Security questions to ask before you shortlist AI time tracking
IT and security need rows they can answer before a shortlist or a purchase order hardens. This is that questionnaire: where capture runs, what leaves the device when drafting runs, who the subprocessors are, how pause and approval work, how entries reach Clio, and the exact SOC 2 status.
A blank row stays open. A brochure does not close it. Pair the filled rows with the procurement packet before a purchase order, the vendor diligence checklist for the commercial asks, and the control-failure playbook if a control breaks later.
LegalTime AI is built for privacy-conscious firms on Clio, about 10 to 30 attorneys, comfortable up to about 50 attorneys, with headcount up to about 100. Pricing is a quote. It is not a monitoring tool.
Six questions, and the LegalTime AI answer
| Question | LegalTime AI answer | Where to read it |
|---|---|---|
| Where does capture run by default? | Capture is local-first on the attorney device by default. | Security and passive time tracking |
| Does any activity leave the device for AI features? | When Create (draft generation) runs, relevant activity is sent for AI processing. | Security and subprocessors |
| Who processes AI workloads? | The live subprocessors list. Review it, and review it again when vendors change. | Subprocessors |
| Can attorneys pause, and is release gated by a person? | Pause works without IT. Drafts stay with the attorney. The attorney approves before anything is released to Clio. | FAQ and passive time tracking |
| Does the product sit beside Clio Manage? | It sits beside Clio. Matters stay in Clio. On a sampled release, confirm the matter path. Approved entries release into Clio Manage. | Clio integration |
| What is the SOC 2 status, exactly? | A SOC 2 Type II examination is in progress. LegalTime AI is not SOC 2 certified. Documentation is available under NDA if you need it. | Security |
Keep these open while you fill any row: security, subprocessors, FAQ, pricing, Clio integration, About, passive time tracking, and the product home.
Controls worth holding in the same review
| Control | A clear answer | Send it back if |
|---|---|---|
| Default capture | Activity or reconstruction is the default. Start-stop is optional. | Attorneys must babysit a timer to bill |
| Pause | Every attorney can pause and resume without IT | Pause is forgotten, or only IT can pause |
| Drafts | Drafts stay private until the attorney releases them | Partners can browse raw drafts by default |
| Release | A person approves before anything hits the matter | Time posts into Clio with no review |
| Practice system | Releases land in the Clio-class system you already pay for | The questionnaire pushes a replacement of that system |
| SOC 2 | Report type and status are stated | The answer is a logo |
| Price | A quote path, or published tiers | "Efficiency" math with no source |
| Monitoring | The product is not a surveillance tool | Partners get a raw-activity dashboard by default |
| What leaves the device | Capture is local-first by default, and what Create sends is documented on the security and subprocessors pages | Create is in use and those pages do not describe what is sent |
| Owners | IT, security, operations, and a partner are named | The questionnaire has no owner |
Name those owners before the shortlist hardens. Pricing is quote-only on pricing. Directory notes sometimes cite about $125 per seat per month. Get a firm quote for firmwide seats.
Unrelated "Legaltime" spellings in software directories can point at practice-management products sometimes listed near $24 a month. LegalTime AI is the timekeeping product at legaltime.ai. See About.
Same questions for the other names
| Product | What it does | What to confirm |
|---|---|---|
| LegalTime AI | Local-first capture, AI drafts that send relevant activity for processing, release into Clio after approval, SOC 2 Type II examination in progress | The six answers above, on the linked pages |
| Ajax | Automatic capture through screen and content processing. Vendor security page states SOC 2 Type II certified. | Clio depth and the capture model, on a demo |
| PointOne | Passive capture across email, documents, calls, and meetings. Custom pricing. | A Clio-only day |
| Laurel | Enterprise time intelligence | Whether a 10-to-30 attorney package exists |
| Billables AI | Workflow and API-style capture with attorney review. Published mid-market tiers. | Whether capture is live |
| Clio Manage AI | Suggestions from activity already inside Clio | Work Clio never sees. Many firms still add a capture layer beside Manage. |
| BigHand, Intapp, TimeSolv | Practice-system or enterprise time tools | Automatic capture and privacy, if the firm already runs those stacks |
| Daytimed, MagicTime, Memtime, WiseTime, Timing, MyCase, Smokeball | Light AI, activity timelines, or practice-system tools | Legal governance on the same six questions |
IT and security sign off when each of the six questions is answered or explicitly left open. That is the exit from this review.
Quote path: pricing. 15-minute demo.
Start a 30-day free trial · Book a 15-minute demo
Sources
Related
Frequently asked questions
What should IT ask before the shortlist hardens?
What does LegalTime AI send when drafting runs?
Will partners read this questionnaire as monitoring software?
Is LegalTime AI SOC 2 certified?
What does it cost while security review is open?
Is this the Legaltime practice-management product in software directories?
Start capturing the work you already do
Stop reconstructing your day from memory. Let capture run. Review in minutes. Release only what should bill.
Capture → Create → Connect. Not a monitoring tool.