Spellbook

AI contract drafting and review directly inside Microsoft Word

Harvey AI

AI assistant built for legal professionals

Spellbook

Moderate

15/25

Harvey AI

Strong

17/25

Score Breakdown

DimensionSpellbookHarvey AI

Data Residency

Where is your data stored and processed?

Spellbook: Data processed in US and Canada. Zero retention policy with OpenAI API prevents document storage for AI training. Limited EU data residency options may concern European law firms.

Harvey AI: US/EU hosting via Azure

3/5

Data processed in US and Canada. Zero retention policy with OpenAI API prevents document storage for AI training. Limited EU data residency options may concern European law firms.

3/5

US/EU hosting via Azure

Legal Jurisdiction

Which laws govern the company and your data?

Spellbook: Incorporated in Ontario, Canada. Canadian privacy law (PIPEDA) provides reasonable protections. Canadian jurisdiction is generally considered acceptable for legal professionals handling confidential client data.

Harvey AI: US Delaware corporation

3/5

Incorporated in Ontario, Canada. Canadian privacy law (PIPEDA) provides reasonable protections. Canadian jurisdiction is generally considered acceptable for legal professionals handling confidential client data.

2/5

US Delaware corporation

Data Retention & Training

Is your data used for model training?

Spellbook: Strong data minimisation posture with zero data retention policy through OpenAI's API. Documents are not stored beyond the session, reducing exposure of sensitive legal content.

Harvey AI: No training on client data; strict data isolation

4/5

Strong data minimisation posture with zero data retention policy through OpenAI's API. Documents are not stored beyond the session, reducing exposure of sensitive legal content.

4/5

No training on client data; strict data isolation

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Spellbook: Holds SOC 2 Type II certification. Certification portfolio is limited for a tool handling highly sensitive legal documents; ISO 27001 certification would strengthen the trust posture.

Harvey AI: SOC 2 Type II, ISO 27001

2/5

Holds SOC 2 Type II certification. Certification portfolio is limited for a tool handling highly sensitive legal documents; ISO 27001 certification would strengthen the trust posture.

4/5

SOC 2 Type II, ISO 27001

Regulatory Fit

Suitability for regulated industries and professional services

Spellbook: Good fit for North American law firms and corporate legal departments. Zero data retention aligns with attorney-client privilege requirements. Limited certifications may require additional due diligence for EU or highly regulated clients.

Harvey AI: SRA-suitable; used by Magic Circle and elite law firms

3/5

Good fit for North American law firms and corporate legal departments. Zero data retention aligns with attorney-client privilege requirements. Limited certifications may require additional due diligence for EU or highly regulated clients.

4/5

SRA-suitable; used by Magic Circle and elite law firms

Total Score

15/25

17/25

Best For

Spellbook

Best for regulated industries (SRA); privacy-conscious teams who need strong data retention controls.

Harvey AI

Best for privacy-conscious teams who need strong data retention controls.

Detailed Comparison

Harvey AI vs Spellbook: Trust & Compliance Comparison

Harvey AI (Harvey AI, Inc., US) scores 17/25 overall with a Silver (Strong) trust badge. AI assistant built for legal professionals. Spellbook (Rally Legal, CA) scores 15/25 with a Bronze (Moderate) trust badge. AI contract drafting and review directly inside Microsoft Word.

Dimension-by-Dimension Breakdown

#### Data Residency

Both score equally at 3/5.

●Harvey AI (3/5): US/EU hosting via Azure

●Spellbook (3/5): Data processed in US and Canada. Zero retention policy with OpenAI API prevents document storage for AI training. Limited EU data residency options may concern European law firms.

#### Legal Jurisdiction

Spellbook leads with 3/5 vs 2/5.

●Harvey AI (2/5): US Delaware corporation

●Spellbook (3/5): Incorporated in Ontario, Canada. Canadian privacy law (PIPEDA) provides reasonable protections. Canadian jurisdiction is generally considered acceptable for legal professionals handling confidential client data.

#### Data Retention & Training

Both score equally at 4/5.

●Harvey AI (4/5): No training on client data; strict data isolation

●Spellbook (4/5): Strong data minimisation posture with zero data retention policy through OpenAI's API. Documents are not stored beyond the session, reducing exposure of sensitive legal content.

#### Certifications

Harvey AI leads with 4/5 vs 2/5.

●Harvey AI (4/5): SOC 2 Type II, ISO 27001

●Spellbook (2/5): Holds SOC 2 Type II certification. Certification portfolio is limited for a tool handling highly sensitive legal documents; ISO 27001 certification would strengthen the trust posture.

#### Regulatory Fit

Harvey AI leads with 4/5 vs 3/5.

●Harvey AI (4/5): SRA-suitable; used by Magic Circle and elite law firms

●Spellbook (3/5): Good fit for North American law firms and corporate legal departments. Zero data retention aligns with attorney-client privilege requirements. Limited certifications may require additional due diligence for EU or highly regulated clients.

Certifications at a Glance

Certification	Harvey AI	Spellbook
ISO 27001	Yes	No
SOC 2 Type II	Yes	Yes

Overall Verdict

Harvey AI has a clear trust advantage, scoring 17/25 compared to Spellbook's 15/25. Harvey AI particularly excels in certifications, regulatory fit.

Frequently Asked Questions

Which is better for EU compliance, Spellbook or Harvey AI?

Spellbook has a TrustKit score of 15/25 while Harvey AI scores 17/25. Harvey AI currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Spellbook and Harvey AI compare on data residency?

Spellbook scores 3/5 for data residency (Data processed in US and Canada. Zero retention policy with OpenAI API prevents document storage for AI training. Limited EU data residency options may concern European law firms.), while Harvey AI scores 3/5 (US/EU hosting via Azure).

Are Spellbook and Harvey AI GDPR compliant?

Both tools are assessed across five compliance dimensions. Spellbook has a regulatory fit score of 3/5 and Harvey AI scores 4/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool