Legal-specific · Practice management · Medium confidence
LEAP Legal Software Pty Limited · Australian LEAP subscription including Matter AI (Corto), LawY, Generator, AI Prompts and AutoTime. Review LawY standalone (lawy.ai), LEAP Enterprise, By Lawyers and US/UK editions separately.
Australian practice-management system with matter-file AI, legal research, drafting prompts and automatic time capture included in the subscription.
Opens a private software assessment of LEAP for one task, with this profile’s questions to hand.
| Deployment | SaaS |
|---|---|
| Hosting regions | Australia, United States, United Kingdom, Canada |
| Australian region | Yes |
| Model providers | OpenAI, Anthropic, Google Gemini |
| Assurance | SOC 2 Type II, SOC 3Assurance source, checked 2026-10-10 (opens in a new tab) |
| Training on customer content | Plan-dependentTraining on customer content source, checked 2026-10-10 (opens in a new tab) |
| Retention summary | LawY security page claims zero retention at the foundation-model API. UK LEAP page states data may be kept for seven years after termination for reactivation. Corto privacy stores personal information while a legitimate purpose exists. Matter AI chat history is stored per user in the product. |
| Integrations | Microsoft Word, Microsoft Outlook, Microsoft 365, InfoTrack, By Lawyers, LawConnect, Xero, QuickBooks, RapidPay, Power BI |
| Pricing summary | Quote only. LEAP does not publish a list price. Matter AI, LawY, Generator, AI Prompts and AutoTime are included in the subscription. The By Lawyers add-on is $79 per month. |
| Legal content coverage | Australian court and government forms and precedents maintained in-house; LawY cites Australian case law and legislation in-product; By Lawyers is an optional add-on. |
| Australian presence | Yes — Australian-owned, Sydney HQ. AU/NZ client data at rest stated as AWS Asia-Pacific (Sydney). Matter AI may still send limited client data to US model providers. |
A later research check disagrees with a value already on this profile. The published value is unchanged.
Define the configuration, people, information and tasks being assessed.
Public claim only
Australian pages treat Matter AI, LawY, Generator, AI Prompts and AutoTime as included in the LEAP subscription. Matter AI is supplied by Corto Pty Ltd inside LEAP; LawY is also sold separately at lawy.ai. LEAP Enterprise, By Lawyers and non-AU editions have different packaging.
Ask: Confirm the exact Australian order form, which AI modules are in our tier, and whether Corto or LawY terms are incorporated or can later be charged separately.
Public claim only
LEAP is sold as cloud SaaS with desktop, web and mobile clients. No public on-premises option for Matter AI was found. AU/NZ tenancies are described as hosted on AWS Asia-Pacific (Sydney).
Ask: Is our tenant exclusively AWS ap-southeast-2, and are desktop caches, mobile copies and disaster-recovery replicas in the same region?
Public claim only
Matter AI answers questions against the matter file with document references, summaries and chronologies. LawY provides cited legal research and optional lawyer verification. Generator and Prompts draft in Word. All Agent can combine matter facts with LawY research. AutoTime records activity.
Ask: Which of Matter AI, All Agent, LawY (including Automatic Deep Research and verification), Generator, Prompts and AutoTime will be enabled for which roles, and which remain off by default?
Public claim only
LEAP maintains Australian matter types, court and government forms and precedents. LawY is marketed with Australian case law and legislation opened in a sources panel. Coverage by state and practice area, and whether LawY searches a licensed citator, is not specified in the pages read.
Ask: List the Australian jurisdictions, collections and currency controls LawY actually searches for our practice areas, and which Matter AI prompts exist for our matter types.
Record the practical work needed to introduce and maintain the software.
Public claim only
Quote only. LEAP does not publish a list price. It is a per-user monthly subscription for a set term. Matter AI, LawY, Generator, AI Prompts and AutoTime are included in the subscription. The By Lawyers add-on is $79 per month. Third-party estimates are not a LEAP price.
Ask: Provide an itemised quote showing per-user fee, term, auto-renewal, notice, seat flexibility, and any usage caps or future Corto/LawY charges.
Public claim only
Matter AI runs from the LEAP ribbon on the matter and as a Microsoft Word add-in that can insert text into the open document or send a response to Outlook. First use of Matter AI for Word ingests documents across the user's LEAP matters. The add-in is installed via Microsoft Get Add-ins, not described as central Microsoft 365 deployment.
Ask: Demonstrate, on a test matter, permission-aware retrieval, where prompts and outputs are saved, and whether the Word add-in can be deployed centrally without firm-wide first-use ingestion.
Public claim only
Australian support is advertised via 1800 007 709, LiveChat, community.leap.com.au and LEAP University. Security due-diligence contact is trust@leaplegalsoftware.com; a dedicated security contact is offered for enterprise. No public severity matrix or contractual response times were found.
Ask: Provide the support and security SLA that will apply to our tenant, including Australian-hours coverage, Sev-1 targets and the named security escalation path.
Compare complete work at the required quality, including checking and correction.
Public claim only
LawY published an 8 August 2025 in-house evaluation: 76% 'correct' on 272 Australian questions versus Gemini 2.5 Pro and ChatGPT 4.1, using LLM-as-judge against lawyer-verified golden answers, with stated methodological limits. No independent Matter AI hallucination study on customer correspondence was found.
Ask: Share any Matter AI evaluation on Australian matter files, including error types, unsupported-answer behaviour, and whether LawY figures apply to the LEAP-integrated build we would buy.
Public claim only
Matter AI is bounded to the selected matter or documents and attaches references that can be opened in correspondence. LawY returns numbered citations. Terms require a solicitor to review outputs before use in legal services. Time saved after checking has not been independently measured.
Ask: On a sample of our matter types, show where the tool cites the file or authority, where it says it cannot find an answer, and how long a solicitor needs to verify a typical output.
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Not confirmed
LEAP and LawY are marketed to law firms and legal professionals, not as unsupervised client-facing advice. Terms say outputs are not a substitute for a qualified solicitor. LawConnect is client document sharing. No template client-consent or court-practice-note disclosure text was found. Putting matter files into Matter AI or pasting facts into LawY is the firm's authority decision.
Ask: What client-disclosure wording, matter-exclusion controls and court-practice-note records (for example NSW SC Gen 23) does LEAP supply, and can we block AI on nominated matters?
Public claim only
Matter AI help (24 July 2026) lists a model selector: GPT 5.4 Instant, GPT 5.4 Thinking, Claude 4.6 Sonnet and Claude 4.6 Opus. LawY security names OpenAI and Google Gemini under corporate API arrangements. Corto terms say Matter AI uses OpenAI and others from time to time. Corto may suspend the product if a third-party service cannot be replaced.
Ask: For our tenant, name each model, legal entity, endpoint region and contract (including Azure/Bedrock/Vertex if used), and the notice period before a model is added or swapped.
Public claim only
Corto and LawY trust centres list OpenAI, Anthropic and AWS among subprocessors. LEAP security FAQ says a subprocessor register is available for due diligence. An unauthenticated, dated list with countries, purposes and objection rights for the Australian LEAP product was not retrieved. LEAP Trust Centre did not return scrapeable content.
Ask: Provide the current dated subprocessor register for Australian LEAP plus Matter AI and LawY, with entity, country, purpose, data types, and our notice and objection rights.
Not confirmed
LEAP security FAQ (reviewed 2026-09-20) says client matter data is not used to train third-party foundation models without explicit consent. LawY security page says conversations and documents are not used to train models and claims ZDR at the API. LawY Terms clause 7.1 nonetheless authorise LawY and third-party providers to use Input and Output to develop and improve products, including training machine-learning models. Corto Matter AI terms are silent on training. AU AI-info page repeats a no-training marketing line.
Ask: Which signed document prevails for LEAP-integrated LawY and Matter AI, and does it prohibit training and product improvement on prompts, outputs, uploads, embeddings, feedback and telemetry, including by OpenAI, Anthropic and Google?
Public claim only
Matter AI invites thumbs-up/down and written feedback, reviewed by Corto's team to improve answer quality. LawY states the operations team monitors verified answers and that only verified answers (with placeholders for names) are added to LawY's knowledge base. LawY Terms also allow use of Input and Output for analytics, usage patterns and abuse review.
Ask: Can we disable rating feedback and knowledge-base contribution, and is feedback content excluded from model training and from access by staff outside a ticketed review?
Public claim only
Matter AI stores per-user chat history in the product. LawY security claims transactional processing and ZDR at the model API, which is not the same as deleting platform copies. UK LEAP data-security page says LEAP keeps data for seven years after termination for possible reactivation. Corto privacy retains identifiable information while a legitimate purpose exists. No AU default retention window for Matter AI indexes was published.
Ask: State default and configurable retention for Matter AI chats, embeddings, LawY conversations, verified-answer knowledge-base copies, logs and backups, including the Australian tenant.
Public claim only
AU privacy policy describes erasure rights and processing on the client's instructions. UK page allows deletion on request but also seven-year post-termination retention. LawY Terms say that after termination the customer has no right to use or access Output. Corto does not warrant that it backs up Matter AI content. No public certified-deletion SLA covering model-provider stores was found.
Ask: On exit or matter close, what is deleted (chats, embeddings, LawY history, knowledge-base entries, backups, subprocessors), in what period, and will you certify deletion in writing?
Public claim only
LEAP says staff access client data only when required for support, with authorisation, monitoring and logging; privileged access is time-limited and MFA-enforced. LawY describes limited engineer access for debugging, search relevance or feature development, operations monitoring of verified answers, and double-masked lawyer verification. Corto terms say Corto does not review inputs/outputs for accuracy.
Ask: Who can read our matter content (LEAP, Corto, LawY, model providers, verifiers), under what ticketed approval, from which countries, and can we see those access logs?
Public claim only
Security FAQ describes role-based access, OAuth 2.0, MFA for privileged access being extended to all users, and logical segregation between firms. Matter AI chats are scoped to a matter or selected documents; chat history is visible only to the creating user. UK page says restricted-matter security is inherited by Matter AI/Prompts and Generator excludes restricted matters. First-use Word ingestion indexes all of a user's matters. SAML/SCIM were not documented on public pages.
Ask: Does our plan include enforced MFA, SAML/OIDC SSO, SCIM and immediate deprovisioning, and will you demonstrate that ethical walls survive Matter AI ingestion and All Agent retrieval?
Public claim only
LEAP security FAQ states TLS 1.2 in transit and AES-256 at rest including backups, with keys in AWS KMS, access controls and rotation. LawY states TLS 1.2 or higher and AES-256. Customer-managed keys were not offered on the pages read.
Ask: Confirm encryption of Matter AI indexes, LawY stores, logs and the path to each model provider, and whether customer-managed keys are available for the Australian tenant.
Public claim only
LEAP security FAQ claims SOC 2 Type II and SOC 3 audited by Sensiba, with reports via the Trust Centre, and ISO/IEC 27001:2022 certification in progress. Corto trust centre describes SOC 2 Type II recertification covering Security, Availability and Confidentiality. The About page still markets SOC 2 Type I, which is inconsistent with the FAQ. Reports were not inspected; AI-feature scope is unverified.
Ask: Provide the current SOC 2 Type II (and ISO 27001 if issued) reports covering LEAP, Corto Matter AI and LawY, with scope, exceptions, bridge letter and penetration-test summary.
Public claim only
Corto Matter AI terms (20 March 2026) are as-is, require solicitor review, give no output IP indemnity, and cap Corto's aggregate liability at payments made to Corto for Matter AI in the prior 12 months (the feature is currently bundled). LawY Terms: customer indemnifies LawY; liability cap equal to six months of fees paid to LawY; NSW law and exclusive NSW courts. LEAP security FAQ offers a GDPR DPA. The Australian LEAP MSA was not retrieved (AU /terms/ did not load).
Ask: Provide the Australian LEAP MSA, APP-aligned DPA, and any terms that override Corto/LawY liability caps, training licences and unilateral-change clauses for our order form.
Public claim only
AU/NZ client data is stated to be hosted on AWS Asia-Pacific (Sydney). The same FAQ says some AI features, including Matter AI, may transfer limited client data to the United States for AI providers. Corto privacy says Matter AI is hosted and operated in Australia, Canada, the United States and the United Kingdom. AU privacy policy lists US, Canada, UK, Ireland, Poland, Australia and New Zealand. SCCs are described for UK/EU clients, not an APP 8 pack.
Ask: For each AI feature, list every country for storage, inference, backups, support and logs, the transfer mechanism, and whether an Australia-only inference option exists.
Not confirmed
LEAP describes documented incident procedures, 24/7 monitoring and that client notification obligations are met. No public contractual timeline (for example 72 hours), NDB cooperation clause, status page or incident history was found.
Ask: State the contractual notification period from discovery, NDB/OAIC cooperation, subprocessor incidents, named contact, and any material incidents in the last 24 months affecting Matter AI or LawY.
Public claim only
Corto may update Matter AI terms by posting them in LEAP; continued use is acceptance, and Corto may terminate or modify Matter AI without notice. LawY may change features and terms by website or email notice; convenience termination is 30 days but unused fees remain payable. Matter AI can switch models in the UI; Corto may suspend the service if a third-party model provider fails.
Ask: Will material changes to training, location, models or subprocessors require prior written notice and a termination right, and can we pin models for a defined period?
Public claim only
LEAP is the system of record for matters, but AI-specific export of chats, prompts and embeddings is not documented. LawY Terms: after termination the customer loses the right to use or access Output. Corto tells customers to back up Matter AI content. UK page: seven-year retention after termination for reactivation. No escrow was found.
Ask: What self-service export exists for matters, Matter AI history, LawY answers and custom prompts, in which formats, for how long after termination, and what is then deleted?
Public claim only
Documented integrations include Microsoft 365/Word/Outlook, InfoTrack, By Lawyers, LawConnect, Xero, QuickBooks, RapidPay and Power BI. LawY standalone can connect external cloud storage; LEAP-integrated LawY is described as not extracting LEAP matter files automatically. Marketplace apps are third parties under their own privacy practices per the AU privacy policy.
Ask: For each connector we would enable, what data leaves LEAP, where is it stored, whose terms apply, and can we disable it without losing the core PMS?
Public claim only
Matter AI is described as limited to the matter file. LawY retrieves legal sources (cases and legislation) with citations. All Agent can call LawY when a question needs legal research. Whether LawY uses an open-web search that can be disabled, versus a closed collection, is not specified on the AU product pages read.
Ask: Does LawY or All Agent browse the open web, which sources are searched, can web retrieval be turned off, and how are non-authoritative sources labelled?
Not confirmed
All Agent is described as agentic chat with step-by-step reasoning and optional LawY research; responses can be turned into drafts in Word, PDF, Excel or PowerPoint. Matter AI can send a response to Outlook (including with attachments) when the user clicks Send. No public statement was found that high-impact actions require a second person or that All Agent cannot email externally on its own.
Ask: Which All Agent actions run without a click, can it send email or edit the matter file unattended, and how does an administrator stop in-flight agent actions?
Public claim only
LawY offers optional verification by a panel of Australian lawyers with at least five years' post-qualification experience, typically one to three business days; verification is double-masked and LEAP recommends removing personal information first. Corto and LawY terms require solicitor review before relying on outputs. There is no mandatory approval gate before inserting text into Word or Outlook.
Ask: Is verification included for our matter types and states, what does the verifier see, is PII stripping guaranteed, and can we require a recorded human approval before any external send?
Official pages reviewed for this profile, last reviewed 2026-10-10.
Add this product to your toolset for a particular task, or use it with a practice-area checklist. Add to your toolset Practice areas Best AI practice management tools Australia Compare with LawVu LegalOS
