Product and intended use
Define the configuration, people, information and tasks being assessed.
AU SaaS
Public claim only
Veraty Tech Pty Ltd (ABN 11 693 936 659) trading as Parachute / Parachute AI / Go Parachute. Privacy policy 21 July 2026. Terms 17 February 2026. Standard versus Enterprise. Practice-management category in the master list; the product is a unified legal OS (draft, review, knowledge, matters). Vendor announced a $1.8 million pre-seed led by Rampersand.
Ask: Which modules and plan (Standard vs Enterprise) are on the order, and is Sydney inference elected?
Sydney hosting
Public claim only
Privacy policy: Customer Data hosted on servers in Australia (Sydney). Vector embeddings processed in Australia (Azure OpenAI, Sydney). Security page: hosted on secure cloud infrastructure; customer data hosted in Australia today, with regional residency on the roadmap.
Ask: Confirm the Azure/AWS account region on our order form.
features
Public claim only
Platform: drafting from firm knowledge, multi-stage contract review, tabular review, precedents, Australian legislation with source links, citations, three AI modes (Paralegal/Lawyer/Senior Associate), matters, workstreams, branded Word export, meeting notetaker, email-to-thread, client invite, expert verification.
Ask: Which of these features will be enabled for our workspace?
jurisdiction
Public claim only
Australian company; Terms governed by NSW law, exclusive NSW courts. Security FAQ: officially supports Australia, New Zealand, the United Kingdom, the United States and Canada; customers pick a country at sign-up and the AI defaults to that jurisdiction. Other jurisdictions are not officially supported but the AI can reason about them via web search.
Ask: Will our workspace be set to Australia, and is web search off for other jurisdictions?
Adoption and implementation
Record the practical work needed to introduce and maintain the software.
Pricing
Public claim only
Public pricing.md (June 2026, AUD + GST): Standard annual AUD 400/mo base + AUD 120/extra seat, or monthly AUD 500 + AUD 150. 14-day trial. Volume from 51 seats. Enterprise custom. SSO/SAML, dedicated support and SLAs are Enterprise-only. Terms: quarterly (3-month) or annual minimum; auto-renew unless 14 days' written non-renewal; fees non-cancellable during the term. Help FAQ says cancel at period end via support — reconcile with the 14-day notice in the Terms.
Ask: Confirm AUD pricing, seats, term and whether Enterprise SSO is required.
integration
Public claim only
Advertised on Standard and Enterprise: NetDocuments, Clio, Smokeball, InfoTrack, OneDrive, Slack, meeting notetaker, Word add-in, email-to-thread, workstreams. Help centre has dedicated integration pages.
Ask: Which connectors will be on, and do they honour DMS permissions?
support
Public claim only
Email support on Standard; dedicated support, custom onboarding and SLAs on Enterprise only. Help centre and status.goparachute.ai. Contacts: support@goparachute.ai, hello@goparachute.ai, security@goparachute.ai, privacy@goparachute.ai.
Ask: What is the contracted support SLA and security contact?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Privilege language
Public claim only
Privacy policy treats Customer Data as confidential/privileged and says upload is not a waiver. Terms make Customer Information confidential and licence Parachute only to provide the Services. Expert-verification and client-invite features can expose matter files to humans outside the firm.
Ask: Provide the MSA confidentiality clause and a client-disclosure template for expert verification.
US inference default; AU optional
Public claim only
Privacy: AI sub-processors include OpenAI Inc. (US), Anthropic PBC (US) and Google LLC (US). Default inference is in the United States. Strict Australian inference can be routed via AWS Bedrock Sydney and Vertex AI Sydney, with possible slower responses. Embeddings: Azure OpenAI Sydney. Onshore-AI release (15 June 2026) restates optional Australian-resident inference including document conversion.
Ask: Will our instance use US default or Sydney Bedrock/Vertex?
Named LLMs
Public claim only
OpenAI Inc. (US), Anthropic PBC (US), Google LLC (US) named as AI sub-processors. Privacy also lists IT/hosting, payment, email-marketing, analytics and cookie providers without a dated full list. Azure OpenAI Sydney for embeddings; AWS Bedrock and Vertex if AU inference is elected.
Ask: Provide the full dated list and notice rights.
No provider training
Public claim only
Privacy: AI sub-processors must not retain or use Customer Data to train or improve models. Security page and help FAQ: documents, knowledge base and AI interactions are never used to train AI models and are not shared across organisations. Pricing table: no model training on your data (all plans).
Ask: Confirm the MSA/DPA repeats this and covers embeddings and onshore routing.
feedbackUse
Public claim only
Terms s 4.2: Feedback (suggestions, enhancement requests) is licensed to Parachute on a perpetual, royalty-free basis to implement and commercially exploit. Privacy: analytics, market research and business development to operate and improve Services; Customer Data is not used for third-party marketing. This is product-feedback, distinct from model training.
Ask: Is any in-product rating of answers used to improve models or prompts?
As necessary
Public claim only
Personal information retained as necessary to provide services. Customer-specific data removed within 30 days of written request. Security page: regular automated backups. Default live retention for chats, files and embeddings is not numbered.
Ask: State default retention for chats, files, embeddings and backups.
30-day erasure
Public claim only
Privacy: customer-specific data removed within 30 days of written request to privacy@goparachute.ai. Terms: on termination the customer loses access; no refund. Trial data may be permanently deleted unless an order is signed or the customer exports first.
Ask: Does 30-day erasure include backups and sub-processors, with a certificate?
humanAccess
Public claim only
Privacy: disclosure to employees, contractors and related entities, and to IT/LLM providers bound by confidentiality no less protective than the MSA. Help: organisation admins can see all threads and documents. Expert verification routes a document to a connected law firm or a general expert pool (pay-per-use humans).
Ask: When can Parachute staff or expert-verification reviewers read matter files, and is that logged?
accessControl
Public claim only
Security: granular RBAC and logical isolation per organisation. Help: Member versus Admin roles; admins invite, change roles and see all threads. Pricing: SSO/SAML on Enterprise only. Terms: account sharing is a material breach.
Ask: Will we take Enterprise SSO/SAML, and can we restrict admin visibility?
encryption
Public claim only
Security page: all data encrypted with TLS in transit and encrypted at rest in databases. Algorithms (for example AES-256) are not named.
Ask: Name algorithms and whether customer-managed keys are available.
assurance
Public claim only
ISO/IEC 27001:2022 certified by Compass Assurance Services, certificate 8818-4353-01, covering provision and operation of the platform for legal research, document drafting and document review. Copy on request from security@goparachute.ai. Security practices are said to align with SOC 2 security, availability and confidentiality — not a stated Type II report.
Ask: Provide the ISO certificate and any SOC 2 Type II report.
MSA and DPA
Public claim only
Public Terms (17 February 2026) are the MSA: NSW law and courts; 12-month fees cap, 10× for indemnities/confidentiality/prohibited uses; ACL non-excludable; IP indemnity; AI-content disclaimer; Security Statement warranted accurate. Privacy refers to a DPA that prevails if inconsistent; that DPA was not a standalone public page. Order Form controls if it conflicts.
Ask: Provide the DPA and confirm whether our Order Form changes the liability cap or inference region.
AU storage; US inference unless configured
Public claim only
Storage in Sydney. Default inference US; optional AU inference. DPA prevails over privacy policy if inconsistent. Security page still says regional residency is on the roadmap even while AU hosting is current.
Ask: Record the elected inference path in the order form.
incidents
Public claim only
Security page: incident-response plan with monitoring, defined escalation paths and transparent communication; commit to notifying affected customers promptly of any confirmed breach. No numbered hour target (for example 72 hours) or NDB wording.
Ask: What is the contractual notice period, including NDB?
changes
Public claim only
Terms: price changes effective on the next renewal with reasonable prior notice. Privacy policy may be updated; check the website. Security Statement is warranted during the term. Feature first-beta access is Enterprise-only.
Ask: Notice before model, region or sub-processor changes?
exit
Public claim only
Export to Word (.docx) and PDF from the editor. Privacy: 30-day erasure on written request. Terms: auto-renew unless 14 days' written non-renewal; fees for the term are non-cancellable; on termination access is removed and refunds are not due unless specified. Trial data may be deleted unless exported.
Ask: How do we bulk-export matters and obtain certified deletion, including from LLM providers?
connectors
Public claim only
NetDocuments, Clio, Smokeball, InfoTrack, OneDrive, Slack, Word add-in, email-to-thread, meeting notetaker (bot joins Zoom/Teams/Meet from a pasted link). Privacy names Slack as a collection source.
Ask: Which connectors will be enabled, and can the meeting bot be disabled?
Web
Public claim only
Help: workspace setting 'Enable web search'. When on, Parachute decides when web results are useful and cites pages. Can be overridden per thread. Legislation search is a separate toggle. Security FAQ: unsupported jurisdictions can be reasoned about via web search.
Ask: Will web search be off at workspace level?
actionControl
Not confirmed
Meeting notetaker can join calls as a bot. Email-to-thread ingests inbound mail. Expert verification sends documents to humans. ChatGPT-style drafting can be exported to Word. No unsupervised court-filing automation was described.
Ask: Which automations will be on, and who can invite the meeting bot?
Human intervention
Public claim only
Privacy: automated processes may generate advice-like insights; human-intervention rights described for significant effects. Terms: customer must independently verify AI Content; output is not legal advice. Optional paid expert verification by a connected firm or expert pool.
Ask: How is lawyer review enforced in the product for our matters?