---
title: "Norm Ai (Nomos AI, Inc. (dba Norm Ai))"
url: "https://ailawframework.com/software/norm-ai"
type: "software_profile"
site: "AI Law Framework"
id: "norm-ai"
vendor: "Nomos AI, Inc. (dba Norm Ai)"
category: "Legal-specific"
segment: "Compliance and privacy"
confidence: "low"
last_reviewed: "2026-09-21"
---

# Norm Ai (Nomos AI, Inc. (dba Norm Ai))

> US ‘agentic law’ platform that encodes legal rules into AI agents, with a supervisory verification layer; affiliated law firm Norm Law is a separate practice entity.

Canonical page: https://ailawframework.com/software/norm-ai  
Last reviewed: 2026-09-21

Site index for agents: https://ailawframework.com/llms.txt

Plan covered: Norm Technology agent platform as marketed in 2026, distinct from the affiliated firm Norm Law. Site Terms and Privacy (23 January 2024) are website/User Terms; a product DPA was not found on the pages reviewed.

## Capabilities

- Compliance monitoring
- Agentic workflows
- Legal research

## Key facts

| Fact | Value |
| --- | --- |
| Deployment | SaaS |
| Hosting regions | United States |
| Australian region | Unknown |
| Training on customer content | Unknown |
| Retention | Privacy (23 Jan 2024) has a Data Security and Retention section for Site/Services personal data; no numbered matter-data schedule was extracted in this pass. |
| Legal content coverage | Encoded law for agents and a supervisory verification layer. Not described as a licensed Australian primary-law corpus. Affiliated Norm Law is a law firm, not the software licence. |
| Pricing | No public price list. Home describes institutional customers and fundraising, not seats. |
| Australian presence | No. 7 World Trade Center, New York. New York law and JAMS arbitration. No Australian office or corpus described. |
| Website | https://www.norm.ai |

## What the research found

| Topic | Status | Finding | Open question | Sources |
| --- | --- | --- | --- | --- |
| Technology versus Norm Law | Public claim only | Nomos AI, Inc. dba Norm Ai, 7 World Trade Center, 39th Floor, New York. Home: Norm Law (affiliated firm), Norm Technology (agents), Supervisory AI (verification). Do not conflate the software licence with legal services from Norm Law. | Are we buying Norm Technology software, engaging Norm Law, or both — and which entity signs? | [Norm Ai — home](https://www.norm.ai/); [Norm Ai — Terms of Use](https://www.norm.ai/terms-of-service) |
| US SaaS inferred | Not confirmed | Site/Services hosted; Terms say use from other regions transfers data to the practices described in the Privacy Policy. Cloud region is not named on the home, privacy or terms pages reviewed. | Where is production hosted, and is an Australian region available? | [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy); [Norm Ai — Terms of Use](https://www.norm.ai/terms-of-service) |
| Encoded-law agents plus supervision | Public claim only | Home: embedding of law into AI agents; automation of legal and compliance tasks; Supervisory AI as a verification layer for every agent. Legal AGI Lab announced April 2026 as R&D. | Which agents and which encoded regimes are in our SKU? | [Norm Ai — home](https://www.norm.ai/) |
| US institutional focus | Public claim only | Timeline is US (Delaware sandbox proposal July 2026; US forum 2025). No Australian statute-encoding claim on the home page. | Which jurisdictions’ rules are actually encoded for our use? | [Norm Ai — home](https://www.norm.ai/) |
| NY JAMS terms; no public price | Public claim only | Site Terms: New York law; JAMS arbitration in New York; 30-day arbitration opt-out to the WTC address. User Terms (separate) govern Services. No public price list. | Provide the User Terms/MSA and fees; can we negotiate Australian law/forum? | [Norm Ai — Terms of Use](https://www.norm.ai/terms-of-service) |
| Not listed | Not confirmed | No named DMS/SSO connectors on the home, privacy or terms pages reviewed. | Which systems will agents read or write to? | [Norm Ai — home](https://www.norm.ai/) |
| contact@norm.ai | Public claim only | Privacy: contact@norm.ai. Terms give the WTC address. No published severity SLA. | What are support hours and the security contact? | [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy); [Norm Ai — Terms of Use](https://www.norm.ai/terms-of-service) |
| No independent bench | Not confirmed | No Vals AI or Stanford RegLab legal-output score found. Supervisory AI is a vendor layer, not an independent audit. | May we trial encoded agents on our compliance use-cases with a scored error log? | [Norm Ai — home](https://www.norm.ai/) |
| Agentic compliance, not AU research | Public claim only | Fit is encoding rules into agents with a verification layer. Unsuitable as an Australian research corpus. Using Norm Law is a legal-services engagement, not this software record. | Will a lawyer remain accountable for every agent output before it is acted on? | [Norm Ai — home](https://www.norm.ai/) |
| No AU disclosure template | Not confirmed | Privacy is a Site/Services personal-data notice. No Australian client-consent template. Agents that act on client matters need a separate authority analysis. | What client data do agents ingest, and what disclosure do you recommend? | [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) |
| Not named | Not confirmed | No OpenAI/Anthropic/Google name on the home, privacy or terms pages reviewed. Series C coverage on the home page mentions Khosla as an OpenAI investor; that is not a product-provider statement. | Name every model provider and region on our tenant. | [Norm Ai — home](https://www.norm.ai/); [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) |
| Categories only | Not confirmed | Privacy: service providers (hosting, technology, communications, analytics), advertising and business partners. No dated named list. | Provide the current named list with locations. | [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) |
| No no-training clause found | Not confirmed | Privacy lists product development, testing, research and internal analytics as purposes for Site/Services personal data. No clause stating customer matter content is not used to train models. | Confirm in a DPA that customer content is not used to train Norm Ai or third-party models. | [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) |
| Improve the Site and Services | Public claim only | Privacy: improving the Site and Services, testing, research, internal analytics, product development; advertising partners. | Can prompts or encoded-matter text appear in analytics or ads? | [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) |
| Section exists; days not extracted | Not confirmed | Privacy has a Data Security and Retention heading. A numbered matter-data schedule was not extracted in this T3 pass. | State default retention for prompts, agent traces and encoded work product. | [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) |
| CCPA deletion rights for consumers | Public claim only | Privacy describes California deletion/access rights for Personal Data. Product-tenant certified deletion is not numbered. | Will you delete production, backups and provider logs within 30 days of exit and certify? | [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) |
| Not numbered | Not confirmed | Staff access to customer agent traces is not described on the pages reviewed. | When may Norm Ai staff read our agent runs, and is access logged? | [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) |
| Not specified | Not confirmed | SSO/MFA/RBAC for the product were not described on the home, privacy or terms pages reviewed. | Is SSO/MFA available, and how are agent permissions scoped? | [Norm Ai — home](https://www.norm.ai/) |
| Not specified | Not confirmed | Privacy refers to data security generally. TLS/at-rest algorithms are not stated on the pages reviewed. | Confirm encryption in transit and at rest, and key custody. | [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) |
| No SOC 2/ISO claim found | Not confirmed | No SOC 2, ISO 27001 or ISO 42001 certification claim was found on the home, privacy or terms pages reviewed. | Do you hold SOC 2 or ISO 27001 covering Norm Technology, and will you share the report? | [Norm Ai — home](https://www.norm.ai/); [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy); [Norm Ai — Terms of Use](https://www.norm.ai/terms-of-service) |
| Site Terms; User Terms separate; no public DPA | Public claim only | Site Terms (NY/JAMS) plus a separate User Terms document for Services. No public DPA URL. Privacy effective 23 January 2024 — older than 2026 product timeline. | Provide current User Terms and DPA before any matter data is processed. | [Norm Ai — Terms of Use](https://www.norm.ai/terms-of-service); [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) |
| US entity | Public claim only | New York company. Privacy shares with service providers and partners. No SCCs extracted from the privacy page in this pass. | List every country of storage and inference for APP 8. | [Norm Ai — Terms of Use](https://www.norm.ai/terms-of-service); [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) |
| No public 72-hour SLA | Not confirmed | Privacy mentions security-incident investigation among legal purposes. No 72-hour customer-notification SLA found. | Commit in writing to notify us within 72 hours of a confirmed incident. | [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) |
| Posted privacy updates | Public claim only | Privacy may change with notice on the website and/or email; continued use is acceptance. Terms similarly complete-agreement language. | Will material processor or agent-capability changes get 30 days’ written notice? | [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy); [Norm Ai — Terms of Use](https://www.norm.ai/terms-of-service) |
| Not numbered | Not confirmed | Export/deletion on termination is not numbered in the Site Terms extract. | What export exists for encoded rules and agent logs, and when are they purged? | [Norm Ai — Terms of Use](https://www.norm.ai/terms-of-service) |
| Not listed | Not confirmed | No named connectors on pages reviewed. Agents that invoke tools would be a residual disclosure. | List every tool an agent may call on our tenant. | [Norm Ai — home](https://www.norm.ai/) |
| Not described | Not confirmed | Open-web browsing was not stated. | Can agents browse the open web with our data, and can we disable it? | [Norm Ai — home](https://www.norm.ai/) |
| Supervisory layer claimed | Public claim only | Supervisory AI is described as the verification layer for every AI agent. Default unattended actions are not contractually listed in the Site Terms extract. | Which agent actions require a human approve-step by default? | [Norm Ai — home](https://www.norm.ai/) |
| Verification layer; not a lawyer sign-off SLA | Public claim only | Supervisory AI is a product claim. Site Terms do not require a human lawyer to accept each output before action. | Is there a mandatory human-accept step before an agent files, sends or pays? | [Norm Ai — home](https://www.norm.ai/); [Norm Ai — Terms of Use](https://www.norm.ai/terms-of-service) |

## Notes

T3 pass: no public DPA, no named model providers, no SOC/ISO claim, privacy dated 2024. Distinguish Nomos AI, Inc. software from Norm Law legal services. Do not treat fundraising timeline as a security control.

## Sources

- [Norm Ai — home](https://www.norm.ai/) (checked 2026-09-21)
- [Norm Ai — Privacy Policy (23 January 2024)](https://www.norm.ai/privacy-policy) (checked 2026-09-21)
- [Norm Ai — Terms of Use](https://www.norm.ai/terms-of-service) (checked 2026-09-21)

A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.