// Trust & Security Report

    Relativity ODA LLC logo

    Relativity ODA LLC

    RelativityOne - AI-powered legal data platform for e-discovery, case management, and data breach response with integrated generative AI suite (aiR for Review, aiR for Privilege, aiR for Case Strategy, aiR for Data Breach Response, aiR Assist conversational AI).

    Certifications held

    9

    Maturity

    Enterprise

    Trains on your data

    No

    Trust center

    Yes

    // Certification ledger

    Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.

    ISO/IEC 27001:2022
    HELD

    ISO/IEC 27001:2022 certification

    Verify on relativity.com
    ISO/IEC 27018:2019
    HELD

    ISO/IEC 27018:2019 certification

    Verify on relativity.com
    SOC 2 Type II
    HELD

    SOC 2 Type II Report

    Verify on relativity.com
    SOC 3
    HELD

    SOC 3 Report

    Verify on relativity.com
    HIPAA
    HELD

    HIPAA Compliance

    Verify on relativity.com
    FedRAMP
    HELD

    FedRAMP Class C Certified

    Verify on relativity.com
    IRAP (Australian)
    HELD

    IRAP Assessed at Protected

    Verify on relativity.com
    CSA CAIQ
    HELD

    Cloud Security Alliance's (CSA) CAIQ

    Verify on relativity.com
    GDPR
    HELD

    Relativity ODA LLC and its subsidiary, Relativity Global LLC comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework

    Verify on relativity.com

    // Privacy & AI training

    Trains on customer data

    No

    Data processing agreement

    Offered

    Data region

    Microsoft Azure (multiple regions globally available)

    Data submitted for processing by Azure OpenAI is not retained beyond your organization's instance, nor is it used to train any other generative AI models from Relativity, Microsoft, or any other third party. This applies across all aiR products (aiR for Review, aiR for Privilege, aiR for Case Strategy, aiR for Data Breach Response).

    // Security controls

    Encryption in transit

    Standard HTTPS/TLS encryption; RelativityOne built on Azure which provides additional encryption mechanisms

    relativity.com

    Encryption at rest

    Customer data encrypted at rest on Azure infrastructure

    relativity.com

    Data Access Controls

    Just-in-time access model; privileged access management solution; customer data access by Relativity extremely limited

    relativity.com

    Threat Monitoring

    24/7/365 monitoring by Relativity's in-house security team (Calder7); continuous monitoring and advanced threat detection

    relativity.com

    Incident Response

    Real-time defect detection; incident response team available

    relativity.com

    Cloud Provider Security

    Built on Microsoft Azure, which meets more than 90 international and industry-specific compliance standards

    relativity.com

    AI Model Security

    Extensive peer review and validation of AI models before deployment; bias testing; opted out of Microsoft's abuse/harmful content monitoring to ensure no unauthorized access to raw inputs/outputs

    relativity.com

    // Products & data scope

    RelativityOneLegal data platform

    data: Enterprise; handles sensitive legal documents, discovery data, case files, personal information

    Core SaaS platform used by AmLaw 200 firms and Fortune 500 corporations; 25+ year market leader

    RelativityOne GovernmentSpecialized legal platform

    data: Federal and state agencies; FOIA requests; sensitive government data

    FedRAMP certified variant for US government use

    Relativity aiR for ReviewGenerative AI feature

    data: Legal document review; personal data within discovery sets

    GenAI-powered document discovery; data not retained for training

    Relativity aiR for PrivilegeGenerative AI feature

    data: Attorney-client privilege detection in documents

    Prevents clawbacks; data not retained for training

    Relativity aiR for Case StrategyGenerative AI feature

    data: Case narrative and strategy generation from documents

    Data not retained for training

    Relativity aiR for Data Breach ResponseGenerative AI feature

    data: Rapid analysis of breach scope and response

    Data not retained for training

    Relativity aiR AssistGenerative AI feature

    data: Conversational AI for legal data exploration

    Recently launched; conversational interface to RelativityOne data; data not retained for training

    // At a glance

    Pricing model

    Subscription-based SaaS; consumption and per-user tiers available

    Self-hostable

    No

    // How we verified this

    Every certification marked HELD is confirmed against a verbatim quote on Relativity ODA LLC's own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.

    Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.

    relativity.com

    > Browse all vendor trust reports