Casetext AI Vendor Risk Profile
Legal AI platform acquired by Thomson Reuters. Offers CoCounsel, an AI legal assistant for contract review, legal research, document summarization, and deposition preparation powered by frontier language models.
Risk overview
Risk score: 30/100
Risk tier: Moderate
Safety rating: 70/100 (higher is better)
Lower risk scores indicate lower assessed risk.
Last verified: Apr 19, 2026 Aging
Risk dimensions
| Dimension | Risk score |
|---|---|
| Data Handling | 28/100 |
| IP Exposure | 26/100 |
| Jurisdiction | 21/100 |
| Security | 34/100 |
| Regulatory Compliance | 50/100 |
| Transparency | 25/100 |
| Business Stability | 38/100 |
| Dependency Chain | 26/100 |
| Agent Governance | Not assessed |
Analyst summary
Rating: Acceptable
Casetext (CoCounsel) is a legal AI research and drafting platform now wholly owned by Thomson Reuters since 2023. Its compliance posture is strong for legal work (SOC 2 Type II), customer-uploaded matter content is isolated from training, and Thomson Reuters parentage provides financial and regulatory credibility.
Bottom line: A credible legal AI research tool with strong parentage; success depends on attorney output verification discipline.
Strengths
- Owned by Thomson Reuters, providing deep legal domain backing and stability
- SOC 2 Type II certified with legal-sector-appropriate controls
- No-training on customer matter content or privileged communications
- Customer retains ownership of uploaded documents and AI research outputs
- GDPR compliance for EU legal workflows
Concerns
- Heavy reliance on third-party foundation models (GPT-class) for reasoning; subprocessor review required
- Attorney responsibility for AI output accuracy remains with the firm; the Schwartz v. Avianca hallucination incident underscored this risk
- Post-acquisition product integration with Thomson Reuters Westlaw still evolving
- Pricing weighted toward law-firm buyers; not a good fit for small teams
Best for
- Mid-market to large law firms doing legal research, memo drafting, and document review
- In-house legal teams needing AI-assisted contract analysis
- Litigation teams with disciplined output verification workflows
Avoid if
- Your attorneys are not trained on output verification obligations
- You need a workflow that does not depend on third-party foundation models
- You need a non-US jurisdictional vendor for EU-only legal work
Citations
- Data Handling — Data Retention Period
Casetext retains customer-uploaded documents according to the customer's configured matter retention policy; documents can be deleted on demand.
- Data Handling — Trains On User Data
Casetext does not use customer queries, uploaded documents, or attorney-client communications to train foundation models.
- Governance — Privacy Policy Url
Casetext Privacy Policy describes collection and processing of user data.
- Governance — Tos Url
Casetext Terms of Service govern use of the CoCounsel legal AI platform.
- Ip Profiles — User Owns Outputs
Customer retains all ownership rights in uploaded documents and any AI-generated legal research outputs.
- Jurisdiction Profiles — Incorporation Country
Thomson Reuters completed its acquisition of Casetext. Casetext is now part of Thomson Reuters, a global professional information services company.
- Security Compliance — Gdpr Compliant
Casetext complies with GDPR for customers with EU data subjects and provides a DPA on request.
- Security Compliance — Soc2 Type2
Casetext is SOC 2 Type II certified and maintains enterprise-grade security controls appropriate for law firm data.