Legal-specific · Practice management · Medium confidence
LawVu Limited · LawVu LegalOS including Intelligence (Assistant, AI Intake, Draft). Optional Azure OpenAI, MCP connectors and Clausebase. The customer SaaS Agreement is not published — review it separately from website terms.
New Zealand legal operating system for in-house teams: intake, matters, contracts, spend and embedded AI agents hosted on Microsoft Azure.
Opens a private software assessment of LawVu LegalOS for one task, with this profile’s questions to hand.
| Deployment | SaaS |
|---|---|
| Hosting regions | Australia, United States, European Union / EEA, Canada, Another named location |
| Australian region | On request |
| Model providers | Azure OpenAI |
| Assurance | ISO 27001, SOC 1, SOC 2, ISO/IEC 42001 |
| Training on customer content | Unknown |
| Retention summary | Privacy policy states backups and logs are kept for up to 12 months before automatic deletion. Customer-matter retention under the unpublished SaaS Agreement was not retrieved. No published ZDR with Azure OpenAI. |
| Integrations | Microsoft Outlook, Gmail, Microsoft Word, DocuSign, Workshare, Office 365 SSO, Okta, Formstack, Workato |
| Pricing summary | FAQ describes plan-and-user pricing with add-on users and modules. List price is not published; sales@lawvu.com or a demo is required. |
| Legal content coverage | Customer matters, contracts and knowledge stored in LegalOS. No licensed Australian primary-law library is claimed. Clausebase is an optional drafting partnership. |
| Australian presence | Yes — LawVu Limited, 26-28 Wharf Street, Tauranga, New Zealand. Subprocessor list dated 4 August 2026 describes an Australia Data Stack; Azure OpenAI for that stack is listed as processing in Europe. |
A later research check disagrees with a value already on this profile. The published value is unchanged.
Define the configuration, people, information and tasks being assessed.
Public claim only
LegalOS is sold as a modular SaaS covering intake, matters, contracts, spend, documents and LawVu Intelligence (Assistant, AI Intake, Draft). FAQ says plan-and-user pricing with add-on modules. The customer SaaS Agreement is not on the public site.
Ask: Confirm which modules (Intelligence, Draft, spend AI, MCP, Clausebase) are on our order form and attach the current SaaS Agreement and DPA.
Public claim only
FAQ and Trust Center describe out-of-the-box Azure SaaS. Data resides in the Azure region the customer chooses. No on-premises option was found.
Ask: Will our tenant, backups, logs and Intelligence indexes sit only in the Australian Azure region?
Public claim only
Intelligence pages describe LawVu Assistant (chat that can create matters, assign tasks and trigger workflows), AI Intake, Draft in Word, and AI contract analysis. Home marketing describes multi-agent workflows with human hand-off. An MCP server can connect Claude, ChatGPT and Copilot to LegalOS.
Ask: Which Intelligence features and MCP connections will be enabled for our tenant, and can we disable agentic write-actions?
Public claim only
LegalOS is a matter and contract system, not a licensed Australian case-law product. Knowledge search is over the customer's own repository. Website terms are New Zealand law; they govern the marketing site, not the SaaS.
Ask: Confirm that Intelligence will not browse open-web Australian law unless we enable a connector, and which law governs our SaaS Agreement.
Record the practical work needed to introduce and maintain the software.
Public claim only
FAQ: plan and user basis; users and modules can be added. List price unpublished. Website terms exclude most website liability under New Zealand law and are not a product licence.
Ask: Provide an itemised quote (seats, Intelligence, MCP, term, auto-renewal) and the licence grant in the SaaS Agreement.
Public claim only
FAQ lists Outlook, Gmail, Workshare, DocuSign, Word Online, and SSO via Office 365 or Okta, plus an API. Draft is a Word toolbox. Optional subprocessors include Formstack and Workato. MCP can expose matters to external AI tools.
Ask: Demonstrate Word Draft, Outlook/Gmail capture, SSO and which MCP scopes our tenant will allow.
Public claim only
Intercom is a mandatory subprocessor for in-app support chat (United States). Privacy officer contact is privacy@lawvu.com. No public Sev-1 times were found.
Ask: Provide the support SLA for an Australian-hours tenant and the security escalation path, including Intercom access to ticket content.
Compare complete work at the required quality, including checking and correction.
Not confirmed
Marketing claims accurate, reliable Intelligence results. No independent accuracy study or published evaluation of Assistant or Draft on Australian work was found.
Ask: Share any evaluation of Assistant and Draft on Australian contracts, including unsupported-citation and incorrect-routing rates.
Public claim only
Assistant and Intake are marketed to reduce routine work with human-in-the-loop controls. Draft and Lens operate on the customer's contracts. Time saved after lawyer checking is not independently measured.
Ask: On our playbooks, show where Assistant cites a matter file, where it refuses, and how long Legal spends reviewing a typical AI intake before it is assigned.
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Not confirmed
AI Intake is marketed for the business to self-serve requests. Enabling Assistant for non-legal staff, or MCP so that Claude/ChatGPT can read matters, is the customer's authority decision. Website terms do not address professional use of Intelligence.
Ask: What end-user disclosure and matter-exclusion controls exist, and can we keep Assistant internal-only with MCP off?
Public claim only
The 4 August 2026 subprocessor list names Microsoft Corporation (Azure OpenAI) as an optional processor of certain AI Services. For an Australia or UAE Data Stack, processing is listed as Europe; for US/EU stacks, as agreed in the SaaS Agreement; for Canada, United States. MCP separately lets the customer connect Claude, ChatGPT or Copilot.
Ask: Name each model, Azure region and contract used for Intelligence on our Data Stack, and whether MCP will be on.
Public claim only
Mandatory subprocessors (4 August 2026): Microsoft Azure (hosting; country as agreed), Intercom (US), Twilio/SendGrid (US), Cloudflare (US). Optional: DocuSign, Google (mobile push), Azure OpenAI, Formstack, Workato. The SaaS Agreement is referenced but not published.
Ask: Confirm the dated register that will apply to us, notice and objection rights, and which optional processors we can refuse.
Public claim only
Home and Intelligence pages say customer data is never used to train AI models, is not used to train public models, and prompts are not used to train LawVu's models. Privacy policy allows use of Personal Information to improve the Website and Service and permits anonymised aggregation. The SaaS Agreement was not retrieved, so the marketing claim is not contractual on the public record.
Ask: Does the signed SaaS/DPA prohibit training of LawVu or third-party models on matters, prompts, outputs and embeddings, including Azure OpenAI?
Not confirmed
No public description of whether thumbs-up/down, corrected drafts or support chats are used to improve a shared model. Intercom will see in-app support content.
Ask: Do feedback labels and support transcripts stay in our tenant, and can we disable any shared-model improvement?
Public claim only
Privacy policy: backups and logs for up to 12 months then automatic deletion. That notice covers LawVu's own processing of Personal Information. Default retention for Intelligence chats, embeddings and Azure OpenAI logs is not stated.
Ask: State default and configurable retention for Assistant chats, Draft history, embeddings and Azure OpenAI logs on an Australian Data Stack.
Not confirmed
Privacy policy allows access, correction and deletion requests for LawVu-controlled Personal Information; customer User Information is referred to the customer. No certified-deletion SLA covering Azure or Azure OpenAI was found in public terms.
Ask: On exit, what is deleted (matters, chats, embeddings, subprocessors), in what period, and will you certify deletion in writing?
Public claim only
Mandatory Intercom (US) for in-app support. Azure hosts the service. Privacy allows disclosure to persons who can require it (government) and in a sale of the business. Staff who handle Personal Information receive training. Ticketed-access logs were not described.
Ask: Who can read our matters and Assistant chats, from which countries, under what approval, and can we see those access logs?
Public claim only
Trust Center: SAML SSO and SCIM, including multi-factor authentication. FAQ: matter-level visibility restrictions and private conversations/files. Home claims full audit trails on every action. Export of a complete Assistant prompt log was not described.
Ask: Confirm SSO/SCIM and MFA on our plan, and whether we can export a complete Assistant and MCP audit log.
Public claim only
Trust Center claims encryption in transit and at rest using 'the latest industry standards'. Algorithms, key management and customer-managed keys were not named.
Ask: Confirm algorithms for matters and Intelligence indexes, the path to Azure OpenAI, and whether customer-managed keys are available for an Australian Data Stack.
Public claim only
Trust Center: ISO27001, SOC 1 and SOC 2, with independent attestation for GDPR, CCPA and HIPAA. Intelligence page also claims certification to ISO42001 for AI management systems. Reports were not inspected.
Ask: Provide the current ISO 27001, SOC 2 (and ISO 42001 if issued) reports covering Intelligence, with scope, exceptions and the latest penetration-test summary.
Not confirmed
Public website terms (New Zealand law) apply to the marketing site and exclude most liability. Privacy says customer User Information is processed under a Terms of Service and any DPA, which are not published. Subprocessor list refers to the SaaS Agreement.
Ask: Provide the current SaaS Agreement, DPA and any AI/MCP schedule, with liability, training and Australian law options.
Not confirmed
Intelligence marketing says data stays in the chosen region at rest and AI runs in the Azure ecosystem. The subprocessor list places Azure OpenAI processing for Australia/UAE Data Stacks in Europe. Mandatory Intercom, Twilio and Cloudflare process in the United States. Privacy allows cross-border transfers with SCCs where required.
Ask: For Intelligence on an Australian Data Stack, list every country for storage, inference, backups, support and MCP, and confirm whether Australia-only inference is available.
Not confirmed
No contractual 72-hour Security Breach clause was found in public website terms. Privacy officer is privacy@lawvu.com. Incident history was not published.
Ask: State the contractual notification period from discovery, NDB/OAIC cooperation, and any material incidents in the last 24 months affecting Intelligence.
Not confirmed
Subprocessor list 'may be updated from time to time' with a version-history note. No public model-list freeze or customer objection right was found. Website terms do not describe SaaS change control.
Ask: What written notice will we get before a new model or subprocessor is added, and can we object?
Not confirmed
Privacy mentions a right to move or copy Personal Information. Export formats for matters, contracts and Assistant history, and certified deletion of subprocessors, are not in the public website terms.
Ask: What export we receive for matters, contracts and Assistant history, and will you certify deletion within 30 days including Azure OpenAI?
Not confirmed
Optional MCP server gives Claude, ChatGPT and Copilot governed access to matters, contracts, workflows, spend and files. Enabling MCP is the firm's choice and sends LegalOS context to those tools under their terms. Workato and Formstack are optional subprocessors.
Ask: List every connector and MCP tool that will be on for our tenant and the data each receives.
Not confirmed
Intelligence is described as operating on LegalOS data. No open-web browsing toggle was found. MCP-connected tools (ChatGPT, Claude) may browse the web under their own settings.
Ask: Does LawVu Assistant browse the open web, and can we disable any such retrieval including inside MCP tools?
Not confirmed
Home marketing: agents reason, take action and hand off to a human, with the customer setting rules. Assistant can create matters, assign tasks and trigger workflows. MCP is described as moving from 'ask to answer' toward 'ask to act'. Confirmation gates are configured by the customer.
Ask: Which Assistant or MCP actions can create matters, send email or change a contract without a second Legal confirmation?
Public claim only
Home claims human-in-the-loop guardrails on all agentic capabilities. Intelligence says Assistant is governed by legal's risk profile and HITL controls. Nothing in the public website terms requires a lawyer to approve an output before the business sees it.
Ask: Can we require every Assistant answer and Draft suggestion to be approved by a named lawyer before it is visible to the business?
Official pages reviewed for this profile, last reviewed 2026-09-21.
Add this product to your toolset for a particular task, or use it with a practice-area checklist. Add to your toolset Practice areas Best AI practice management tools Australia Compare with LEAP
