Enterprise copilots used in firms
Horizontal enterprise AI products commonly deployed inside law firms and legal departments. As of 2026-10-07, 5 independent tools are recorded in this category; 5 publish a commitment not to train on customer data and 0 have third-party accuracy evidence.
documented yes documented no not disclosed
| Tool | Built for | No-train | SOC 2 | ISO 27001 | ISO 42001 | ZDR | Accuracy evidence | Incidents on record | Last checked |
|---|---|---|---|---|---|---|---|---|---|
Amazon Q BusinessAmazon Web Services · HQ US Bedrock-based enterprise Q&A assistant over connected data sources. No longer open to new customers; AWS directs customers to migrate to Amazon Quick. | In-house legal, Mid-sized firms | No training on customer data for Amazon Q Business: documented yes | SOC 2 report or certification for Amazon Q Business: documented yes | ISO 27001 certification for Amazon Q Business: not disclosed | ISO 42001 AI-management certification for Amazon Q Business: documented yes | Zero retention with model providers for Amazon Q Business: not disclosed | none | 0 | 2026-09-04 |
ChatGPT Enterprise / TeamOpenAI · HQ US Business tiers of ChatGPT with an admin console, SSO/SCIM, no-training default, configurable retention and regional data residency; SOC 2 Type 2, ISO 27001 and ISO 42001 via trust portal. | Large firms, Mid-sized firms, In-house legal, Small firms & solos | No training on customer data for ChatGPT Enterprise / Team: documented yes | SOC 2 report or certification for ChatGPT Enterprise / Team: documented yes | ISO 27001 certification for ChatGPT Enterprise / Team: documented yes | ISO 42001 AI-management certification for ChatGPT Enterprise / Team: documented yes | Zero retention with model providers for ChatGPT Enterprise / Team: documented no | none | 0 | 2026-09-11 |
Claude for Enterprise / TeamAnthropic · HQ US Business tiers of Claude with SSO/SAML, SCIM, RBAC, audit logs, retention controls and a no-training default; Enterprise adds usage-based pricing and a HIPAA-ready configuration; ISO 42001 certified. | Large firms, Mid-sized firms, In-house legal, Small firms & solos | No training on customer data for Claude for Enterprise / Team: documented yes | SOC 2 report or certification for Claude for Enterprise / Team: not disclosed | ISO 27001 certification for Claude for Enterprise / Team: not disclosed | ISO 42001 AI-management certification for Claude for Enterprise / Team: documented yes | Zero retention with model providers for Claude for Enterprise / Team: documented yes | none | 0 | 2026-09-11 |
Gemini for Google WorkspaceGoogle · HQ US Gemini embedded in Gmail, Docs, Meet and the Gemini app, included in Workspace Business and Enterprise editions; content not used for model training outside the customer domain; ISO 42001 certified. | Large firms, Mid-sized firms, In-house legal, Small firms & solos | No training on customer data for Gemini for Google Workspace: documented yes | SOC 2 report or certification for Gemini for Google Workspace: documented yes | ISO 27001 certification for Gemini for Google Workspace: documented yes | ISO 42001 AI-management certification for Gemini for Google Workspace: documented yes | Zero retention with model providers for Gemini for Google Workspace: not disclosed | none | 0 | 2026-09-22 |
Microsoft 365 CopilotMicrosoft · HQ US LLM orchestration over Microsoft Graph content in Word, Excel, Outlook and Teams; add-on licence to Microsoft 365 with GCC/GCC-High/DoD variants; ISO 42001 in scope; EU Data Boundary for EU customers. | Large firms, Mid-sized firms, In-house legal, Courts, Public sector | No training on customer data for Microsoft 365 Copilot: documented yes | SOC 2 report or certification for Microsoft 365 Copilot: documented yes | ISO 27001 certification for Microsoft 365 Copilot: documented yes | ISO 42001 AI-management certification for Microsoft 365 Copilot: documented yes | Zero retention with model providers for Microsoft 365 Copilot: not disclosed | vendor | 0 | 2026-09-03 |
Vendor, product, court and regulator names and logos are the property of their respective owners and are used solely to identify the product, body or document referred to; SafeLegalAI claims no rights in them. SafeLegalAI is not affiliated with, endorsed by, sponsored by or approved by any listed vendor, except where a record is labelled an affiliated product. Facts are recorded from vendors' published pages on the date shown; "not disclosed" means not found on the pages read, not that the vendor lacks it. No ranking, rating, review, recommendation or warranty is implied. Mark owners who prefer a text-only reference, and vendors seeking a correction, may write to the report page. Trade mark and quotation policy.