Skip to content

Legal Tech / Contract review & due diligence

Checkbox First Pass

Checkbox Software, Inc. · HQ AU · beta · Last checked 2026-09-16

Visit website

Last checked = the date we last re-opened the vendor's published pages. Facts are what the vendor documents, not what it claims in marketing.

Context-aware AI agent in Checkbox that reviews contracts, invoices and incoming legal requests before routing them to in-house legal teams.

Category
Contract review & due diligence · legal front door, contract review, invoice review, legal request triage
Built for
In-house legal
Model providers (disclosed)
own, third-party
Data residency options
Customer-requested region
Pricing
enterprise
Markets
US, UK, AUSTRALIA, SINGAPORE
Last checked
16 Sept 2026

What the vendor documents

Recorded from the vendor's own trust, privacy and terms pages. "Not disclosed" means we found no public statement, not that the control is absent.

No training on customer data
documented yessource
SOC 2
documented yessource
ISO 27001
documented yessource
ISO 42001
not disclosedsource
Zero retention with model providers
not disclosedsource
DPA offered
documented yessource
Private deployment
not disclosedsource

What the public documentation states

Checkbox's 16 September 2026 announcement says First Pass is a context-aware AI agent for contracts, invoices and legal requests, available through early access with broader launch planned for Q1 2027. The security page states SOC 2 Type II attestation, ISO/IEC 27001:2022 certification and encryption of data at rest and in transit. The Master Services Agreement version 2026.1 says Checkbox does not use customer data to train general-purpose or multi-customer AI models and permits training only for the customer's own segregated instance. The privacy policy says Checkbox primarily stores data in the data-center region the customer requests.

In the vendor's words

“First Pass, a context-aware AI agent that reviews contracts, invoices, and incoming legal requests”
First Pass launch announcement, 16 September 2026
“Checkbox has been externally audited against the security requirements of the SOC 2 framework”
Security and trust
“does not use your Data to train, fine-tune or improve any general-purpose or multi-customer”
Master Services Agreement, version 2026.1

Not disclosed on public pages

"Not disclosed" records that no public statement was found where we looked, on the date shown. It does not assert that the control, term or figure is absent.

Not published on pages we read on 2026-09-16: concrete price, model-provider names, zero-retention terms, ISO 42001 status, public sub-processor list, breach-notification hours, private deployment terms, and whether First Pass contract-review outputs have a measured accuracy or recall/precision method for buyer review.

Questions to put to the vendor

  1. Which third-party AI models process contracts, invoices and request text in First Pass?
  2. Where is the current public sub-processor list, and which providers process customer legal data?
  3. What retention and deletion rules apply to prompts, extracted contract text, risk scores and review summaries?
  4. What test set and method support First Pass contract-review risk scoring?

Summary record: the facts above are sourced, but the vendor's documentation has not yet been written up. It is excluded from search indexes until that is done.

Accuracy evidence

No published accuracy or hallucination evaluation found as of 2026-09-16.

Related incidents

No incidents are recorded for this tool as of 2026-09-16.

Ownership · Vendor announcement says the enhanced AI Agent is available through early access, with broader launch planned for Q1 2027. Contact page lists Sydney as HQ.

Sources

Report an issue with this record →

Cite this record

SafeLegalAI Legal Tech Tools, "Checkbox First Pass", safelegalai.com/tools/checkbox-first-pass (last checked 2026-09-16, accessed 2026-09-21). Data: CC BY 4.0.

Documented facts, side by side

Facts from both vendors' pages in one table; never a ranking. All comparisons.

Also in Contract review & due diligence

SafeLegalAI is a research publication by Cognesio LLP, not a law firm. Nothing here is legal advice, and no lawyer–client relationship arises from reading it. Rules change; always check the official document linked on each record and take advice on your own situation. Researched and drafted with AI assistance; verified against primary sources and edited by Cognesio LLP. The linked official documents are the record — our summaries are not the law and are not legal advice.

Vendor, product, court and regulator names and logos are the property of their respective owners and are used solely to identify the product, body or document referred to; SafeLegalAI claims no rights in them. SafeLegalAI is not affiliated with, endorsed by, sponsored by or approved by any listed vendor, except where a record is labelled an affiliated product. Facts are recorded from vendors' published pages on the date shown; "not disclosed" means not found on the pages read, not that the vendor lacks it. No ranking, rating, review, recommendation or warranty is implied. Mark owners who prefer a text-only reference, and vendors seeking a correction, may write to the report page. Trade mark and quotation policy.