{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"legora","name":"Legora","domain":"legora.com","category":"AI tools","one_liner":"The AI workspace for lawyers","trust_center_url":"https://security.legora.com/","security_page_url":null,"url":"https://certreports.com/vendors/legora/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"hipaa","framework_name":"HIPAA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states that it will sign a business associate agreement on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/legora/hipaa","evidence":[{"source_type":"trust_center","source_name":"Legora trust centre (Vanta)","url":"https://security.legora.com/","fetched_at":"2026-09-18 23:12:15.048995+00","content_hash":"e8ced5e37338bcbab628a4424c71bb4e1a74e4d2b8b930851c340fe0aee5c237","wayback_url":null,"quote":"HIPAA","confidence":1}]},{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 18 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type II on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/legora/soc-2","evidence":[{"source_type":"trust_center","source_name":"Legora trust centre (Vanta)","url":"https://security.legora.com/","fetched_at":"2026-09-18 23:12:15.048995+00","content_hash":"e8ced5e37338bcbab628a4424c71bb4e1a74e4d2b8b930851c340fe0aee5c237","wayback_url":null,"quote":"SOC 2 Type II","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/legora/gdpr","evidence":[{"source_type":"trust_center","source_name":"Legora trust centre (Vanta)","url":"https://security.legora.com/","fetched_at":"2026-09-18 23:12:15.048995+00","content_hash":"e8ced5e37338bcbab628a4424c71bb4e1a74e4d2b8b930851c340fe0aee5c237","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/legora/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Legora trust centre (Vanta)","url":"https://security.legora.com/","fetched_at":"2026-09-18 23:12:15.048995+00","content_hash":"e8ced5e37338bcbab628a4424c71bb4e1a74e4d2b8b930851c340fe0aee5c237","wayback_url":null,"quote":"ISO/IEC 27001:2022","confidence":1}]},{"framework":"iso-42001","framework_name":"ISO/IEC 42001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 42001 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 42001:2023 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/legora/iso-42001","evidence":[{"source_type":"trust_center","source_name":"Legora trust centre (Vanta)","url":"https://security.legora.com/","fetched_at":"2026-09-18 23:12:15.048995+00","content_hash":"e8ced5e37338bcbab628a4424c71bb4e1a74e4d2b8b930851c340fe0aee5c237","wayback_url":null,"quote":"ISO/IEC 42001:2023","confidence":1}]}],"brief":{"summary":"Legora states on its trust centre that it has a SOC 2 Type II report, as of 18 Sep 2026. Legora states on its trust centre that it displays a HIPAA badge, though the badge is described as a claim with BAA availability not yet captured, as of 18 Sep 2026. Legora states on its trust centre that it addresses GDPR, as of 18 Sep 2026. Legora states on its trust centre that it holds ISO/IEC 27001:2022, as of 18 Sep 2026. Legora states on its trust centre that it holds ISO/IEC 42001:2023, as of 18 Sep 2026.","bullets":["SOC 2 Type II: vendor-stated on its trust centre only, as of 18 Sep 2026; no independent audit report evidence found.","HIPAA: badge displayed on trust centre is a vendor claim; BAA availability not captured, as of 18 Sep 2026.","ISO/IEC 27001:2022 and ISO/IEC 42001:2023: both vendor-stated on trust centre, as of 18 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 12:24:46.207101+00"},"legal_docs":[{"kind":"security_txt","url":"https://security.legora.com/","availability":"public","detail":"Public documents on the trust centre: ISO/IEC 27001:2022 - Certificate; ISO/IEC 42001:2023 - Certificate; ISO/IEC 27001:2022 - Statement of Applicability","as_of":"2026-09-18"}],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T22:35:45.215Z"}