Lua Legal
High riskLua Legal provides an AI-powered, cloud-based platform for law firms to automatically capture, transcribe, and summarize meetings, generate follow-ups, and sync notes into legal workflows — all with secure, compliant data handling.
High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.
Grade: D
Weighted score breakdown
Contribution shows approximate points each dimension adds to the overall score.
Signal distribution by dimension
Shows where risk evidence is concentrated across the audit dimensions.
Top risks
Positive indicators
Company details
- Website
- lualegal.ai
- Legal name
- Lua Legal Corporation
- Observation period
- August 23, 2025 - November 23, 2025
- Report types
- SOC 2 Type 2
- Infrastructure
- Supabase
Assessment notes
Dimension evidence
Detailed evidence behind each dimension score and its underlying signals.
Signals (3)
- FlagAudit database matchCompany found in leaked database of template-based audit reports
- FlagType 2 report flaggedType 2 reports require observation period testing - template usage is more concerning here
- FlagAuditor credibilityAudit performed by firm flagged for systematic template reuse
Signals (2)
- InfoSingle frameworkSOC 2 report found, from a flagged source
- InfoReport recencyReports dated within Jan-Dec 2025 observation window
Signals (3)
- GoodWeb presenceCompany maintains a public website
- GoodTransport encryptionWebsite configured with HTTPS
- InfoCloud infrastructureHosted on Supabase
Signals (3)
- GoodLegal entity identifiedRegistered as "Lua Legal Corporation"
- InfoService description availableSystem description found in audit reports
- FlagException reportingZero exceptions reported across all audit periods - statistically improbable, suggests inadequate testing
Related vendor checks
More vendors in this directory to help you compare trust signals.
