---
title: "Lupl (Lupl, Inc. (Elevate))"
url: "https://ailawframework.com/software/lupl"
type: "software_profile"
site: "AI Law Framework"
id: "lupl"
vendor: "Lupl, Inc. (Elevate)"
category: "Legal-specific"
segment: "Practice management"
confidence: "medium"
last_reviewed: "2026-09-21"
---

# Lupl (Lupl, Inc. (Elevate))

> Legal project/matter workspace that assigns tasks, automates workflows and connects lawyers with AI teammates (Claude, Harvey, Copilot).

Canonical page: https://ailawframework.com/software/lupl  
Last reviewed: 2026-09-21

Site index for agents: https://ailawframework.com/llms.txt

Plan covered: Lupl SaaS as documented in the EULA/DPA and trust centre. Elevate announced acquisition on 19 August 2026. Confirm contracting entity post-acquisition.

## Capabilities

- Matter management
- Document summarisation
- Agentic workflows
- Knowledge search

## Key facts

| Fact | Value |
| --- | --- |
| Deployment | SaaS |
| Hosting regions | European Union / EEA, United States |
| Australian region | No |
| Model providers | OpenAI, Anthropic |
| Assurance | SOC 2 Type II, ISO 27001:2022 |
| Training on customer content | No |
| Retention | Controller privacy: no longer than necessary, then delete or anonymise. DPA/SCCs: delete or return after end of processing, with certification. Live numbered schedule not public. |
| Integrations | Claude, Harvey, Microsoft Copilot, Auth0, DocuSign, Slack, Microsoft Azure |
| Legal content coverage | Matter/task platform, not a licensed primary-law corpus. Claude/Harvey/Copilot supply the generative layer. |
| Pricing | No public price list. Claude page offers a two-week trial for event attendees. |
| Australian presence | Unknown. Platform hosted in the EEA (Netherlands) on Azure. DPA transfer list includes Australia as a permitted processing country. No AU region or named AU customer found. |
| Website | https://www.lupl.com |

## What the research found

| Topic | Status | Finding | Open question | Sources |
| --- | --- | --- | --- | --- |
| Elevate acquisition | Public claim only | Lupl, Inc., Reston VA. Elevate announced acquisition 19 August 2026. Home: lawyers and AI teammates in one workspace; Claude, Harvey and Copilot named. Confirm who signs the order post-close. | Is the contracting entity still Lupl, Inc., and which AI integrations are in the SKU? | [Elevate acquires Lupl (19 August 2026)](https://www.lupl.com/blog/elevate-acquires-lupl/); [Lupl — home](https://www.lupl.com); [Lupl — Privacy Policy](https://www.lupl.com/privacy-policy) |
| Azure in the Netherlands | Public claim only | Privacy: Lupl Platform hosted in the EEA (the Netherlands) on Microsoft Azure. Trust centre lists Azure infrastructure. | Confirm the Azure region on our tenant and whether AU hosting is available. | [Lupl — Privacy Policy](https://www.lupl.com/privacy-policy); [Lupl — Trust Center](https://trust.lupl.com/) |
| Tasks, agents, AI teammates | Public claim only | Home: tasks, matter dashboards, templates, automations, AI to draft updates and summarise work. Agents feature and Claude MCP trial are marketed. Acquisition: native in Claude, Harvey and Copilot. | Which agent tools are enabled by default? | [Lupl — home](https://www.lupl.com); [Lupl — Claude for Legal](https://www.lupl.com/claude); [Elevate acquires Lupl (19 August 2026)](https://www.lupl.com/blog/elevate-acquires-lupl/) |
| Matter tool, not a law corpus | Public claim only | Purpose-built for law-firm workflows. No licensed Australian primary-law database is described. | Confirm we will not treat Lupl as a research corpus. | [Lupl — home](https://www.lupl.com) |
| No public price | Not confirmed | No public price list. Claude page: two-week trial for event attendees. EULA/DPA on lupl.com/eula. | Confirm fees, seats and the signed agreement entity after the Elevate deal. | [Lupl — Claude for Legal](https://www.lupl.com/claude); [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula) |
| Claude, Harvey, Copilot, DMS BYO | Public claim only | Privacy: bring-your-own third-party systems. Trust: Auth0, DocuSign, Microsoft, OpenAI. Acquisition and home: Claude, Harvey, Copilot. | Which integrations will receive matter text? | [Lupl — Privacy Policy](https://www.lupl.com/privacy-policy); [Lupl — Trust Center](https://trust.lupl.com/); [Elevate acquires Lupl (19 August 2026)](https://www.lupl.com/blog/elevate-acquires-lupl/) |
| Zendesk; privacy@lupl.com | Public claim only | EULA subprocessors: Zendesk (EU) for support. Privacy: privacy@lupl.com. No published severity SLA. | What are support hours and the security contact post-Elevate? | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula); [Lupl — Privacy Policy](https://www.lupl.com/privacy-policy) |
| No independent bench | Not confirmed | No Vals AI or Stanford RegLab result found. Quality of Claude/Harvey/Copilot outputs is those vendors’ problem as well as Lupl’s orchestration. | May we trial on our matters with a scored error log? | [Lupl — home](https://www.lupl.com) |
| Work management, not advice | Public claim only | Fit is matter/task management and AI teammate orchestration. Generative drafting still requires lawyer review. | Which workflows will require a human approval step? | [Lupl — home](https://www.lupl.com); [Elevate acquires Lupl (19 August 2026)](https://www.lupl.com/blog/elevate-acquires-lupl/) |
| Organisation is controller | Public claim only | Privacy: organisation may control, monitor and access user data. DPA treats Customer as controller. No Australian client-disclosure template. | Provide a client-disclosure for NL/US processing and OpenAI/Claude. | [Lupl — Privacy Policy](https://www.lupl.com/privacy-policy); [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula) |
| OpenAI; Claude marketed | Public claim only | EULA Annex III (1 Sep 2025): OpenAI, Inc. for Lupl AI features, USA, with footnote that data is not retained or used to train the model. Home/Claude page market Anthropic Claude via MCP. Harvey/Copilot are additional model paths if connected. | Name every model provider and region on our tenant, including Claude/Harvey. | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula); [Lupl — Claude for Legal](https://www.lupl.com/claude); [Lupl — home](https://www.lupl.com) |
| Dated EULA table | Public claim only | Annex III as at 1 September 2025: Airtable, Auth0, DocuSign, Expel, Fireflies.AI, HubSpot, Microsoft, OpenAI, Pendo, Slack, Stripe, Twilio, Zendesk, Zoho, Zoom. Trust centre repeats OpenAI, DocuSign, Auth0, Airtable, Microsoft. | Is Fireflies transcription in our SKU, and what is the objection period? | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula); [Lupl — Trust Center](https://trust.lupl.com/) |
| OpenAI footnote: no train/retain | Public claim only | EULA OpenAI row: data is not retained or used to train the model; contact privacy@lupl.com. Trust centre has an ‘AI Training Data and Bias’ document (requestable). Claude/Harvey training terms are those vendors’. | Confirm in the DPA that neither Lupl nor any AI provider trains on our matter data, including Claude. | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula); [Lupl — Trust Center](https://trust.lupl.com/) |
| Pendo and Zoho analytics | Public claim only | Pendo and Zoho listed for usage analytics (EU/USA). Privacy: ISO certification and quality-control processing of support contacts. | Can matter text appear in Pendo/Zoho, and can we disable them? | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula); [Lupl — Privacy Policy](https://www.lupl.com/privacy-policy) |
| Not numbered for live data | Public claim only | Privacy: retain no longer than necessary, then delete or anonymise. Different periods apply; not numbered for matter data. | State default retention for tasks, files, chat and embeddings. | [Lupl — Privacy Policy](https://www.lupl.com/privacy-policy) |
| DPA delete or return | Public claim only | DPA/SCCs: after end of processing, delete or return and certify. In-product commands that delete data are customer instructions; Lupl need not restore. | Will you certify deletion of production, backups and OpenAI copies? | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula) |
| Support and SOC | Public claim only | Expel.io listed as Security Operations Center (US). Zendesk for support. Trust: data access and access-log items exist (requestable). | When may Lupl or Elevate staff read our matters, and is access ticket-scoped? | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula); [Lupl — Trust Center](https://trust.lupl.com/) |
| Auth0 | Public claim only | Auth0, Inc. (USA) for authentication. Trust lists access-control policy and access log management. SSO details not on the public home page. | Is SSO/MFA/SCIM available, and how are ethical walls set? | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula); [Lupl — Trust Center](https://trust.lupl.com/) |
| DPA lists encryption measures | Public claim only | EULA Annex II lists encryption of personal data, protection during transmission and storage. Algorithms and BYOK are not specified on the public pages. | Confirm TLS/at-rest algorithms and whether BYOK is offered. | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula) |
| SOC 2 Type II and ISO 27001:2022 | Public claim only | Trust centre: ISO/IEC 27001:2022 and SOC 2 Type 2 badges; SOC 2 report and pentest requestable. EU-US DPF and GDPR listed. Reports not inspected. | Provide current ISO 27001 and SOC 2 Type II reports under NDA. | [Lupl — Trust Center](https://trust.lupl.com/) |
| EULA includes DPA | Public claim only | EULA page includes a Data Protection Addendum forming part of the Terms of Use/MSA. Transfers permitted to EU, UK, US, Singapore, Australia, Hong Kong and locations in the privacy policy. Confirm Elevate novation. | Will Elevate sign our DPA addendum, or is the published EULA the contract? | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula); [Elevate acquires Lupl (19 August 2026)](https://www.lupl.com/blog/elevate-acquires-lupl/) |
| NL host; AU on the permitted list | Public claim only | Hosted in the Netherlands. DPA 7.3: Protected Data may be processed in the EU, UK, US, Singapore, Australia, Hong Kong and privacy-policy locations. Subprocessors include US OpenAI and US Auth0. | Map every country of storage and inference on our tenant. | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula); [Lupl — Privacy Policy](https://www.lupl.com/privacy-policy) |
| Breach notifications item | Not confirmed | Trust centre lists a Data Breach Notifications document (requestable). Public EULA extract reviewed did not number a 72-hour customer SLA in the portion scraped for this pass. | State the contractual notification period for a personal-data breach. | [Lupl — Trust Center](https://trust.lupl.com/); [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula) |
| Subprocessor list updated from time to time | Public claim only | Annex III will be updated from time to time in accordance with the Agreement. Elevate ownership may change contracting notices. | What notice and objection period apply to new subprocessors after the Elevate deal? | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula); [Elevate acquires Lupl (19 August 2026)](https://www.lupl.com/blog/elevate-acquires-lupl/) |
| Delete or return under DPA | Public claim only | DPA: delete or return after end of processing and certify. Export format not specified beyond SCC language. | What export formats are available, and how long do backups last? | [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula) |
| MCP and third-party systems | Public claim only | Claude MCP trial; trust centre has an MCP Connector document. Privacy: BYO third-party systems. Fireflies.AI transcription is on the subprocessor list. | List every connector on our order and how we disable Fireflies/Slack/WhatsApp. | [Lupl — Claude for Legal](https://www.lupl.com/claude); [Lupl — Trust Center](https://trust.lupl.com/); [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula) |
| Not described | Not confirmed | Lupl AI is described as drafting updates and summarising work. Open-web search was not stated. Connected tools (Claude/Copilot) may search the web under their own terms. | Can Lupl or connected agents browse the open web with our matter context? | [Lupl — home](https://www.lupl.com); [Lupl — Claude for Legal](https://www.lupl.com/claude) |
| Automations and AI teammates | Not confirmed | Automations assign tasks and send updates. AI teammates in Claude/Harvey/Copilot can take actions in those hosts. Default human-approval gates were not extracted from the public EULA. | Which automations can email clients or write to DMS without a human click? | [Lupl — home](https://www.lupl.com); [Elevate acquires Lupl (19 August 2026)](https://www.lupl.com/blog/elevate-acquires-lupl/) |
| Stay in control claimed | Public claim only | Home: stay aligned and in control at every step. No contractual mandatory review gate found in the EULA extract. | Is there an in-product accept step before an AI-drafted update is sent? | [Lupl — home](https://www.lupl.com); [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula) |

## Notes

Elevate acquisition 19 Aug 2026 — confirm novation. OpenAI no-train/no-retain is a footnote on the subprocessor table. Hosting NL Azure; Australia is a permitted transfer country. Fireflies.AI is listed. SOC/ISO reports requestable, not inspected.

## Sources

- [Lupl — home](https://www.lupl.com) (checked 2026-09-21)
- [Lupl — EULA / DPA (subprocessors 1 September 2025)](https://www.lupl.com/eula) (checked 2026-09-21)
- [Lupl — Trust Center](https://trust.lupl.com/) (checked 2026-09-21)
- [Lupl — Privacy Policy](https://www.lupl.com/privacy-policy) (checked 2026-09-21)
- [Elevate acquires Lupl (19 August 2026)](https://www.lupl.com/blog/elevate-acquires-lupl/) (checked 2026-09-21)
- [Lupl — Claude for Legal](https://www.lupl.com/claude) (checked 2026-09-21)

A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.