Legora

The aOS brings DMS integrations, document ingestion and content sources into the agent's context, along with third party legal services and MCP connectors. A NetDocuments MCP connection is announced in the newsroom. Work is delivered through Word and Outlook add ins and through the Portal that clients use.

SourceLegora, legora.com/product/aos and legora.com/newsroomread 2026-09-06

The agentic harness handles tool routing and control flow, and it assigns specialist sub agents to work in parallel on legal work with many steps, end to end. The Agent plans and executes, then reviews its work against the goal, looping back as needed before it delivers. Workflows let lawyers compose processes in natural language or a visual builder, chaining steps such as Tabular Review, research, translation and drafting.

SourceLegora, legora.com/product/aos, legora.com/product/agent and legora.com/product/workflowsread 2026-09-06

Firm playbooks, precedent libraries and clause banks are layered into every agent action, along with negotiated positions and full matter history. Firm wide search runs across the DMS and knowledge bases, and legal research is jurisdiction aware, grounded in real sources and cited in a structured way.

SourceLegora, legora.com/product/aosread 2026-09-06

The Agent builds a plan, shares it with the user and refines it as the work evolves. It then delivers work product into the project workspace ready for review and approval, and Legora states the user stays in control where judgment is required. Workflows carry role based permissions, and the harness enforces guardrails.

SourceLegora, legora.com/product/agent and legora.com/product/workflowsread 2026-09-06

Certifications include SOC 2 Type 2, ISO 27001 and ISO 42001, with a public trust center at security.legora.com. Customers get SSO on all common protocols (SAML 2.0 on request in the legal tier), set their own data retention and manage encryption keys through BYOK. Ethical walls isolate matters from one another, and no Legora engineer touches customer data without the customer's written approval.

SourceLegora, legora.com/security, legora.com/legal/security-measures and legora.com/product/aosread 2026-09-06

The aOS page documents full audit trails with complete visibility into every tool call, file access and agent action. The security page states that every AI output can be traced back to the source data and prompt that produced it, so the reasoning and sources can be reviewed. Data Governance tools show who accessed data and when, and logs are kept for at least twelve months.

SourceLegora, legora.com/product/aos and legora.com/securityread 2026-09-06

Memory management is listed among the agentic harness's functions, and the aOS picks up where the last round left off within a matter, which carries work across sessions. No memory layer with a stated scope or lifetime, or a surface for users to manage it, is documented. Skills are assets the customer writes, and matter history sits with the firm's knowledge.

SourceLegora, legora.com/product/aos and legora.com/product/agentread 2026-09-06

Through the enterprise security package, customers control where their data is stored and for how long, according to the security page, which also names tiered storage and technical teams based in the EU and the US. The legal tier documents Azure hosting replicated across locations and is published in an EU variant with its own list of sub processors approved in advance, which implies a second set of regions. No on premises or customer cloud option is documented.

SourceLegora, legora.com/security and legora.com/legal/security-measuresread 2026-09-06

The Workflows page documents a library where the firm's own workflows sit beside Legora's collection of prebuilt ones, each a complete working workflow a customer selects and runs. Seven are named: internal compliance review, supplier agreement analysis, timeline creation, court case analysis and translation, employment agreement review, lease red flag report and S-1 risk factors drafting.

SourceLegora, legora.com/product/workflowsread 2026-09-06

The Agent works proactively: it monitors the user's email, documents and projects and acts the moment something needs attention, and Monitors is a named product for watching sources. Users start work from the web app, the mobile app, the Portal or the Word and Outlook add ins. Schedules and webhooks are not documented.

SourceLegora, legora.com/product/agentread 2026-09-06

A Large Language Models layer sits beneath an agentic harness that handles model selection, according to the aOS page, and the June 2026 Agent Pro post says it uses the most powerful frontier models. So Legora routes across more than one model on its side, and no customer or admin selector is documented. The EU list of approved sub processors at legora.com/legal may name the providers.

SourceLegora, legora.com/product/aos and legora.com/blog/consumption-based-pricingread 2026-09-06

The legal tier states the platform is reached through the web app and desktop app or, if specifically agreed in the Order Form, through APIs offered by Legora. The newsroom announces Legora inside Google Cloud's Gemini Enterprise for Legal for approved mutual customers, an outside assistant calling the platform. The API exists only by contract with no public reference, and no SDK or MCP server exposes Legora.

SourceLegora, legora.com/legal/security-measures and legora.com/newsroomread 2026-09-06

The Workflows page tells customers to iterate based on their own testing and team feedback, and the Agent reviews its own output against the goal before delivering. Neither is a test harness, a set of test cases or a release gate for customers, and no evaluation dashboard is documented. Consumption dashboards on Agent Pro track spend, not quality.

SourceLegora, legora.com/product/workflows and legora.com/product/agentread 2026-09-06

Every tool the Agent uses on its own sits inside Legora, among them search, drafting, redlining and review, plus Tabular Review and Legal Research. Results land in Legora's own surfaces, such as the project workspace, the Editor, the mobile app and the Word and Outlook add ins. No browser, desktop or computer control appears on the Agent, aOS or Workflows pages.

SourceLegora, legora.com/product/agent and legora.com/product/aosread 2026-09-06