For law firms — buying
Everything your firm needs to decide — without a call
Who does what, what is included, every charge and how it is counted, where your data goes, how you start, how you leave — and the limits. Every amount and every status here is read from the system that charges or runs it.
Who does what
The firm's administrator
- Subscribe by card from the firm console and cancel there; a cancelled plan runs to the end of the paid month. How it works — Subscribe by card from the firm console and cancel there; a cancelled plan runs to the end of the paid month.
- Set what the platform enforces for the firm — the engines each surface may use, and a two-attorney release threshold for a large outflow — and see what no setting moves. How it works — Set what the platform enforces for the firm — the engines each surface may use, and a two-attorney release threshold for a large outflow — and see what no setting moves.
- Choose how many years after a matter closes its records are kept (1 to 25, or none); nothing is deleted by itself, and every deletion leaves a receipt. How it works — Choose how many years after a matter closes its records are kept (1 to 25, or none); nothing is deleted by itself, and every deletion leaves a receipt.
- Issue read keys scoped to exactly what each may see, and register signed webhooks. How it works — Issue read keys scoped to exactly what each may see, and register signed webhooks.
The responsible attorney
- Approve each consequential act from a receipt card — the fingerprint of exactly what you reviewed — confirmed once, by a single-use approval bound to it. How it works — Approve each consequential act from a receipt card — the fingerprint of exactly what you reviewed — confirmed once, by a single-use approval bound to it.
- Decide each conflict finding; an undecided blocking finding holds the engagement until it is cleared. How it works — Decide each conflict finding; an undecided blocking finding holds the engagement until it is cleared.
- Review, redline, cite-check and run the Opposing Counsel Pass™ — work product for your own judgment, with what each engine received kept on the record. How it works — Review, redline, cite-check and run the Opposing Counsel Pass™ — work product for your own judgment, with what each engine received kept on the record.
- See how every computed date was reached, and confirm it before it reaches a calendar. How it works — See how every computed date was reached, and confirm it before it reaches a calendar.
Paralegals and staff
- Screen every name against the firm's own records at every door — clients, parties, fiduciaries and the declined register. How it works — Screen every name against the firm's own records at every door — clients, parties, fiduciaries and the declined register.
- Ask clients for documents — what each item is and why — and see where every upload stands. How it works — Ask clients for documents — what each item is and why — and see where every upload stands.
- Keep every version of every source, read its text beside the original, and find a passage in it. How it works — Keep every version of every source, read its text beside the original, and find a passage in it.
- Work issues, drafts and decisions in one place, each engine's own page a click away. How it works — Work issues, drafts and decisions in one place, each engine's own page a click away.
Your clients
- A portal under your firm's name: they answer the decisions you put to them and read where things stand in your own words. How it works — A portal under your firm's name: they answer the decisions you put to them and read where things stand in your own words.
- A shared link gives exactly the version you shared — never a later one. How it works — A shared link gives exactly the version you shared — never a later one.
- They can ask your firm to delete their records, and read your answer on the record. How it works — They can ask your firm to delete their records, and read your answer on the record.
Security and IT review
- Teams and ethical walls enforced by the database: a team-only matter opens only to its team. How it works — Teams and ethical walls enforced by the database: a team-only matter opens only to its team.
- A second factor on every staff account, and a published list of every page and door that requires it. How it works — A second factor on every staff account, and a published list of every page and door that requires it.
- A chained, anchored record, verification manifests and a file hand-over that can be checked with the network off. How it works — A chained, anchored record, verification manifests and a file hand-over that can be checked with the network off.
- Anyone can check a sealed document or receipt at /verify — or offline, with the published verifier. How it works — Anyone can check a sealed document or receipt at /verify — or offline, with the published verifier.
What is included
- 68 Shipped
- 5 Staged
- 10 Owner-gated
68 shipped operations
The full catalogue — each surface's limits, refusals and evidenceShow them all
- Trustee duties packet and the trustee portal (TrusteeClear module)
- Firm workstation review · OCP · redline · cite-check (Opus 5)
- Grounded lane (litigation-class draft/review over SHA-256-pinned public filings)
- Case-citation existence check (CourtListener)
- Word add-in (deterministic in-document check)
- Outlook add-in (Beneficiary/Creditor Shield)
- Calendar — ICS deadline feed
- Square checkout (consumer offers, per-matter activations)
- Square firm subscriptions (Practice · Firm · Group)
- Platform API v1 — scoped keys, honest pages and proposals (/api/v1)
- Matter Brain (firm matter Q&A over the record)
- Firm drafting engines (caged drafter, draft support, letter studio)
- Document organization (classification, extraction, vault intelligence, trust analysis)
- Observations and statement import
- Assistant, Deep Research and chat (firm tenants)
- Monday briefing, dispute-readiness narrative, statute-change sweep, hearing prep
- Reminder cron (email)
- Statute cards (general information)
- Revision-bound approvals and approved delivery
- The chained record, verification manifests, the decision packet and the file hand-over
- Public verification: /verify, the offline verifier and the trust root
- Sources: every document version, its text beside its original, and find-in-source
- Source-change impact: what each piece of work rested on, and what to review when that changes
- The propositions ledger: what the record says, and what says otherwise
- Coverage manifests on every workspace run
- Matter workbench: source, issue, draft and decision in one place
- Revision memory: every redline decision kept against its exact base, and a tracked Word file that matches the final
- Overview & chat and Clients & matters: the matter in focus, its record and the assistant beside it
- Saved conversations: every assistant conversation, reopened where it left off
- The Matter command center: the client record, team and next steps of one matter in one place
- The team's tasks on a matter: an owner, a target date and a status, checked off when done
- Review & decisions: each finding of a matter's document review decided by the firm, the decision record kept, then finalized and exported
- Drafting desk: a plan's documents edited as working versions, with comments, version history and comparison, then exported
- Conflict screen of the firm's own records at every door
- Engagement holds: an attorney decides each finding, then clears the hold
- The firm's own conflict registers: declined parties, prior affiliations, joint representation
- The firm's consult door: a request screened before anyone opens it
- The client intake: six steps a firm invites its client to, sent as a screened consult request
- Matter teams and ethical walls, enforced in the database
- Disclosure classes and shares: who outside the firm may receive each document
- Legal holds: a matter's records kept in every channel, and deletion that reaches every stored file
- A matter's lifecycle: closed and archived with their reasons on the record, and an archived matter read-only everywhere
- Retention: the firm's policy, what it makes eligible, and the deletion of an eligible matter with its receipt
- Deletion requests: a firm's client asks the firm to delete their records, and the firm answers on the record
- Referrals: a client sends their matter to a Florida firm with recorded consent and a fresh sign-in
- Firm control: what the firm's rules enforce today, the engines it permits per surface, its house voice, and what no setting moves
- Document requests: the firm asks, the client answers one of three honest ways, and every upload says where it stands
- Decisions answered once, and where things stand in the attorney's own words
- Pinned shares: a share's link gives exactly the version that was shared
- Two clients on one matter stay two clients
- Every computed date shows how it was reached
- Three-way reconciliation: the bank's figure, the ledger's cash, and principal plus income
- Two attorneys for a large outflow: the firm's release threshold
- Statements frozen when executed: an accounting, or a beneficiary's distribution statement, kept as its exact bytes and hash
- The reconciled trust ledger for accounting software: QuickBooks Online, Xero and the fiduciary ledger, from an executed accounting
- Execution evidence: each instrument's signing pinned to the approved version, its steps as facts, and a record that completes only on its evidence
- Funding as evidence: each asset's way into the plan, its standing read from evidence with its basis — never from a box
- Firm playbook: the firm's own clause text, approved version by version — never over the client's instructions
- Estate-plan brief: the client's instructions, the differences with the firm's playbook and the extracted facts, and the package read against itself
- Estate-plan review and the Opposing Counsel Pass, run explicitly on a version's documents
- Administration handoff: from the approved plan (or the vault file) to the trust administration or the probate — the event, the facts confirmed, authority verified, no access granted
- Signed webhooks: nine events as they happen — ids and states only, signed, at least once, never about a matter with a wall
- The dispute preparation pack: the chronology, the issues with their sources, the requests to draft and the approved filing set
- The deprovisioning door: ending a member's access, everywhere it reaches, with the reason on the record
- Redline, Opposing Counsel Pass™ and Cite Check: the firm's runs of each, and a new one
- Tasks & calendar: every task and date across the firm's matters
- TrusteeClear™: the firm's trust administrations, each with its duties, ledger, statements and beneficiaries
- Documents & templates, Team & permissions, Billing & integrations: what the firm keeps, governs and connects
Not available today
- ChatGPT 5.6 Sol tier and the dual consensus mode Owner-gatedWaiting on the platform owner: the governed OpenAI key (owner gate).
- Fable 5 tier (per-document surcharge) Owner-gatedWaiting on the platform owner: FABLE_DRAFT_SURCHARGE_CENTS (owner prices it).
- Citator treatment (Westlaw KeyCite · Lexis Shepard's) StagedBuilt and dormant until a partner provisions credentials: partner credentials from Thomson Reuters / LexisNexis.
- Calendar — OAuth push (Google / Microsoft) StagedBuilt and dormant until a firm turns it on: the firm's own OAuth credentials.
- Clio — matter link and packet export StagedBuilt and dormant until a firm turns it on: the firm's own Clio credentials.
- DocuSign / e-signature (scoped) StagedBuilt and dormant until a firm turns it on: DOCUSIGN_BASE_URL · ACCOUNT_ID · ACCESS_TOKEN.
- Plaid / bank sync StagedBuilt and dormant until a firm turns it on: the firm's own Plaid credentials.
- Stripe (alternate rail) Owner-gatedWaiting on the platform owner: STRIPE_SECRET_KEY · WEBHOOK_SECRET (+ tier prices).
- Transactional email (Resend) and the delivery ledger Owner-gatedWaiting on the platform owner: RESEND_API_KEY (present) + RESEND_WEBHOOK_SECRET (absent — the ledger is blind).
- Turnstile on public forms Owner-gatedWaiting on the platform owner: NEXT_PUBLIC_TURNSTILE_SITE_KEY (absent); the firm consult door also verifies server-side with TURNSTILE_SECRET_KEY.
- Upload malware scanner (quarantine pipeline) Owner-gatedWaiting on the platform owner: SCANNER_* (absent); structural checks always run.
- External monitor bearer (HEALTH_TOKEN) Owner-gatedWaiting on the platform owner: HEALTH_TOKEN (absent).
- The governed MCP server: the firm API's reads as tools for an AI assistant, and one tool that files a proposal Owner-gatedWaiting on the platform owner: PLATFORM_MCP_ENABLED — until the platform sets it, /mcp answers 404 to every request.
- Single sign-on for a firm: its own identity provider, its own domain, just-in-time membership Owner-gatedWaiting on the platform owner: SAML 2.0 turned on for the Supabase project, then SSO_SAML_ENABLED=1 on the deployment, and each firm's provider registered with `supabase sso add` (owner steps, docs/auth/SSO-OWNER-GUIDE.md); Supabase Pro includes 50 single sign-on users a month, then $0.015 each.
- The EstateDraftFL app for iPhone and Android: sign in, matters, send a document, notifications, remote revocation Owner-gatedWaiting on the platform owner: the owner's Expo project, the sign-in allow-list entry estatedraftfl://auth/callback, Apple (and, for Android notifications, Firebase) credentials through Expo's build service, the store submissions, then MOBILE_APP_PUBLISHED=1 on the deployment (mobile/README.md).
Status is evaluated against this deployment's configuration by the capability-status service at build time; the catalogue's facts were last reviewed on the date shown.
What it costs
Membership — monthly, by matter volume
$250 a month
Up to 10 matters a year. Every feature — Trust administration, both drafting lanes and the workstation AI — and unlimited users.
By card, monthly, through Square. Subscribe and cancel in the firm console; a cancelled plan runs to the end of the paid month.
$583 a month
Up to 25 matters a year. Every feature — Trust administration, both drafting lanes and the workstation AI — and unlimited users.
By card, monthly, through Square. Subscribe and cancel in the firm console; a cancelled plan runs to the end of the paid month.
$1,083 a month
Up to 50 matters a year. Every feature — Trust administration, both drafting lanes and the workstation AI — and unlimited users.
By card, monthly, through Square. Subscribe and cancel in the firm console; a cancelled plan runs to the end of the paid month.
Quoted
A custom tier.
As agreed.
Once
$350, once
Your branding, letterhead, support line and reviewing-attorney workflow, configured with you.
By card, in the firm console.
No activation fee
One per firm; it takes no place in a membership's allowance.
Recorded as a waiver in your billing activity.
Per matter — beyond a membership's allowance, or without one
$299
All-in for that matter.
By card, on the matter — or invoiced to the firm.
$149
That matter.
By card, on the matter — or invoiced to the firm.
$299
All-in for that matter; its paid work opens once the payment is recorded.
Invoiced to the firm.
AI processing
Up to $200 a month
Per firm workspace, per calendar month (UTC). Unused allowance does not roll over, and nothing is ever billed as overage.
Included.
Not priced yet
A per-document surcharge; the option stays off until its price is set.
—
Never charged
Never
Every attorney and paralegal, without a per-user charge.
—
Never
Software licensing, usage and setup only.
—
How the allowance and the AI processing are counted
- A matter takes one place in the allowance when the firm opens it — Trust administration, estate-plan and probate matters alike.
- The allowance year begins with the first matter it covers and starts again 365 days later; places left unused do not carry over.
- Without a membership, Trust administration matters are pay as you go: the first is free and each later one is invoiced at the per-matter amount; estate-plan and probate matters are bought on the matter.
- AI processing: at $200 in a calendar month, the workspace's AI requests are refused with a plain message until the next month begins — nothing is billed as overage, and everything that does not use AI keeps working.
- Every charge is billed to the firm. The platform never invoices or charges your client, an estate or a trust.
Two worked examples
The firm absorbs it in a flat fee
A two-attorney practice on the Practice membership opens 12 Trust administration matters in its first year and charges each client a flat fee.
| Practice membership, 12 months (12 × $250) | $3,000 |
|---|---|
| Onboarding and setup, once | $350 |
| Matter 1 — the firm's first Trust administration matter | $0 |
| Matters 2–11 — the year's 10 places in the allowance | $0 |
| Matter 12 — beyond the allowance, invoiced | $299 |
| Year-one total | $3,649 |
about $304 a matter, across 12 matters
How it reaches the client: It does not: the firm's flat fee covers it, and the platform's invoices go to the firm.
The firm passes it through on its own invoice
A solo attorney without a membership administers 4 Trust matters in a year and has each trust reimburse its own matter's platform charge.
| Onboarding and setup, once | $350 |
|---|---|
| Matter 1 — the firm's first Trust administration matter | $0 |
| Matters 2–4 — invoiced (3 × $299) | $897 |
| Year-one total | $1,247 |
about $312 a matter, across 4 matters
How it reaches the client: On its own invoice to each trust, the firm lists that matter's $299 as a cost. Whether a platform charge may be billed to a client as a cost is the firm's decision, under its engagement terms and the Florida Bar's rules. The platform bills the firm only.
Where your data goes
the platform cannot run without it
- Supabase
- Vercel
- Square
- Resend
- ImprovMX
- OpenTimestamps public calendars
- Blockstream Esplora · mempool.space
used for every tenant unless a firm turns it off
- Anthropic
- Free Law Project
reaches data only after a firm activates it with its own credentials
- Clio
- DocuSign
- Plaid
- Microsoft
the code exists; no credential is configured, so no data reaches it
- Postmark
- A private malware-scanning destination
- OpenAI
- Stripe
- Twilio
- Cloudflare Turnstile
- Thomson Reuters · LexisNexis
The full register — what each provider does, and what reaches it
Getting started
Readiness check
Readiness check
Readiness check
Readiness check
Readiness check
Readiness check
Readiness check
Readiness check
See it first
The sample matter
A fictional Florida matter from intake to the approved packet — and what happens when something changes after approval.
A sealed sample, checked offline
The published sample document and its verification manifest, checked in your browser with the network off.
The workspace, on sample data
The legal workspace's interactive preview — no engine runs.
Downloads
Security overview
Data Processing Addendum
Accessibility Conformance Report
Moving in
Support and leaving
Reaching us
Support access
Accessibility reports
Cancelling
Taking your records out
Deletion
Limits
- Florida only: the law corpus, the documents and the deadline rules are Florida's.
- Software, not a law firm. Your firm remains responsible for its professional qualifications and its review of client work; the platform does not verify licences.
- AI output is work product for an attorney's own judgment — never legal advice to a client. The included processing is “up to” a monthly amount, and a platform-wide monthly safety limit on model spend also applies: if it is reached, AI requests pause for every firm until the next month.
- A scanned page with no text layer is not read: no text recognition runs, and nothing on such a page can be cited.
- Signing is recorded for wet ink only; an electronic envelope never completes a signing record.
- The firm console and the documents are in English.
- Clients and matters are added one at a time.
- Manifests and hand-over bundles stay unsigned until the issuer key is configured; download links last one hour and stored bundles seven days.
Ready when you are
Create your workspace in a minute — nothing is charged at signup.