// Trust & Security Report
Relativity
RelativityOne - AI-powered legal data platform for e-discovery, case management, and data breach response with integrated generative AI suite (aiR for Review, aiR for Privilege, aiR for Case Strategy, aiR for Data Breach Response, aiR Assist conversational AI).
Certifications held
8
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on relativity.com“FedRAMP Class C Certified HIPAA Compliance IRAP Assessed at Protected SOC 2 Type II Report SOC 3 Report Cloud Security Alliance’s (CSA) CAIQ Request Compliance Certificates Privacy at Every Step”
Verify on relativity.com“C Certified HIPAA Compliance IRAP Assessed at Protected SOC 2 Type II Report SOC 3 Report Cloud Security Alliance’s (CSA) CAIQ Request Compliance Certificates Privacy at Every Step The privacy of your”
Verify on relativity.com“2022 certification ISO/IEC 27018:2019 certification FedRAMP Class C Certified HIPAA Compliance IRAP Assessed at Protected SOC 2 Type II Report SOC 3 Report Cloud Security Alliance’s (CSA) CAIQ Request”
Verify on relativity.com“Relativity ODA LLC and its subsidiary, Relativity Global LLC comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework”
> Show 1 unconfirmed / not-held certifications
source: relativity.comThe vendor's pages state this for a different product or company, not for this product.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Microsoft Azure (multiple regions globally available)
Data submitted for processing by Azure OpenAI is not retained beyond your organization's instance, nor is it used to train any other generative AI models from Relativity, Microsoft, or any other third party. This applies across all aiR products (aiR for Review, aiR for Privilege, aiR for Case Strategy, aiR for Data Breach Response).
// Security controls
Encryption in transit
Standard HTTPS/TLS encryption; RelativityOne built on Azure which provides additional encryption mechanisms
relativity.comData Access Controls
Just-in-time access model; privileged access management solution; customer data access by Relativity extremely limited
relativity.comThreat Monitoring
24/7/365 monitoring by Relativity's in-house security team (Calder7); continuous monitoring and advanced threat detection
relativity.comCloud Provider Security
Built on Microsoft Azure, which meets more than 90 international and industry-specific compliance standards
relativity.comAI Model Security
Extensive peer review and validation of AI models before deployment; bias testing; opted out of Microsoft's abuse/harmful content monitoring to ensure no unauthorized access to raw inputs/outputs
relativity.com// Products & data scope
Data it handles: Enterprise; handles sensitive legal documents, discovery data, case files, personal information
Core SaaS platform used by AmLaw 200 firms and Fortune 500 corporations; 25+ year market leader
Data it handles: Federal and state agencies; FOIA requests; sensitive government data
FedRAMP certified variant for US government use
Data it handles: Legal document review; personal data within discovery sets
GenAI-powered document discovery; data not retained for training
Data it handles: Attorney-client privilege detection in documents
Prevents clawbacks; data not retained for training
Data it handles: Case narrative and strategy generation from documents
Data not retained for training
Data it handles: Rapid analysis of breach scope and response
Data not retained for training
Data it handles: Conversational AI for legal data exploration
Recently launched; conversational interface to RelativityOne data; data not retained for training
// At a glance
Pricing model
Subscription-based SaaS; consumption and per-user tiers available
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Relativity ODA LLC's own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
relativity.com// Trust reports for comparable tools
Other tools in the same category, each with its own sourced report.