# Legora

Legora declares [9 subprocessors](https://thirdpartyindex.com/vendors/legora#subprocessors) in [its subprocessor list](https://legora.com/legal/eu-pre-approved-sub-processors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/227800)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). No published changes since we first read it on 2026-09-28.

Legora (legora.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/legora
- Documents last verified: 2026-11-12
- Transparency rating: 87/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 0/8 (partial); Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 7 tracked vendors directly, 57 within two hops, 240 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Legora, Third Party Index, https://thirdpartyindex.com/vendors/legora (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://security.legora.com/ | 2026-11-12 | 2026-11-06 |
| Subprocessor list | https://legora.com/legal/eu-pre-approved-sub-processors | 2026-11-11 | 2026-11-06 |
| Data processing addendum | https://legora.com/legal/eu-data-processing-agreement | 2026-11-11 | 2026-11-08 |
| Privacy policy | https://legora.com/legal/privacy-policy | 2026-11-11 | 2026-11-10 |
| Terms | https://legora.com/legal/eu-general-terms-and-conditions | 2026-11-11 | 2026-11-06 |
| Security page | https://legora.com/security | 2026-11-11 | 2026-11-10 |
| security.txt | https://legora.com/.well-known/security.txt | 2026-11-11 | 2026-09-23 |
| Status page | https://status.legora.com/ | 2026-11-11 | 2026-11-10 |

## Subprocessors (9)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [AWS](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Hosting; Hosting, infrastructure and AI models; Infrastructure and AI models | — | 2026-09-29 |
| [DeepL (optional)](https://thirdpartyindex.com/vendors/deepl.md) | Translation | — | 2026-09-29 |
| [Exa Labs](https://thirdpartyindex.com/vendors/exa-labs.md) | Web Search | — | 2026-09-29 |
| [Google](https://thirdpartyindex.com/vendors/google-cloud.md) | Hosting, infrastructure and provision of AI models | — | 2026-09-29 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Customer support platform and service | — | 2026-09-29 |
| Linkup Labs | Web Search; Web search | — | 2026-09-29 |
| [Microsoft](https://thirdpartyindex.com/vendors/microsoft.md) | Hosting; Hosting, infrastructure and AI models; Infrastructure and AI models | — | 2026-09-29 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Provision of AI models | — | 2026-09-29 |
| turbopuffer SaaS | Hosting, infrastructure | — | 2026-09-29 |

Read from ([evidence](https://thirdpartyindex.com/evidence/12674)). CSV: https://thirdpartyindex.com/vendors/legora/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001, ISO/IEC 42001, FedRAMP ([evidence](https://thirdpartyindex.com/evidence/6389))
- Claimed: HIPAA, GDPR ([evidence](https://thirdpartyindex.com/evidence/6389))

## Web Technologies

Legora's homepage made 159 requests to 15 domains, and 7 services controlled by another company. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

7 third parties by category: Advertising 3 (Google Cloud, Microsoft, Amazon); Analytics 1 (LinkedIn); Marketing automation 1 (Dreamdata); Cookie compliance 1 (Cookiebot); Page builders 1 (Framer). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (7)

- Framer: 121 requests to framerusercontent.com, framer.com, framerstatic.com; Framer Sites
- Google Cloud: 10 requests to google.com, googletagmanager.com, doubleclick.net; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too)
- Microsoft: 10 requests to clarity.ms, bing.com; Microsoft Advertising (its subprocessor list names it too)
- Amazon: 5 requests to amazon-adsystem.com; Amazon Advertising
- Cookiebot: 5 requests to cookiebot.com; Cookiebot 1
- Dreamdata: 4 requests to dreamdata.cloud, drda.io; Dreamdata
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag

### First party (1)

- Legora: 1 request to legora.com; Facebook Pixel, Framer Motion, Google Font API, HSTS, HTTP/3, Microsoft Clarity, Open Graph, Priority Hints, React

4 tracked companies loaded by the homepage are not in Legora's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 19 reported incidents (10 major or critical, 6 minor, 3 with no impact stated)
- Typical time to resolve: 1 h
- Status page last read: 2026-11-12
- 2026-11-10: Elevated error rate in Agent (major)
- 2026-11-10: Increase in latencies in the EU Region (minor)
- 2026-11-03: Global word add-in not loading (no impact stated)
- 2026-10-29: Legal Research partly unavailable (major)
- 2026-10-28: Increase in error rates and latencies in the EU Region (major)
- 2026-10-20: Some iManage files are temporarily unavailable in the sidebar (no impact stated)
- 2026-10-20: Increased errors in loading Legora owned Skills in EU (major)
- 2026-10-09: Increased error rate in EU region (major)

## Incidents reported by Legora's subprocessors

Incidents reported in the last 30 days on their own status pages by 2 vendors Legora lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-06: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Legora lists as a subprocessor, reported Elevated errors and latencies in the European hosting region. (major)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Legora lists as a subprocessor, reported Slow Fin Procedures (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported File Download errors (minor)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-14: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Legora lists as a subprocessor, reported Customer contact details showing up as "Redacted" in the Intercom Inbox (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Legora lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-11-05: Added certification: FedRAMP ([evidence](https://thirdpartyindex.com/evidence/221098))

Feed: https://thirdpartyindex.com/vendors/legora/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/legora

## Security contact

From its security.txt (https://legora.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/6376)):

- Contact: mailto:vulnerability-disclosure@legora.com
- Security jobs: https://legora.com/careers#open-roles
- Languages: en
- Valid until 2027-01-01

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
