Legora
Security and trust center evidence
The agentic operating system for legal work
Summary
Legora has 5 vendor-stated rows in the CertReports index, last verified 30 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Legora states on its trust centre that it has a SOC 2 Type II report, as of 18 Sep 2026. Legora states on its trust centre that it displays a HIPAA badge, though the badge is described as a claim with BAA availability not yet captured, as of 18 Sep 2026. Legora states on its trust centre that it addresses GDPR, as of 18 Sep 2026. Legora states on its trust centre that it holds ISO/IEC 27001:2022, as of 18 Sep 2026. Legora states on its trust centre that it holds ISO/IEC 42001:2023, as of 18 Sep 2026.
- SOC 2 Type II: vendor-stated on its trust centre only, as of 18 Sep 2026; no independent audit report evidence found.
- HIPAA: badge displayed on trust centre is a vendor claim; BAA availability not captured, as of 18 Sep 2026.
- ISO/IEC 27001:2022 and ISO/IEC 42001:2023: both vendor-stated on trust centre, as of 18 Sep 2026.
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among ai tools vendors
0verified rows
Category median 0, across 96 indexed ai tools vendors. Legora has no registry-verified row yet, like 73 percent of them; its evidence is vendor-stated or reported.
contract reviewdocument draftinglegal ailegal research
Compare with similar vendors
Pick your own comparisonCompliance grid
HIPAAVendor-statedVendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 30 Sep 20265 sources
SOC 2Vendor-statedVendor states SOC 2 Type II on its trust centre
as of 30 Sep 20265 sources
GDPRVendor-statedVendor states GDPR on its trust centre
as of 30 Sep 20265 sources
ISO/IEC 27001Vendor-statedVendor states ISO/IEC 27001:2022 on its trust centre
as of 30 Sep 20265 sources
ISO/IEC 42001Vendor-statedVendor states ISO/IEC 42001:2023 on its trust centre
as of 30 Sep 20265 sources
No public evidence yet for FedRAMP, PCI DSS, CSA STAR, Cyber Essentials, ISO 27701. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- annual
Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.
Change history
- 18 Sep 2026First indexed by CertReports5 evidence rows across 5 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the AI tools category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Draftwise
AI tools
Contract and negotiation AI built for lawyers
CORTO
Legal tech
CORTO helps law firms work faster, smarter, and more confidently with AI built for legal
Retell AI
AI tools
Supercharge Your Contact Center Operations with AI Phone Agents
Abnormal AI
AI tools
Abnormal AI is the leading AI-native human behavior security platform, leveraging machine learning to stop sophisticated inbound attacks
Evidence against regulations
All regulations for LegoraHow much of each regulation’s vendor requirements Legora’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read