Skip to content

Legal Tech / E-discovery & investigations

Merlin Alchemy

Merlin Search Technologies · HQ US · founded 2019 · Last checked 2026-09-03

Visit website

Last checked = the date we last re-opened the vendor's published pages. Facts are what the vendor documents, not what it claims in marketing.

Single-tenant cloud discovery platform where 'five AI engines' find, review and answer questions across millions of documents with cited reports; utility pricing with sites that can be switched off.

Provisional entry: fewer than four governance facts are sourced yet. It is excluded from search indexes until verified.

Category
E-discovery & investigations · generative-AI investigation, single-tenant, usage pricing, ECA
Built for
Large firms, Mid-sized firms, In-house legal
Model providers (disclosed)
Not disclosed
Data residency options
specific AWS regions, client’s private AWS environment, FedRAMP environment
Pricing
usage
Markets
US, UK
Last checked
03 Sept 2026

What the vendor documents

Recorded from the vendor's own trust, privacy and terms pages. "Not disclosed" means we found no public statement, not that the control is absent.

No training on customer data
documented yessource
SOC 2
documented yessource
ISO 27001
not disclosedsource
ISO 42001
not disclosedsource
Zero retention with model providers
not disclosedsource
DPA offered
documented yessource
Private deployment
documented yessource

What the public documentation states

Merlin's Alchemy page describes an e-discovery and investigation system that lets users ask questions across document collections and receive sourced answers, timelines, summaries and review reports with citations. The terms describe the application as web-based software for document management, discovery, investigation workflow automation, data sharing, collaboration, case management, claim management and deal management. The terms refer to external AI service providers but do not name them; they require those providers to keep prompts and responses confidential and not use them for training. The security page states that Merlin can deploy client environments in specific AWS regions, a client's private AWS environment or a FedRAMP environment, and that each client has isolated infrastructure. It states SOC 2 Type II certification and ISO 27001 planned for 2026. Pricing is described as usage based without a list price. Merlin states a 98% privilege-call figure and publishes a ReviewPartner sampling and validation method.

In the vendor's words

“pay only for what you actually use”
Merlin pricing page
“do not use input prompts and output responses to train”
Merlin Terms of Service, last updated November 1, 2025
“deploy client environments in specific AWS regions”
Merlin security page
“ReviewPartner runs a formal validation step against a fresh sample of documents”
Merlin ReviewPartner article

Not disclosed on public pages

"Not disclosed" records that no public statement was found where we looked, on the date shown. It does not assert that the control, term or figure is absent.

Not published on the pages we read on 2026-09-06: named AI model providers, a sub-processor list, list price, minimum term, SSO/SAML, zero retention and ISO 42001. Procurement and DPIA reviewers would normally ask for those details to record client-confidentiality safeguards, region-specific processing, SRA/ABA supervision duties and GDPR Art. 28 processor commitments.

Questions to put to the vendor

  1. Which external AI service providers process prompts and responses for Alchemy, and in which AWS or FedRAMP regions?
  2. Can Merlin provide the current sub-processor list and the DPA terms that govern client collections?
  3. Does any Alchemy configuration provide zero retention for prompts, responses or extracted document text?
  4. What sample design, reviewer role and matter type support the stated 98% privilege-call figure?

Accuracy evidence

No published accuracy or hallucination evaluation found as of 2026-09-03.

Related incidents

No incidents are recorded for this tool as of 2026-09-03.

Ownership · Private; SOC 2 Type II audit completed Nov 2025; ISO 27001 planned for 2026; TransPerfect Legal partnership (Apr 2026).

Sources

Report an issue with this record →

Cite this record

SafeLegalAI Legal Tech Tools, "Merlin Alchemy", safelegalai.com/tools/merlin-alchemy (last checked 2026-09-03, accessed 2026-10-07). Data: CC BY 4.0.

Also in E-discovery & investigations

SafeLegalAI is a research publication, not a law firm. Nothing here is legal advice, and no lawyer–client relationship arises from reading it. Rules change; always check the official document linked on each record and take advice on your own situation. Researched and drafted with AI assistance; verified against primary sources and edited by SafeLegalAI. The linked official documents are the record — our summaries are not the law and are not legal advice.

Vendor, product, court and regulator names and logos are the property of their respective owners and are used solely to identify the product, body or document referred to; SafeLegalAI claims no rights in them. SafeLegalAI is not affiliated with, endorsed by, sponsored by or approved by any listed vendor, except where a record is labelled an affiliated product. Facts are recorded from vendors' published pages on the date shown; "not disclosed" means not found on the pages read, not that the vendor lacks it. No ranking, rating, review, recommendation or warranty is implied. Mark owners who prefer a text-only reference, and vendors seeking a correction, may write to the report page. Trade mark and quotation policy.