// Trust & Security Report
Legalogic Ltd. (operating as LawGeex)
AI-powered contract review and negotiation automation platform; primary product is LawGeex for enterprise contract review with patented AI; secondary product Superlegal for SMB contract review launched as spin-off in 2024
Certifications held
1
Maturity
Growth
Trains on your data
Yes
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on lawgeex.com“We're ISO/IEC-27001 certified, ensuring the highest enterprise levels of privacy and security.”
> Show 5 unconfirmed / not-held certifications
source: lawgeex.comNo public evidence of SOC 2 certification on vendor's security page or website
source: lawgeex.comNo explicit HIPAA compliance attestation on vendor's security page, privacy policy, or terms of service
source: lawgeex.comGDPR referenced in privacy policy regarding data controller/processor roles and data subject rights, but no formal GDPR certification or DPA publicly linked; vendor acts as processor for customer data containing personal information
source: lawgeex.comNo public evidence of FedRAMP certification on vendor's website
source: lawgeex.comNo public evidence of CSA STAR certification on vendor's website
// Privacy & AI training
Trains on customer data
Yes
Data processing agreement
Offered
Data region
United States, Israel, Germany, and other locations as needed per customer instructions
LawGeex trains its AI on customer contract data through their Managed AI approach. Every contract reviewed includes a Legal QA process that feeds learnings, new concepts, and contract types back into the system for continuous algorithm improvement. The system has been trained on millions of contracts. However, the vendor does not explicitly disclose whether customer data is isolated per-client or pooled for broader training, and does not provide clear opt-out mechanisms for customers who wish to prevent their contract data from being used for AI training. This is a material concern for a platform processing confidential legal documents.
// Security controls
Encryption in transit
Vendor security page states they 'encrypt all data flowing in and out.' (Prior 'SSL 128-bit' specific was not found on the vendor page and has been removed.)
lawgeex.comMulti-factor authentication
Vendor security page states they 'protect its access with strong passwords and multi-factor authentications.' (Prior specifics naming Okta SSO, Google, Microsoft login, and SMS/email 2FA were not found on the vendor page and have been removed.)
lawgeex.comData isolation
Customer data isolation implemented; layered cloud security with distributed firewall
lawgeex.comCloud infrastructure
Uses AWS, Microsoft Azure, Auth0, and Imperva for hosting and security services
security-profiles.nudgesecurity.com// Products & data scope
data: Enterprise contracts, NDAs, commercial agreements; processes legally sensitive documents
Primary product for large enterprise customers. Patented AI technology trained on millions of contracts. Uses Digital Playbook, AI analytics, and Managed AI approach combining human lawyers with machine learning. Claimed 80% time savings, 3x faster deal closing, 90% cost reduction vs manual review. NOTE: Enterprise client base largely acquired by LegalSifter and Robin AI in 2023.
data: SMB contracts, negotiation-focused; same legal document processing as LawGeex enterprise
Spin-off product launched 2024, funded $5M seed round (May 2024). Branded as GenAI contract review platform for small and medium-sized businesses. Same founders (Noory Bechor, Ilan Admon) who built LawGeex. Focuses on deal closing speed and cost reduction for non-enterprise customers.
// What to watch
- OVER-CLAIM RISK: Third-party vendor profile (Nudge Security) lists SOC 2, HIPAA, FedRAMP, and CSA STAR certifications that are NOT independently verified on LawGeex's official security page or website. Cannot confirm these certifications held.
- AI TRAINING DATA: LawGeex trains AI models on customer contract data without explicit disclosure of data isolation per-client or opt-out mechanisms. Material privacy concern for platform processing confidential legal documents (NDAs, M&A, etc.).
- COMPANY RESTRUCTURING: Enterprise client base substantially divested in 2023 (LegalSifter and Robin AI acquisitions). Current product roadmap and long-term viability of LawGeex (vs. new Superlegal product) uncertain.
- OUTDATED TERMS: Terms of Use last updated January 21, 2016 (10 years old). Does not reflect current company structure, AI capabilities, or 2024 data protection practices.
- DATA PROCESSING AGREEMENT: Privacy policy references DPA but does not provide public link or template; must contact vendor for execution.
- NO EXPLICIT GDPR COMPLIANCE STATEMENT: While privacy policy references GDPR roles, no formal GDPR compliance attestation, adequacy certification, or Standard Contractual Clauses (SCCs) publicly documented.
- IDENTITY CLARIFICATION NEEDED: Vendor is Legalogic Ltd. (Israel-headquartered) but operates under 'LawGeex' brand; post-2023 divestitures, unclear which entities retain which product lines and liabilities.
// At a glance
Pricing model
Unknown; contact-for-pricing for LawGeex; Superlegal likely freemium or subscription-based for SMBs
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Legalogic Ltd. (operating as LawGeex)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
lawgeex.com