---
title: "PatternBuilder MAX (NetDocuments Software, Inc.)"
url: "https://ailawframework.com/software/patternbuilder-max"
type: "software_profile"
site: "AI Law Framework"
id: "patternbuilder-max"
vendor: "NetDocuments Software, Inc."
category: "Legal-specific"
segment: "Document automation"
confidence: "medium"
last_reviewed: "2026-09-27"
---

# PatternBuilder MAX (NetDocuments Software, Inc.)

> Adds a configurable prompt step to NetDocuments document-assembly apps: a firm-built app sends a prompt to a Microsoft-hosted OpenAI model and returns text or structured output into a page or document template.

Canonical page: https://ailawframework.com/software/patternbuilder-max  
Last reviewed: 2026-09-27

Site index for agents: https://ailawframework.com/llms.txt

Plan covered: The PatternBuilder MAX generative-AI prompt step inside NetDocuments PatternBuilder on a NetDocuments cloud repository. Base PatternBuilder, the ndMAX Legal AI Assistant and ndMAX Studio apps need separate review.

## Capabilities

- Document automation
- Contract drafting
- Document classification

## Key facts

| Fact | Value |
| --- | --- |
| Deployment | SaaS |
| Hosting regions | Australia, United States, United Kingdom, European Union / EEA, Canada |
| Australian region | Yes |
| Model providers | Azure OpenAI (Microsoft), Microsoft Cognitive Services |
| Assurance | SOC 2 Type II, ISO 27001 |
| Training on customer content | No |
| Retention | The service agreement's security exhibit says logging lets the customer review document-level events and administrative changes for the previous 90 days and that NetDocuments keeps its log information for at least one year. The marketing FAQ says prompt inputs and outputs 'are not maintained beyond the exchange of information to produce the output'; that statement is not in the agreement. After termination NetDocuments may delete all Customer Repository Data remaining on its network 30 days after the end of the term or transition period, or charge for continued storage. |
| Integrations | NetDocuments PatternBuilder document templates, ndMAX Studio, Microsoft 365 applications via the NetDocuments platform |
| Pricing | No published price. The support article states that usage is metered in tokens against a monthly allotment that resets at the beginning of each month, that additional charges apply above the allotment, that token pricing is set during the sales process, and that the feature must be enabled by a NetDocuments employee. Subscription Fees for the Services are set in the Order Form. |
| Australian presence | Yes. The 2025 service agreement states that where the customer's principal place of business is in Australia, New Zealand or Asia, 'NetDocuments' refers to NetDocuments Australia Pty Limited, with offices at Parkline Place, Level 25, 252 Pitt Street, Sydney NSW 2000, and that governing law for those customers is the law of Australia. No ACN or ABN is published in the agreement or the privacy notice; a firm should obtain it from the Order Form. The privacy notice uses two different Australian names on the same page: 'NetDocuments Australia Pty Services Limited' in section 7.A and 'NetDocuments Australia Pty Limited' in the contact block. |
| Website | https://www.netdocuments.com |

## What the research found

| Topic | Status | Finding | Open question | Sources |
| --- | --- | --- | --- | --- |
| Product and plan covered | Public claim only | The support article dated 21 April 2026 states that PatternBuilder MAX is part of the ndMAX collection, that it must be enabled by a NetDocuments employee, and that the general PatternBuilder product should be set up before PatternBuilder MAX is used. This profile covers that prompt step only, not the ndMAX Legal AI Assistant or the ndMAX Studio apps. | Which ndMAX components are on our Order Form, and is PatternBuilder MAX enabled on our repository separately from the Legal AI Assistant? | [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) |
| Deployment and data location | Public claim only | The service agreement defines 'Services Region' as the geographic location specified in section 1.2 of the Order Form and states that NetDocuments will store Customer Repository Data in that region and will not transfer or access it except at the customer's or a user's direction or as required by law. The same agreement offers an optional Customer Managed Storage Location outside the NetDocuments network using ndFlexStore or ndMirror; the support article does not say how a PatternBuilder MAX prompt interacts with data held there. | Which Services Region will our Order Form specify, and does the Services Region commitment cover the prompt payload sent to the Microsoft-hosted model as well as stored documents? | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025); [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) |
| What the prompt step does | Public claim only | The support article documents the Prompt Design options as model, user message, optional system message, temperature from 0 to 2, maximum length, and output type, where freeform returns text and 'extract' pulls entities from the text in the user message while 'list of items' returns a list of events or clauses. Output can be shown on an info page or inserted into a document template as a variable, and prompts can be freeform or built from PatternBuilder questions and conditional logic. The article states requests can use up to 2,048 or 4,000 tokens shared between prompt and completion, varying by model. | Which output types and token ceilings apply to the models enabled for us, and can an administrator restrict app builders to guided prompts only? | [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) |
| Legal content and jurisdiction | Not confirmed | PatternBuilder MAX supplies no legal content library: output is generated from the prompt the firm writes plus the model's own training. The article's worked examples include drafting a security agreement and a demand letter and conducting a legal analysis of data privacy regulation, and it tells users to verify any information obtained from AI-generated responses with reliable legal sources. No Australian primary law, citator or jurisdiction setting is described. | Does any part of PatternBuilder MAX check output against Australian legal sources, or is jurisdictional accuracy entirely a matter for the prompt and the reviewer? | [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) |
| Licence and pricing unit | Public claim only | Subscription Fees are the recurring fees specified in the Order Form, and the agreement's order of precedence puts the agreement, exhibits, Order Form and statements of work in a stated priority. The support article adds that PatternBuilder MAX consumes a monthly token allotment that resets each month, that additional charges apply if the allotment is exceeded, and that prompts will not generate output once the allotment is exhausted. The agreement also states that access to the NetDocuments API is not included in the Services and is granted on request. | Provide the token allotment, the overage rate, and what happens to a live app when the allotment is exhausted mid-matter. | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025); [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) |
| Integration surface | Public claim only | The prompt step runs inside the PatternBuilder app builder in the NetDocuments platform, and its output variable can be placed in a document template in the same way as any other variable. The vendor's Legal AI overview page states that ndMAX brings AI capabilities into the Microsoft 365 applications used daily and lists the Legal AI Assistant, AI Search, Tabular Review, the App Builder and ndMAX Studio apps as the ndMAX suite. | Which surfaces will run PatternBuilder MAX apps for us — web only, or also the Microsoft 365 integrations — and does each surface use the same model and region? | [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX); [NetDocuments Legal AI and Workflow Automation overview, including the ndMAX FAQ on models and training](https://www.netdocuments.com/solutions/legal-ai) |
| Support and service levels | Public claim only | Exhibit A sets a priority matrix with response targets tied to normal business hours in the customer's Service Region, and Exhibit B records target recovery point and recovery time objectives of 2 hours and 6 hours. Service availability below 99.9% on an annualised basis triggers Service Outage Credits, which the agreement makes the sole remedy for the relevant incident, subject to the Australian Consumer Law for customers domiciled in Australia. Help Desk Support may be provided by NetDocuments personnel or subcontractors in regions other than the customer's Service Region. | Are Australian-region business hours the basis of our response targets, and can we require that any support session touching matter content is handled from within our Services Region? | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025) |
| Published quality evidence | Not confirmed | No published evaluation, error rate or benchmark for PatternBuilder MAX output was found in the support article, the service agreement or the Legal AI overview page. The article instead gives prompt-construction guidance and notes that temperature can be set as high as 2, at which point answers are described as more random and less predictable. | Do you hold any measured accuracy or variance data for the extract and list-of-items output types on legal documents, and at what temperature was it measured? | [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) |
| Task fit and verification effort | Not confirmed | The documented design places a model-generated passage inside a firm's document template, so the reviewer sees a finished document rather than a marked AI section unless the app is built to show one. The article instructs users to review AI-generated responses and validate them against their own legal knowledge before use. | For each app we build, how will the reviewer know which parts of the finished document came from the model, and can the output be marked or tracked in the document? | [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) |
| Vendor content directing how AI describes the product | Not confirmed | A deliberate check on 2026-09-27 did not establish whether NetDocuments publishes content addressed to AI models or assistants. A site map of netdocuments.com listed no /llms.txt or /ai-info path; a zero-cost request for https://www.netdocuments.com/llms.txt returned 404 and https://www.netdocuments.com/ai-info/ returned 403, so that path is blocked rather than shown to be absent. | Does NetDocuments publish any page, file or block addressed to AI models, assistants or crawlers that describes its products, and at what URL? | [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) |
| Client authority and professional obligations | Not confirmed | The support article tells legal professionals to review and validate AI-generated responses and says the model 'should never replace the advice of a qualified legal professional'. The service agreement puts compliance with laws applicable to the customer, its data and its industry on the customer, and states that NetDocuments is not responsible for compliance with laws that are not generally applicable to information technology service providers. No client notice or consent wording for sending matter text to a third-party model is published. | What client notice or consent does NetDocuments consider necessary before matter content is placed in a PatternBuilder MAX prompt and sent to the Microsoft-hosted model, and will you support that position in writing? | [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX); [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025) |
| Foundation-model providers and model choice | Public claim only | The support article states that NetDocuments is 'leveraging Microsoft OpenAI' for PatternBuilder MAX and lists the selectable models as GPT-4o, GPT-4.1, GPT-4.1-mini, GPT-5-mini and GPT-5-nano (US, UK and DE regions only) and GPT-5.1 (AU and CAN regions only). The Legal AI overview FAQ states that ndMAX is powered by Microsoft Cognitive Services and Azure OpenAI and their suite of OpenAI models, that new models are tested internally and made available, and that the solutions are designed to be model agnostic so better models may be used. | For our Services Region, name the Microsoft entity, the Azure OpenAI deployment and the endpoint region behind each selectable model, and confirm which models our repository can use. | [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX); [NetDocuments Legal AI and Workflow Automation overview, including the ndMAX FAQ on models and training](https://www.netdocuments.com/solutions/legal-ai) |
| Subprocessors | Not confirmed | Neither the 2025 service agreement nor the general privacy notice publishes a subprocessor register. The agreement directs customers to Due Diligence Response information on the trust website at https://trust.netdocuments.com/home; a scrape of that URL on 2026-09-27 returned only the TrustCloud page shell with no readable content, so the register was not reached. Microsoft is named as the model provider on a marketing FAQ, not in a published processor list. | Provide the current dated subprocessor register covering PatternBuilder MAX, naming the Microsoft contracting entity, the country of processing, the data each subprocessor receives, and our notice and objection rights. | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025); [NetDocuments trust website (TrustCloud) — page shell only; no readable content returned on scrape](https://trust.netdocuments.com/home); [NetDocuments Legal AI and Workflow Automation overview, including the ndMAX FAQ on models and training](https://www.netdocuments.com/solutions/legal-ai) |
| Training on customer content | Public claim only | Clause 5.2.1 of the agreement grants NetDocuments a licence to store, copy and process Customer Repository Data only in order to provide the Services, and clause 5.2.2 states NetDocuments shall not use, disclose or access it other than to provide the Services, to facilitate Third-Party Applications, as volunteered for Help Desk Support, or to comply with a legal demand. Model training is not mentioned anywhere in the agreement. The separate marketing FAQ states that only inputs and outputs are shared with the model, that they are not used to train it, and that NetDocuments 'has an agreement with Microsoft that prevents our customers' content from triggering their abuse monitoring systems' — that agreement was not published on the pages read. | Warrant in our Order Form that no prompt, output or document from PatternBuilder MAX is used to train, fine-tune, evaluate or human-review any model by NetDocuments or Microsoft, and provide the Microsoft abuse-monitoring exemption in writing. | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025); [NetDocuments Legal AI and Workflow Automation overview, including the ndMAX FAQ on models and training](https://www.netdocuments.com/solutions/legal-ai) |
| Usage data, feedback and product improvement | Public claim only | The agreement defines 'Platform Data' as any data or statistics associated or generated in connection with use of the Services, states that NetDocuments may use it to analyse customer performance and usage in order to provide or improve the Services, and permits anonymised aggregated use for benchmarking and internal reporting. Clause 5.1.1 states NetDocuments retains all intellectual property in enhancements or derivative works 'even if based on Customer feedback or data'. Whether prompt text or output falls inside Platform Data is not stated. | Confirm in writing whether prompt text, system messages, output or token telemetry are treated as Platform Data, and whether we can be excluded from benchmarking. | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025) |
| Retention of prompts, outputs and logs | Public claim only | Exhibit B states that logging lets the customer review document-level events and administrative changes for the previous 90 days and that NetDocuments retains its own log information for at least one year. The agreement sets no retention period for prompt or output records. The marketing FAQ states that inputs and outputs 'are not maintained beyond the exchange of information to produce the output'; that is a vendor claim on a marketing page rather than a term of the agreement. | State what is stored for each PatternBuilder MAX run — prompt text, system message, output, token counts and any Microsoft-side log — in which system, in which region, and for how long. | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025); [NetDocuments Legal AI and Workflow Automation overview, including the ndMAX FAQ on models and training](https://www.netdocuments.com/solutions/legal-ai) |
| Deletion and certified erasure | Public claim only | Clause 7.4 requires the customer to remove all Customer Repository Data from the NetDocuments network before the end of the term or transition period, provides free download tools for mass export, and says NetDocuments will confirm to the customer that the repository is empty. Where data remains 30 days after termination, NetDocuments may delete and permanently destroy it or, at the customer's request, charge for continued storage at the previous subscription rate. Deletion of prompt and output records specifically is not addressed. | Does deleting a PatternBuilder app or its run history erase stored prompts and outputs, and will you certify that deletion in writing including anything held by Microsoft? | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025) |
| Vendor access to content | Public claim only | The agreement defines Unauthorized Access to include access to Customer Repository Data by NetDocuments personnel other than as permitted by the agreement or volunteered by the customer, and clause 5.2.2 limits permitted use and access. Exhibit A states that at the customer's request Help Desk personnel may have limited access to customer systems or repository data to resolve support issues, that this support may be provided from regions other than the customer's Service Region, and that the customer must notify support in advance if its policies or applicable law restrict access outside a geographic location. | Who at NetDocuments can read a PatternBuilder MAX prompt or output for support or debugging, from which countries, under what approval, and can we obtain the access log? | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025) |
| Access control, permissions and audit | Public claim only | Exhibit B states NetDocuments allocates internal permissions on a least-privilege basis through Active Directory groups, removes access on termination, requires two-factor authentication for its separate development and test environments, and provides customer-visible logging of document-level events and administrative changes for 90 days. The support article says no specific administrative setup is required for PatternBuilder MAX once NetDocuments enables it, and that an app can be built as a global app or a workspace app. | Which roles can create, edit and run a PatternBuilder MAX app, can we confine apps to nominated workspaces and users, and is every prompt run recorded in an exportable audit log? | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025); [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) |
| Encryption in transit and at rest | Public claim only | Exhibit B commits NetDocuments to encrypt Customer Repository Data in transit and at rest using industry-standard encryption protocols, and to store saved repository data in highly available storage located at two or more geographically separate data centres. Algorithms, TLS versions and key management are not specified, and no customer-managed key option appears in the agreement. | Name the encryption algorithms and TLS versions used, state who holds the keys, and confirm how the prompt payload is protected on the path to the Microsoft-hosted model. | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025) |
| Independent security assurance | Public claim only | Exhibit B commits NetDocuments to an annual SOC 2 Type 2 audit for security, availability and privacy and to maintaining ISO 27001 certification or a comparable successor standard, with independent penetration tests at least twice per 12 months and monthly internal and external vulnerability scans. It points to Due Diligence Response information on the trust website for verification; that site did not return readable content when scraped on 2026-09-27, so no report, date or scope was seen. | Provide the current SOC 2 Type 2 report and ISO 27001 certificate, with scope statements confirming that PatternBuilder MAX and the Azure OpenAI integration are inside the audited boundary. | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025); [NetDocuments trust website (TrustCloud) — page shell only; no readable content returned on scrape](https://trust.netdocuments.com/home) |
| Contracting entity, liability and forum | Public claim only | The 2025 service agreement states that for a customer whose principal place of business is in Australia, New Zealand or Asia, 'NetDocuments' means NetDocuments Australia Pty Limited of Parkline Place, Level 25, 252 Pitt Street, Sydney NSW 2000, and that governing law for those customers is the law of Australia, with Australian Consumer Law protections preserved. Liability is capped at the annualised subscription fee at the time of the event, except for indemnification obligations and the customer's breach of the AI Restrictions clause, for which NetDocuments may recover without limitation as to type or category. A standard Data Processing Addendum tailored to the Services is provided on request rather than published, and amendments require a written instrument signed by both parties. | Provide the executed Australian agreement and the standard Data Processing Addendum, confirm the contracting entity's ACN or ABN, and state whether the liability cap applies to a breach of clause 5.2.2 by NetDocuments. | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025); [NetDocuments General Privacy Notice (header records 05 February 2026; foot records 18 December 2023)](https://www.netdocuments.com/privacy-policy) |
| Cross-border transfers | Public claim only | Clause 2.4 keeps stored Customer Repository Data in the Order Form's Services Region, but Exhibit A allows Help Desk Support from other regions and the agreement excludes user-directed sharing from the definition of transfer. The privacy notice states that NetDocuments Software, Inc. is certified under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, offers Standard Contractual Clauses through its data processing addendum by request to compliance@netdocuments.com, and that it complies with the Australian Privacy Act to the extent applicable. Neither document states where the model inference call is executed. | For an Australian Services Region, list every country in which a PatternBuilder MAX prompt is processed or logged, including the Azure OpenAI endpoint, and confirm whether inference stays in Australia. | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025); [NetDocuments General Privacy Notice (header records 05 February 2026; foot records 18 December 2023)](https://www.netdocuments.com/privacy-policy) |
| Incident notification | Public claim only | Exhibit B states NetDocuments will report any confirmed Unauthorized Access to the customer without unreasonable delay, not to exceed 24 hours, and will perform a root cause analysis and develop a mitigation plan. The definition of Unauthorized Access is limited to repository data residing on the NetDocuments network and to access by NetDocuments personnel, so an incident at a model provider is not obviously inside it. No incident history was published on the pages read. | Does the 24-hour notification cover an incident at Microsoft affecting our prompts or outputs, and who notifies the OAIC under the Notifiable Data Breaches scheme for an Australian repository? | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025) |
| Change notice for models, features and terms | Public claim only | Clause 2.7 commits NetDocuments to at least six months' Digital Notice of material changes to or retirement of Services or features and says functionality will not materially decrease during the term; Digital Notice is posted on the support webpage, with email available on registration, and is expressly not to be used for legal notices. Exhibit B reserves the right to change security measures without decreasing overall security. The Legal AI FAQ says the design is model agnostic and that new models are made available as they appear, and the support article's model list already varies by region. | Will a change to the model behind an existing app, or to the region in which it runs, be notified in advance, and can we pin a model version for an app in production? | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025); [NetDocuments Legal AI and Workflow Automation overview, including the ndMAX FAQ on models and training](https://www.netdocuments.com/solutions/legal-ai); [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) |
| Export and exit | Public claim only | On notice of termination the customer may elect a transition period of up to six months if it is not in breach, is current on fees and prepays for that period. The customer must remove repository data using free download tools, NetDocuments will confirm the repository is empty, and it may delete anything remaining 30 days after the end of the term or transition period. The agreement does not say whether PatternBuilder app definitions, prompts or output records are included in the export. | In what format do we export PatternBuilder app definitions, prompt text and generated outputs on exit, and what is excluded from the download tools? | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025) |
| Connectors and third-party applications | Public claim only | Clause 4.3 states that NetDocuments enables select third parties to provide Third-Party Applications that integrate with the Services, disclaims all warranties for them, makes any representation a matter between the customer and the third party, and notes that some are ordered through the Order Form or the Customer Service Account for additional fees while others require a separate contract. Clause 5.2.1 sublicenses repository data as necessary to provide Third-Party Applications. The AI Restrictions clause refers to 'Third-Party AI Services Providers', a term the agreement does not define. | List every Third-Party Application and Third-Party AI Services Provider that would be enabled for our repository, and confirm that none receives matter content without our written approval. | [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025) |
| Open-web retrieval | Not confirmed | The support article documents the whole configuration surface of the prompt step — model, user message, system message, temperature, maximum length and output type — and none of those options is a web or external source. The article describes the flow as sending the prompt to the model and returning output, with no retrieval step, but no document read states whether open-web access exists or can be blocked. | Can a PatternBuilder MAX prompt reach the open internet or any source outside our repository, and if so can that be disabled at repository level? | [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) |
| What the app can do with the output | Not confirmed | The documented design has the app builder choose where output lands: an info page shown to the user, or a variable placed anywhere in a document template. The trigger action can sit on a background page, and the article notes an app may be global or workspace-scoped, so a firm can build an app that writes model output into a document without displaying it for review first. Nothing in the article requires a confirmation step. | Can an administrator require that every PatternBuilder MAX app shows its output on a review page before insertion into a document, and can background-page prompt actions be restricted? | [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) |
| Human review before use | Public claim only | The support article instructs that 'it's important to review any AI-generated responses and validate them against your legal knowledge and expertise', that the model 'should never replace the advice of a qualified legal professional', and that information obtained from AI-generated responses should be verified against reliable legal sources. That is guidance in documentation; no product control enforcing review, and no recorded sign-off, is described, and the service agreement contains no human-oversight clause. | Is there any setting that forces a named reviewer to approve PatternBuilder MAX output before a document is finalised, and is that approval recorded in the audit log? | [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX); [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025) |

## Notes

Four firecrawl operations were spent: the 2025 service agreement, the general privacy notice, the Legal AI overview page and an attempt at the trust website. Not reached: the subprocessor register and Due Diligence Response documents behind https://trust.netdocuments.com/home, which returned only the TrustCloud page shell, and the standard Data Processing Addendum, which the agreement and privacy notice both supply only on request (compliance@netdocuments.com). Consequently subprocessors are unverified and the Microsoft contracting entity behind the model call is unnamed. The location of the inference call is not stated in any document read; australianRegion is recorded as yes on the strength of the agreement's Services Region clause plus the support article naming an AU region in its model-availability list, and that basis is set out in facts.australia.notes and the transfers consideration rather than assumed. Ownership is left unknown because no document read states it. The support article's opening framing and the phrase 'responsible AI built directly in' are vendor marketing and are not recorded as facts. Two different Australian entity names appear in the privacy notice, and no ACN or ABN is published anywhere I read. Capability list updated 2026-09-27 when the controlled vocabulary was extended from 19 to 38 values: added document-classification. Values already present were kept, because they remain true descriptions of what the product does.

## Sources

- [PatternBuilder MAX — NetDocuments Support knowledge article (article dated 21 April 2026)](https://support.netdocuments.com/s/article/PatternBuilder-MAX) (checked 2026-09-27)
- [NetDocuments Service Agreement 2025, including Exhibit A (Service Levels and Support) and Exhibit B (NetDocuments Security)](https://www.netdocuments.com/service-agreement-2025) (checked 2026-09-27)
- [NetDocuments General Privacy Notice (header records 05 February 2026; foot records 18 December 2023)](https://www.netdocuments.com/privacy-policy) (checked 2026-09-27)
- [NetDocuments Legal AI and Workflow Automation overview, including the ndMAX FAQ on models and training](https://www.netdocuments.com/solutions/legal-ai) (checked 2026-09-27)
- [NetDocuments trust website (TrustCloud) — page shell only; no readable content returned on scrape](https://trust.netdocuments.com/home) (checked 2026-09-27)

A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.