For lawyers and patent attorneys
For lawyers and patent attorneys
AI for lawyers and law firms
AI for lawyers and law firms
GPT, Claude, Gemini and more in one workspace for your team. Your data is stored in Germany.
No credit card. Test without real client data; real client data only after the DPA and § 203 annex are signed.
Stored in Germany
No model training
Sub-processors named
ISO 27001 certified
Stored in Germany
Choose a model
Choose a model
GPT
Claude
Gemini
Mistral
Qwen · STACKIT
GPT
Claude
Gemini
Mistral
Qwen · STACKIT
Draft ready for your review
Draft ready for your review
Developed in Munich. Used by leading Patent and Legal Law firms.
Comparison
The tool is already
in the building
Ask around your firm whether anyone has pasted clauses into a chatbot on a private account. If so, the firm already uses AI, but without a contract with the provider.
Comparison
The tool is already
in the building
Ask around your firm whether anyone has pasted clauses into a chatbot on a private account. If so, the firm already uses AI, but without a contract with the provider.
Without AI
Consumer AI, private account
DeepMask
Contract partner
Sources: OpenAI, Google, Anthropic (terms of use); DPA
Not applicable
Whoever owns the account
The firm; DPA via the Trust Center
Confidentiality under § 203 StGB
Sources: as above; annex to the DPA
Within the firm
No agreement with the firm
Undertaking with instruction, annexed to the DPA
Training on inputs
Sources: OpenAI, Google, Anthropic (data controls); DPA
Not applicable
Depends on provider and account setting
Excluded by contract
Overview for the firm
Source: Pricing
Not applicable
None, the accounts are private
Usage overview by member and model (Pro and above)
Without AI
Consumer AI, private account
DeepMask
Contract partner
Whoever owns the account
The firm; DPA via the Trust Center
Sources: OpenAI, Google, Anthropic (terms of use); DPA
Confidentiality under § 203 StGB
No agreement with the firm
Undertaking with instruction, annexed to the DPA
Sources: as above; annex to the DPA
Training on inputs
Depends on provider and account setting
Excluded by contract
Sources: OpenAI, Google, Anthropic (data controls); DPA
Overview for the firm
None, the accounts are private
Usage overview by member and model (Pro and above)
Source: Pricing
Everyday work
Three jobs in a law firm
that come up every week
Everyday work
Three jobs in a law firm
that come up every week
Drafting briefs
A first draft from your notes and documents, in the model you choose.
What changes:
You start from a draft and edit it.
Drafting briefs
A first draft from your notes and documents, in the model you choose.
What changes:
You start from a draft and edit it.
Drafting briefs
A first draft from your notes and documents, in the model you choose.
What changes:
You start from a draft and edit it.
Reviewing contracts and files
Ask questions of long documents, in a separate project room for each matter.
What changes:
You read the passages that matter first.
Reviewing contracts and files
Ask questions of long documents, in a separate project room for each matter.
What changes:
You read the passages that matter first.
Reviewing contracts and files
Ask questions of long documents, in a separate project room for each matter.
What changes:
You read the passages that matter first.
Client correspondence
Letters and status updates prepared in German or English.
What changes:
Routine letters go out sooner, from a system you can document.
Client correspondence
Letters and status updates prepared in German or English.
What changes:
Routine letters go out sooner, from a system you can document.
Client correspondence
Letters and status updates prepared in German or English.
What changes:
Routine letters go out sooner, from a system you can document.
The review stays with you
Results are drafts; the legal review stays with you. Whether and to what extent you enter client secrets is your decision.
The review stays with you
Results are drafts; the legal review stays with you. Whether and to what extent you enter client secrets is your decision.
From a patent law firm
“We can build tailored projects for each type of task and choose from multiple AI models, selecting the one best suited for the job at hand.”
Maximilian J. Weiss
Partner, SKM-IP (patent attorneys)
From a patent law firm
“We can build tailored projects for each type of task and choose from multiple AI models, selecting the one best suited for the job at hand.”
Maximilian J. Weiss
Partner, SKM-IP (patent attorneys)
Documents
What you can check
before you sign
Documents
What you can check
before you sign
Stored in Germany
Primarily on STACKIT (Schwarz Group). Encrypted with TLS 1.3 in transit and AES-256 at rest.
No model training
Your data never trains AI models. Contractually guaranteed.
Two levels
Level 1: Qwen on STACKIT, with no US parent company. Level 2: GPT, Claude and Gemini in EU regions of their platforms.
Sub-processors
All named publicly, with task and location. Changes are announced 30 days ahead.
Sub-processor list
§ 203 annex to the DPA
Confidentiality undertaking with instruction under § 203 StGB, annexed to the DPA, currently in the version for lawyers. Concluded in the Trust Center.
Text of the annex
ISO/IEC 27001
Certified to ISO/IEC 27001:2022, penetration test passed.
Stored in Germany
Primarily on STACKIT (Schwarz Group). Encrypted with TLS 1.3 in transit and AES-256 at rest.
No model training
Your data never trains AI models. Contractually guaranteed.
Two levels
Level 1: Qwen on STACKIT, with no US parent company. Level 2: GPT, Claude and Gemini in EU regions of their platforms.
Sub-processors
All named publicly, with task and location. Changes are announced 30 days ahead.
Sub-processor list
§ 203 annex to the DPA
Confidentiality undertaking with instruction under § 203 StGB, annexed to the DPA, currently in the version for lawyers. Concluded in the Trust Center.
Text of the annex
ISO/IEC 27001
Certified to ISO/IEC 27001:2022, penetration test passed.
The legal frame
What § 203 StGB, § 43e BRAO and § 39c PAO say
Since 2017, § 203 Abs. 3 S. 2 StGB allows professionals bound by confidentiality to involve service providers where this is necessary for using their services. The conditions are in § 43e BRAO and, for patent attorneys, § 39c PAO:
The legal frame
What § 203 StGB, § 43e BRAO and § 39c PAO say
Since 2017, § 203 Abs. 3 S. 2 StGB allows professionals bound by confidentiality to involve service providers where this is necessary for using their services. The conditions are in § 43e BRAO and, for patent attorneys, § 39c PAO:
Abs. 2
Careful selection of the provider. Our sub-processors, TOMs and ISO documents are public for that.
Abs. 3
Contract in text form: confidentiality with instruction on the criminal consequences, access only as needed, rules for further persons. You assess whether our annex to the DPA covers this.
Abs. 4 and 5
Services abroad only where secrecy protection is comparable; services for a single matter only with the client's consent. You assess both.
General information, not legal advice. Source: gesetze-im-internet.de, as of 22.09.2026.
Abs. 2
Careful selection of the provider. Our sub-processors, TOMs and ISO documents are public for that.
Abs. 3
Contract in text form: confidentiality with instruction on the criminal consequences, access only as needed, rules for further persons. You assess whether our annex to the DPA covers this.
Abs. 4 and 5
Services abroad only where secrecy protection is comparable; services for a single matter only with the client's consent. You assess both.
General information, not legal advice. Source: gesetze-im-internet.de, as of 22.09.2026.
Where is our client data stored and processed?
Data is stored in Germany, primarily on STACKIT. Level 1 runs on STACKIT and our own infrastructure, Level 2 with GPT, Claude and Gemini in EU regions of their platforms.
Some models are only offered globally; if you expressly select one, inputs may be processed outside the EU.
Web search runs through Perplexity AI, Inc. (USA), only when you switch it on in the chat, and receives only the search query.
What do we sign on confidentiality, and when?
The DPA under Art. 28 GDPR, with our confidentiality undertaking and instruction under § 203 StGB as an annex. You generate it in the Trust Center, sign it, and we countersign. Do this before the first real client file goes in.
Do we need our clients' consent?
§ 43e Abs. 5 BRAO requires it where a service directly serves a single matter; § 39c PAO has a matching rule for patent attorneys. Whether that applies to your use is your call.
Providers, storage locations and sub-processors are in the Trust Center.
Can we decide which models our team uses?
Yes. Administrators decide which models are available in the workspace, for example Level 1 only.
We or our sub-processors run open models of Chinese origin, such as Qwen, Kimi and DeepSeek, on infrastructure in Germany or the EU.
How long is deleted data kept?
Deleted data leaves active systems immediately and backups within 30 days.
Where is our client data stored and processed?
Data is stored in Germany, primarily on STACKIT. Level 1 runs on STACKIT and our own infrastructure, Level 2 with GPT, Claude and Gemini in EU regions of their platforms.
Some models are only offered globally; if you expressly select one, inputs may be processed outside the EU.
Web search runs through Perplexity AI, Inc. (USA), only when you switch it on in the chat, and receives only the search query.
What do we sign on confidentiality, and when?
The DPA under Art. 28 GDPR, with our confidentiality undertaking and instruction under § 203 StGB as an annex. You generate it in the Trust Center, sign it, and we countersign. Do this before the first real client file goes in.
Do we need our clients' consent?
§ 43e Abs. 5 BRAO requires it where a service directly serves a single matter; § 39c PAO has a matching rule for patent attorneys. Whether that applies to your use is your call.
Providers, storage locations and sub-processors are in the Trust Center.
Can we decide which models our team uses?
Yes. Administrators decide which models are available in the workspace, for example Level 1 only.
We or our sub-processors run open models of Chinese origin, such as Qwen, Kimi and DeepSeek, on infrastructure in Germany or the EU.
How long is deleted data kept?
Deleted data leaves active systems immediately and backups within 30 days.
Two ways
to start
Seven days free with the core features, no credit card. Or talk to us for 30 minutes first, with your data protection officer if you like.
Real client data only after the DPA and § 203 annex are signed.
Real client data only after the DPA and § 203 annex are signed.
Two ways
to start
Seven days free with the core features, no credit card. Or talk to us for 30 minutes first, with your data protection officer if you like.
Real client data only after the DPA and § 203 annex are signed.