Legal AI Agents — Sealed in
Intel TDX, Privileged-Safe.
Contract analyst, due diligence, legal research. EU-hosted. Even our operators cannot read your documents.
Three confidential AI agents, one sealed enclave family, native RGPD Article 28 DPA — built for law firms and in-house counsel that cannot send privileged work product to US clouds.
The problem
Privileged documents do not belong on US clouds.
Every contract a lawyer reviews, every M&A data room a deal team opens, every legal memo an associate drafts is potentially privileged work product. When that material is sent to a US-based AI provider, two distinct risks compound. First, the provider is a third party in the chain of custody. In the United States, several state bar opinions have flagged that disclosure of privileged content to a third-party processor without adequate safeguards may be analyzed as a waiver. Second, the provider is subject to FISA 702 and the CLOUD Act, which permit extraterritorial demands for data — and explicitly extend to data held outside the United States by US providers.
European bar associations are taking notice. The Conseil National des Barreaux (CNB) issued a position paper on generative AI in 2024 emphasizing the lawyer's duty to verify where client data is processed and to obtain attestable confidentiality guarantees. The Council of Bars and Law Societies of Europe (CCBE) reinforced this in its AI guidance. A US-controlled AI tool with default training, opaque retention and no hardware sealing struggles to meet that bar.
The three agents
One sealed enclave family. Three legal workflows.
Contract Review
Risk-flag any NDA, SaaS, M&A or employment contract against an IACCM playbook in under two minutes.
- IACCM clause checklists, jurisdiction detection
- CRITICAL / HIGH / MED / LOW risk grading
- Multi-language: EN, FR, DE, ES, IT
- Live tool ready at /contract
Due Diligence
Review entire M&A data rooms, flag liabilities, and produce a clean diligence memo for the deal team.
- Bulk ingest: PDF, DOCX, image-PDFs (OCR)
- Liability extraction + redline output
- Data Room index with issue tracker
- Output: structured memo + Excel matrix
Legal Research
Sovereign jurisprudence search across French and EU case law with citation guards against hallucination.
- EU and FR jurisprudence corpus
- Cite-check guard rejects unverifiable references
- Memo, brief and pleading templates
- Outputs grounded in primary sources only
How TDX preserves privilege
The cryptographic argument, in plain English.
Intel TDX (Trust Domain Extensions) is a hardware capability available on 4th and 5th generation Xeon Scalable processors. When a workload boots inside a Trust Domain, AES-256 memory encryption keys are fused into the CPU and never leave silicon. The hypervisor, the host operating system and the cloud operator all sit outside the trust boundary — they can schedule the workload but they cannot read its memory. Every session produces an ECDSA attestation report signed by the CPU itself, which an external party can verify against Intel's root of trust.
Operator-blind by construction
VoltageGPU engineers cannot read prompts. The keys do not exist outside the CPU.
Attestation per session
Each request produces an ECDSA report verifiable against Intel root of trust.
No retention, no training
Prompts and outputs are flushed when the enclave exits. Default policy, contractual under Art. 28.
EU jurisdiction end-to-end
Controller (VOLTAGE EI), processor and physical hardware all sit inside the EU.
Sanctions and bar guidance
What regulators and courts have said so far.
Mata v. Avianca (US, 2023)
Lawyers sanctioned for submitting six fictitious case citations generated by ChatGPT. The court fined the firm and required mandatory CLE on AI use. The first textbook AI sanctions case for the legal profession.
CNB position (France, 2024)
The Conseil National des Barreaux issued guidance requiring lawyers to verify where AI processing occurs and to obtain attestable confidentiality guarantees before submitting client information.
CCBE guidance (EU, 2024)
The Council of Bars and Law Societies of Europe reinforced the duty of confidentiality for AI tools and recommended preference for European processors with hardware-level guarantees where available.
EU AI Act (in force 2024-2026)
High-risk systems used in legal services trigger transparency, human oversight and risk-management obligations. Hardware-sealed inference materially simplifies the compliance posture for processors.
Comparison
VoltageGPU vs Harvey, Spellbook, Luminance, Lexis+ AI.
Sources: vendor-published documentation as of 2026, public reporting on Harvey AI's OpenAI partnership, and RELX/Microsoft Azure infrastructure announcements for Lexis+ AI.
Pricing
Solo to mid-market. No BigLaw lock-out.
Solo practitioners
- Qwen3-235B-TEE, 262K context
- Contract Analyst tool
- 50 deep analyses / month
- EU-hosted, RGPD Art. 28
Solo + 1 paralegal
- 500 contract analyses / month
- Due diligence ingestion
- Email priority support
- Audit log export
Small firms (≤10 seats)
- Unlimited analyses
- Legal Research agent
- OpenAI-compatible API
- iManage / NetDocuments connectors
Mid-market firms + GCs
- DeepSeek-R1-TEE reasoning
- SSO / SCIM / RBAC
- Per-session attestation reports
- Dedicated DPO contact
FAQ
Frequently asked questions.
Can I trust an AI vendor with privileged client documents?
Only when the technical posture removes the vendor from the trust boundary. Intel TDX does this: memory is encrypted with AES-256 keys fused into the CPU at boot, the hypervisor and host OS are excluded from the trust domain, and an ECDSA attestation report proves the workload that ran. VoltageGPU operators have no path to read prompts even under a court order — the keys do not exist outside the silicon.
How do I demonstrate compliance to my bar association?
We provide a written technical brief mapped to the CCBE guidance on AI, the CNB position paper on generative AI, and the EU AI Act transparency obligations. Every Pro and Enterprise session can produce a per-request attestation receipt suitable for inclusion in client engagement letters.
Where exactly is the data processed?
TDX-equipped GPUs operated inside the European Union. The controller is VOLTAGE EI (France, SIREN 943 808 824). The infrastructure is hosted in EU data centers that are themselves subject to RGPD as processors. There is no data flow to US infrastructure for confidential inference.
What about hallucinations on case law?
The Legal Research agent runs a citation-check pass on every output. Citations that cannot be resolved against primary jurisprudence sources (Légifrance, EUR-Lex, court bulletins) are stripped before the response reaches the user. We do not eliminate hallucination risk — no LLM does — but we make the guard explicit and document its scope.
Can the agents work in French only?
Agents accept and produce content in EN, FR, DE, ES and IT. The Legal Research agent is currently strongest on French and EU jurisprudence; expansion to other EU member-state corpora is on the roadmap for 2026.
Verify the enclave. Then bring your hardest contract.
Inspect the live attestation evidence before you upload anything. The Contract Analyst is open on the Plus plan for $20/month.