an actual or suspected security concern. The FAQ describes consumer sign-in by emailed verification code or by continuing with a Google account. No single sign-on, enforced multi-factor authentication or role model is published for firm accounts.
Ask: Is single sign-on or enforced multi-factor authentication available for a firm's lawyer portal accounts, and can we control which staff see enquiries?
Encryption
Public claim only
The AU FAQ states, in the vendor's own wording, 'Your data is encrypted and securely transmitted, maintaining your privacy. It's stored in a highly secure database that adheres to leading security protocols.' The privacy policy lists firewalls across office networks, anti-virus on workstations, access restriction and monitoring, staff cyber security training, and restrictions on physical access to paper files. No encryption standard, no statement of encryption at rest for chat content, and no key management detail is published.
Ask: Which encryption standards apply in transit and at rest, who holds the keys, and is chat Input encrypted separately from account data?
Independent assurance
Public claim only
Clause 22.1 obliges each party to maintain security controls for the systems it operates that 'meet or exceed ISO 27001:2022 (or any equivalent or successor standard)', ensure materials do not contain publicly known malware, and protect Client Data from accidental or unlawful destruction, loss, alteration or unauthorised disclosure. That is a contractual obligation on both parties, not evidence of certification: no certificate, audit report, SOC 2, ISO/IEC 42001 or trust centre is published, and none was surfaced by a 60-URL site map.
Ask: Is LawConnect itself certified to ISO/IEC 27001:2022, and can you provide the certificate scope or an equivalent audit report?
Contracting entity and contract structure
Public claim only
Clause 1.1 names the counterparty as 'Legal Marketplace Pty Ltd trading as LawConnect (ACN 676 482 509) of Level 21, Tower 2, 200 Barangaroo Ave, Barangaroo NSW 2000, Australia', effective 17 August 2026, with the agreement comprising General Terms, applicable Product Terms, applicable Third Party Terms and any Order, later documents prevailing. Acceptance occurs on the earlier of clicking accept, first use of a product, or payment. The document contains mis-numbered internal cross-references: clause 7.2(c) refers to 'clauses 19 (Privacy) and 20 (Conf)' while Privacy is clause 21, clause 7.3 refers to clause 6.1, clause 8.2 refers to clause 7.3, clause 21.7 refers to 19.6(b), and Part B has two clauses numbered B.7.
Ask: Which entity will our firm contract with, and will you issue a corrected version of the cross-references in clauses 7.2, 7.3, 8.2, 21.7 and Part B?
Cross-border transfers
Public claim only
The privacy policy states 'Our Services are hosted and operated in Australia, New Zealand, the United States, Canada and the United Kingdom through LawConnect and our service providers' and that by using the Services the user acknowledges personal information may be accessed by or transferred to personnel, affiliates, partners and service providers 'located around the world'. It cites the UK International Data Transfer Agreement or Standard Contractual Clauses with the UK Addendum as example safeguards for UK transfers, and gives no Australian equivalent. Clause 7.2(a) allows storage in cloud storage such as Amazon Web Services at LawConnect's discretion.
Ask: For an Australian user, which countries does the data reach, and will you contract to keep Australian data in Australia?
Incident and breach notification
Public claim only
Clause 21.5 provides that where a party has reasonable grounds to suspect a Notifiable Data Breach it will notify the other in writing with all relevant details 'without undue delay and no later than 72 hours after becoming aware', co-operate in investigation and mitigation, and co-operate on notifications to the applicable regulator and affected individuals. Clause 21.4(d) applies the same 72-hour period to regulator compliance notices and breaches of the privacy clause. Clause 21.8 states the clause survives termination. No security contact address or status page is published.
Ask: Who is the named security contact for a 72-hour notification, and would a breach limited to AI chat content be treated as notifiable under clause 21.5?
Change and variation rights
Public claim only
Clause 7.1 lets LawConnect modify delivery, 'change, refine or discontinue any feature or functionality', and amend the agreement or the Third Party Terms, with 'reasonable notice (at least 14 days) in writing' only where a change 'materially and adversely affects Your rights'. Clause 7.3 gives a right to terminate immediately by written notice within 30 days of a change taking effect that is to the client's material detriment. The privacy policy is updated by posting a revised version with a new effective date, with additional notice only 'in some cases'.
Ask: Would a change of AI model provider or of the hosting country count as materially and adversely affecting our rights, and so attract the 14-day notice?
Exit and data portability
Public claim only
Clause 17.1 allows either party to terminate on at least 30 days' written notice, and Part B allows a Credit Pack Order to be terminated on at least 30 days' notice to the account manager, with credits usable for 12 months from issue and top-up fees non-refundable. Clause 18.1 requires the client to cease use and each party to delete the other's materials, subject to legal, accounting, governance and archived-backup exceptions. No export, download or data-portability mechanism is described for enquiries, transcripts or a firm's profile and reviews. The privacy policy offers a copy of personal information on request by email.
Ask: On exit, what can a firm export, in what format, and do the reviews and enquiry history remain on the platform?
Connectors and third-party products
Public claim only
Clause 4 sets out a Third Party Products framework in which a separate supplier contract is formed between the client and the third-party supplier, with LawConnect acting as the client's agent for ordering, delivery, contracting and payment, and with the client's remedies for loss lying against the supplier rather than LawConnect. Part B includes integration with LEAP Legal Software for existing LEAP customers. Other published touchpoints are Google sign-in, SMS and messaging platforms such as WhatsApp, and apps distributed through the Apple App Store and Google Play. No named list of third-party suppliers or their terms was found.
Ask: Which Third Party Products are in scope for our account, and where are the applicable Third Party Terms published for each?
Whether the AI reaches the open web
Not confirmed
Nothing in the terms, privacy policy, FAQ or home page states whether the AI chat retrieves from the open internet, from a defined body of legal content, or from the vendor's own guides and topic pages. Clause 9.1(a) describes only 'providing answers to Your questions', and no citation, source list or authority reference is described as part of an answer.
Ask: What sources does an answer draw on, does the chat query the open web, and are sources or citations shown to the user?
Actions the platform takes
Public claim only
Product Terms A.1 makes the disclosure user-triggered: on electing to connect or request a proposal, the user consents to Client Data being forwarded to a practitioner, and 'We will initially seek to forward the Client Data ... in an anonymised format. But, if a Legal Practitioner indicates they may be able to assist, We will share Your name and provided contact details with them.' The privacy policy states 'LawConnect does not use automated systems (including AI Technologies) to make, or to substantially and directly assist in making, decisions about you that could reasonably be expected to significantly affect your rights or interests.' On the firm side, Part B B.3 sets accounts to auto top-up and authorises charging the payment method on file when credits fall to 20 or less.
Ask: Can a firm disable auto top-up, and can a consumer's matter be forwarded to a practitioner without an explicit election on each occasion?
Human review of AI output
Public claim only
Clause 9.5(b) states 'A qualified lawyer should review any legal-related output of the AI Services before it is relied upon', and clause 9.5(a) that the AI Services 'may not have been developed or approved by legal practitioners and carry no legal or professional endorsement'. Nothing published describes review of an AI answer, or of the matter summary sent to a practitioner, by a person before it is delivered. The AU home page presents the summary as going to the lawyer ahead of the first call.
Ask: Is any AI answer or matter summary reviewed by a person before the consumer or the practitioner sees it, and who is accountable for an incorrect summary?
