// Trust & Security Report
Themis Solutions Inc. (dba Clio)
Clio Draft is an AI-powered legal document automation and drafting platform for law firms. Part of Clio's Intelligent Legal Work Platform, which also includes Clio Manage (case management), Clio Work (legal AI assistant), Clio Grow (business development), and Clio Accounting (financial management).
Certifications held
8
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on clio.com“Clio successfully completes annual SOC 2 Type II and SOC 1 Type II examinations. Our 2025 SOC 2 Type II report has been issued for the period of June 1st, 2024 to May 31st, 2025.”
Verify on clio.com“Clio successfully completes annual SOC 2 Type II and SOC 1 Type II examinations.”
Verify on clio.com“Clio undergoes regular security audits and certifications including SOC2 and ISO27001. All AI capabilities operate within Clio's SOC2 and ISO27001-certified security infrastructure.”
Verify on clio.com“Clio is compliant with the terms found in the GDPR guidelines and meets requirements as both a data controller and data processor.”
Verify on clio.com“Clio supports Health Insurance Portability and Accountability Act obligations for ePHI storage and processing.”
Verify on clio.com“Clio meets Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) requirements.”
Verify on trust.clio.com“Clio complies with Texas Risk Assessment Management Program (TX-RAMP) requirements.”
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Multi-regional: US, Canada, EMEA, APAC. Canadian server option available for firms subject to Canadian data residency requirements.
No data is used to train large language models (LLMs). Clio explicitly states: 'No data is used to train large language models (LLMs)—ensuring full data safety and privacy.' Manage AI operates exclusively within Clio Manage's secure environment using only data input into the platform.
// Security controls
Encryption in transit and at rest
All data is encrypted in transit and at rest, processed in accordance with regional data protection laws.
clio.comMulti-factor authentication (MFA)
MFA available using email, text message, or authenticator app.
clio.comAnnual penetration testing
At least annually, a leading cybersecurity firm conducts penetration tests on the platform using advanced methods.
clio.comRole-based access controls
Clio provides role-based access controls to manage user permissions and ensure individuals can only access authorized information.
clio.comGeo-redundancy
Infrastructure hosted by AWS in multiple regions for durability and disaster recovery.
clio.com// Products & data scope
data: Client data, matter information, legal document templates, client intake data, questionnaire responses, e-signature documents
AI-powered legal document drafting and automation tool that converts Word documents into reusable templates, provides AI-assisted questionnaires, supplies court forms across all 50 US states, and enables e-signature functionality. Processes thousands of documents weekly.
// At a glance
Pricing model
Subscription-based; pricing available through Clio's website or direct sales
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Themis Solutions Inc. (dba Clio)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
trust.clio.com