Harvey
Harvey AI · Uncategorised · US · www.harvey.ai
services/harvey.yamlVendor data-handling terms
Whether customer matter content is excluded from training is set by the customer agreement, which is not published.
“Harvey processes Customer Data and Content received through the Services as a Data Processor so any queries related to this data should be directed to our Customers who are the Data Controllers. / We use publicly available information (for example, judgments, decisions, public filings, etc.,) to develop, train, and improve our AI platform (“ Publicly Available Information ”).”
The policy covers website and account data; retention of matter content is contractual.
“Harvey is headquartered in the United States.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.harvey.ai | api | observed |
| harvey.ai | app | observed |
Assessment
Reasoning: A legal AI platform for law firms and in-house teams, sold under negotiated agreements. The public policy states the processor role and that public legal data trains the platform; everything about matter content is in the contract. Unrated outside an agreement.
Flags: Customer content terms not published · US headquarters · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Processor and training terms verified against the Harvey privacy policy; customer terms contractual.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.