---
title: "Vincent (vLex (part of Clio))"
url: "https://ailawframework.com/software/vincent"
type: "software_profile"
site: "AI Law Framework"
id: "vincent"
vendor: "vLex (part of Clio)"
category: "Legal-specific"
segment: "Legal research"
confidence: "medium"
last_reviewed: "2026-09-20"
---

# Vincent (vLex (part of Clio))

> Legal research and analysis over vLex's global database, with drafting, comparison, chronologies and no-code Studio workflows; vLex is part of Clio.

Canonical page: https://ailawframework.com/software/vincent  
Last reviewed: 2026-09-20

Site index for agents: https://ailawframework.com/llms.txt

Plan covered: Vincent assistant. Review Vincent Studio separately: Studio help lists US or EU/Ireland residency, not Australia, and workflow assets sit outside conversation retention.

## Capabilities

- Legal research
- Case-law summarisation
- Contract review and redlining
- Chronology building
- Document summarisation
- Transcription
- Agentic workflows
- Litigation analytics

## Key facts

| Fact | Value |
| --- | --- |
| Deployment | SaaS |
| Hosting regions | United States, Australia, European Union / EEA |
| Australian region | On request |
| Model providers | OpenAI |
| Assurance | SOC 2 (January 2025), ISO 27001 (June 2025) |
| Training on customer content | No |
| Retention | Conversation logs and files default to one year, configurable, then permanent deletion. Studio workflow assets persist until the workflow is deleted and sit outside conversation retention. Model-provider ZDR is described separately from platform storage. |
| Legal content coverage | vLex global legal database. Australian collection depth was not itemised on the product page reviewed. Confirm local sources on the subscription. |
| Pricing | No public Vincent price list. Free trial is advertised. Clio/vLex bundling after the vLex acquisition should be confirmed on the order form. |
| Australian presence | Unknown. Vincent core security: storage and encryption keys can be hosted in US, AU or EU if support configures the account. Studio documentation lists US or EU/Ireland only. Do not assume Studio is Australian-hosted. |
| Website | https://vlex.com/vincent-ai |

## What the research found

| Topic | Status | Finding | Open question | Sources |
| --- | --- | --- | --- | --- |
| Vincent versus Studio | Public claim only | Current site uses Vincent by Clio. Studio is a separate no-code workflow builder with different residency and retention rules for workflow assets. | Which product, country edition, modules and source rights are on our order, and is Studio in scope? | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai); [Vincent Studio — data security and compliance](https://support.vlex.com/vincent-by-vlex-1/vincent-studio/security-privacy-and-compliance/understanding-data-security-and-compliance-in-vincent-studio) |
| Residency | Public claim only | Vincent can store and process in US, AU or EU; region setup is via support. Studio: US or EU/Ireland. AU for Studio remains unknown until confirmed. | For Vincent and Studio separately, which countries cover storage, inference, keys, backups and support? | [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures); [Vincent — understanding data protection](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/understanding-data-protection); [Vincent Studio — data security and compliance](https://support.vlex.com/vincent-by-vlex-1/vincent-studio/security-privacy-and-compliance/understanding-data-security-and-compliance-in-vincent-studio) |
| Capabilities | Public claim only | Research over vLex, analysis, comparisons, chronologies, recordings/transcription and Studio workflows are advertised. Independent productivity claims (38%) are vendor-cited studies, not our trial. | List enabled skills and demonstrate citations plus unsupported-answer behaviour for our matters. | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai) |
| Source coverage | Not confirmed | Global database is claimed. Australian primary-law depth, currency and citator behaviour were not specified on the overview page. | Which Australian courts and legislation are in our licence, and how is negative treatment shown? | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai) |
| Pricing | Not confirmed | No public rate card. Clio ownership may affect bundling with Clio products. | Itemise Vincent, Studio, content sources and any Clio bundle for year one and two. | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai) |
| Integrations | Not confirmed | Clio relationship suggests possible PMS overlap; connectors were not documented on the pages reviewed. | Which DMS/PMS connectors exist, and do they honour live permissions? | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai) |
| Support | Public claim only | Data-residency setup is via support. No public SLA or Australian-hours coverage was found. | Provide support hours for Australia, severity targets and the security contact. | [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures) |
| Quality claims | Public claim only | Site cites randomised trials and 3.67× reliability versus leading LLMs. Vals Legal AI Report 2025 included Vincent AI; scores were mixed by task. Those studies are not an Australian-corpus trial. | Share Australian evaluation results and allow a trial on our documents. | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai); [Vals Legal AI Report (VLAIR), February 2025](https://www.vals.ai/industry-reports/vlair-2-27-25) |
| Task fit | Public claim only | Fit is for research and document analysis over vLex plus firm uploads. Recording/transcription adds consent issues. Studio workflows can embed permanent client material if misused. | Which tasks will use Vincent only, and will Studio workflow assets be forbidden for matter files? | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai); [Vincent Studio — data security and compliance](https://support.vlex.com/vincent-by-vlex-1/vincent-studio/security-privacy-and-compliance/understanding-data-security-and-compliance-in-vincent-studio) |
| Client data in workflows | Not confirmed | Studio warns not to put sensitive or client-specific information in workflow assets unless it is meant to be permanent. Recording features need consent analysis. | Can we exclude matters, and what is the recommended client-disclosure wording? | [Vincent Studio — data security and compliance](https://support.vlex.com/vincent-by-vlex-1/vincent-studio/security-privacy-and-compliance/understanding-data-security-and-compliance-in-vincent-studio); [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai) |
| Model providers | Public claim only | ZDR article discusses OpenAI ZDR APIs and quotes that nobody including OpenAI trains on platform work. A complete current provider list was not published. | Provide the model/provider register and ZDR contract for each endpoint we will use. | [vLex — How it works: zero data retention](https://vlex.com/news/How-It-Works-Zero-Data-Retention); [Vincent — understanding data protection](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/understanding-data-protection) |
| Subprocessors | Not confirmed | No dated public subprocessor list was found. Trust Centre exists. | Provide the current list with locations, notice and objection rights. | [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures) |
| Training | Public claim only | Data-protection help: uploaded material is never used to train underlying models. Studio: firm data is never used to train or improve foundational models. ZDR article: ZDR APIs so providers do not store or train. | Point to the signed no-training and ZDR clauses covering prompts, uploads, Studio assets and transcripts. | [Vincent — understanding data protection](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/understanding-data-protection); [Vincent Studio — data security and compliance](https://support.vlex.com/vincent-by-vlex-1/vincent-studio/security-privacy-and-compliance/understanding-data-security-and-compliance-in-vincent-studio); [vLex — How it works: zero data retention](https://vlex.com/news/How-It-Works-Zero-Data-Retention) |
| Feedback | Not confirmed | Product copy says Vincent learns preferences. Whether that is per-tenant personalisation or shared training was not specified in the security pages. | What 'learns your preferences' stores, and is it used across customers? | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai); [Vincent — understanding data protection](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/understanding-data-protection) |
| Platform versus provider retention | Public claim only | Default one-year retention for conversations/files, configurable, then permanent deletion. Provider ZDR is not deletion from Vincent. Studio workflow assets persist until the workflow is deleted. | Set our default, and list retention for conversations, files, workflow assets, embeddings and backups. | [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures); [Vincent Studio — data security and compliance](https://support.vlex.com/vincent-by-vlex-1/vincent-studio/security-privacy-and-compliance/understanding-data-security-and-compliance-in-vincent-studio); [vLex — How it works: zero data retention](https://vlex.com/news/How-It-Works-Zero-Data-Retention) |
| Deletion | Public claim only | Expiry permanently deletes conversation/file data. Workflow-asset deletion is manual. Exit certification was not described. | Demonstrate deletion of conversations, uploads, workflow copies, embeddings and backups, with a certificate. | [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures); [Vincent Studio — data security and compliance](https://support.vlex.com/vincent-by-vlex-1/vincent-studio/security-privacy-and-compliance/understanding-data-security-and-compliance-in-vincent-studio) |
| Personnel access | Public claim only | Data-protection help: uploads not accessible to other users or vLex personnel. Core security: RBAC and access only under documented circumstances; third-party-managed audit logs of data access. | When can staff read content, is it customer-visible, and can we forbid it? | [Vincent — understanding data protection](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/understanding-data-protection); [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures) |
| Access control | Not confirmed | Role-based access is described internally. Customer SSO/SCIM/MFA were not documented on the pages reviewed. | Confirm SAML/SSO, MFA and SCIM on our tier. | [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures) |
| Encryption | Public claim only | FIPS 140-2 compliant suite at rest and in transit; per-enterprise unique encryption master key. | Name algorithms, key custody, and whether BYOK is available. | [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures) |
| Assurance | Public claim only | SOC 2 January 2025 and ISO 27001 June 2025 claimed; reports via trust.vlex.com. Independent pen tests claimed. Scope covering Studio and model providers was not inspected. | Provide current reports covering Vincent and Studio, with exceptions. | [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures); [Vincent Studio — data security and compliance](https://support.vlex.com/vincent-by-vlex-1/vincent-studio/security-privacy-and-compliance/understanding-data-security-and-compliance-in-vincent-studio) |
| Contract | Not confirmed | Public MSA/DPA were not reviewed in this pass. Clio is now parent; contracting entity may have changed. | Provide the DPA, liability cap, governing law and output-ownership clause for our Vincent order. | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai) |
| Transfers | Public claim only | AU region is available for Vincent if configured. Studio is documented as US or EU/Ireland. Inference country for ZDR APIs is not stated. | Map storage, inference, backups and support countries for our exact products. | [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures); [Vincent — understanding data protection](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/understanding-data-protection); [Vincent Studio — data security and compliance](https://support.vlex.com/vincent-by-vlex-1/vincent-studio/security-privacy-and-compliance/understanding-data-security-and-compliance-in-vincent-studio) |
| Incidents | Not confirmed | No public breach-notification timeline was found on the security help pages. | What contractual notice period from discovery applies? | [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures) |
| Changes | Not confirmed | No model-change notice policy was found. Clio ownership may change product packaging. | What notice applies to model, residency or Clio-platform changes? | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai); [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures) |
| Exit | Not confirmed | Configurable deletion after retention. Export formats and post-termination window were not described. | How do we export conversations, files and Studio workflows, and what is certified deleted? | [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures); [Vincent Studio — data security and compliance](https://support.vlex.com/vincent-by-vlex-1/vincent-studio/security-privacy-and-compliance/understanding-data-security-and-compliance-in-vincent-studio) |
| Connectors | Not confirmed | Not documented on the pages reviewed. | List connectors, data copied, and residual copies after disconnect. | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai) |
| Web search | Not confirmed | Product is described as using vLex's legal database. Whether optional web search exists was not stated. | Does any skill send prompts to the open web, and can it be disabled? | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai) |
| Studio actions | Public claim only | Studio embeds custom workflows. Autonomous external actions were not catalogued. | Which workflow steps can send email or write to other systems without a click? | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai); [Vincent Studio — data security and compliance](https://support.vlex.com/vincent-by-vlex-1/vincent-studio/security-privacy-and-compliance/understanding-data-security-and-compliance-in-vincent-studio) |
| Human review | Public claim only | Research outputs still need citation checking. Reliability claims do not remove verification duty. | Show sample outputs with pinpoint citations and unsupported-answer behaviour. | [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai) |

## Notes

Vincent AU region is support-configured, not self-serve. Studio residency is US/EU in the help text. No public DPA or subprocessor list. Clio parent: confirm contracting entity. Workflow assets are the main retention trap.

## Sources

- [Vincent by vLex (Clio) — product](https://vlex.com/vincent-ai) (checked 2026-09-20)
- [Vincent — core security measures](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/reviewing-our-core-security-measures) (checked 2026-09-20)
- [Vincent — understanding data protection](https://support.vlex.com/vincent-by-vlex/vincent/security-privacy-and-compliance/understanding-data-protection) (checked 2026-09-20)
- [Vincent Studio — data security and compliance](https://support.vlex.com/vincent-by-vlex-1/vincent-studio/security-privacy-and-compliance/understanding-data-security-and-compliance-in-vincent-studio) (checked 2026-09-20)
- [vLex — How it works: zero data retention](https://vlex.com/news/How-It-Works-Zero-Data-Retention) (checked 2026-09-20)
- [Vals Legal AI Report (VLAIR), February 2025](https://www.vals.ai/industry-reports/vlair-2-27-25) (checked 2026-09-20)

A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.