Everlaw
Security and trust center evidence
Transform your approach to litigation and
Summary
SOC 2Verified
GDPRVendor-stated
FedRAMPVerified
ISO 27001Vendor-statedSOC 3Verified
ISO 27017Vendor-stated
ISO 27018Vendor-stated
DPFVerified
CCPAVendor-stated
GovRAMPVendor-stated
CE PlusVendor-statedEverlaw has 4 registry-verified rows and 7 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Evidenced by the public SOC 3 report for the same examination period. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Everlaw has a SOC 2 report, evidenced by its public SOC 3 report for the period ending 28 Feb 2026 and issued 3 Apr 2026, as of 29 Sep 2026. That SOC 3 report is also published on Everlaw's trust centre, issued 3 Apr 2026, as of 29 Sep 2026. Everlaw is listed in the FedRAMP registry as FedRAMP Authorized since 17 Jul 2020, audited by Kratos, as of 28 Sep 2026. Everlaw states ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, GDPR, CCPA, GovRAMP, and Cyber Essentials Plus on its trust centre as of 29 Sep 2026. Everlaw is listed in the EU-US Data Privacy Framework registry with active EU-US, Swiss-US, and UK Extension certifications issued 8 May 2024 and expiring 1 Apr 2027, as of 17 Sep 2026.
- Has a SOC 2 report and public SOC 3 report for the period ending 28 Feb 2026 (issued 3 Apr 2026), as of 29 Sep 2026
- Listed in the FedRAMP registry as FedRAMP Authorized since 17 Jul 2020 (auditor Kratos), as of 28 Sep 2026
- States ISO/IEC 27001:2022, 27017:2015, and 27018:2019, plus GDPR, CCPA, GovRAMP, and Cyber Essentials Plus, on its trust centre as of 29 Sep 2026; listed in the EU-US Data Privacy Framework registry, active, expires 1 Apr 2027, as of 17 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 29 Sep 2026; it is regenerated whenever a row changes.
Among legal tech vendors
4verified rows
Category median 1, across 44 indexed legal tech vendors. Everlaw has more verified rows than 95 percent of them.
ediscoverylegal ailegal case managementlitigation software
Compare with similar vendors
Pick your own comparisonCompliance grid
- SOC 2Verified
Evidenced by the public SOC 3 report for the same examination period
as of 2 Nov 20261 source - GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 30 Sep 20263 sources - FedRAMPVerified
FedRAMP Authorized
as of 1 Nov 202646 sources · Kratos - ISO/IEC 27001Vendor-stated
Vendor states ISO 27001:2022 on its trust centre
as of 30 Sep 20263 sources - SOC 3Verified
Public SOC 3 report on the vendor's trust centre
as of 2 Nov 20261 source - ISO/IEC 27017Vendor-stated
Vendor states ISO 27017:2015 on its trust centre
as of 30 Sep 20263 sources - ISO/IEC 27018Vendor-stated
Vendor states ISO 27018:2019 on its trust centre
as of 30 Sep 20263 sources - EU-US Data Privacy FrameworkVerified
Active: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 20261 source - CCPA / CPRAVendor-stated
Vendor states CCPA on its trust centre
as of 30 Sep 20263 sources - GovRAMPVendor-stated
Vendor states GovRAMP on its trust centre
as of 30 Sep 20263 sources - Cyber Essentials PlusVendor-stated
Vendor states Cyber Essentials Plus on its trust centre
as of 30 Sep 20263 sources
Legal artefacts
Subprocessors (5)
- AWAWSCloud provider · United States, United Kingdom, EU (Germany), Canada, and Australia
Google WorkspaceIdentity provider · United States EU (only for Customers on Everlaw’s UK or EU instances)
OpenAI, L.L.C.Engineering · United States EU (only for Customers on Everlaw’s UK or EU instances)
PineconeVector Database · United States
Zendesk - Everlaw HR SupportCustomer support · United States
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.
Change history
- 25 Sep 2026SOC 2 state changedState moved from Vendor-stated to Verified.
- 25 Sep 2026SOC 3 state changedState moved from Vendor-stated to Verified.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026GovRAMP evidence addedA GovRAMP row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
- 18 Sep 2026Subprocessor added: AWSAWS appeared on the subprocessor list.
Similar vendors with evidence
Related by product tags and the Legal tech category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Filevine
Legal tech
LOIS is Filevine's legal AI software for law firms and legal teams that works across every matter: reading, writing, and executing real
KLDiscovery Ontrack
Legal tech
KLDiscovery delivers AI-driven eDiscovery software and services supporting litigation, investigations, and regulatory matters for legal
Harvey
Legal tech
Legal AI tailored for leading law firms and corporate legal teams
CORTO
Legal tech
CORTO helps law firms work faster, smarter, and more confidently with AI built for legal
Evidence against regulations
All regulations for EverlawHow much of each regulation’s vendor requirements Everlaw’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read