Legal AI
MyCase IQ
High riskGenerative AI features (document summarization, drafting, text editing, search) embedded in the MyCase practice management platform for small firms, part of AffiniPay's 8am IQ initiative.
Is MyCase IQ safe for confidential data?
MyCase IQ has the same structural exposure as any AI layered over a whole practice-management database — it can reach client matters, documents, and communications firm-wide — but with materially thinner public documentation than its direct competitor Clio. AffiniPay's 8am IQ FAQ states that customer inputs are not used to train third-party AI models, yet in the same breath says inputs and outputs may be used to develop and improve its own products, and MyCase does not publish a clear subprocessor list, LLM-provider disclosure, retention schedule, or SOC 2 statement for the IQ features specifically. None of this evidences misuse, and the parent company's deliberate rollout is a genuine positive — but a firm cannot currently verify from public documents where matter data goes when an IQ feature runs. Until MyCase publishes the details or states them in your contract, the honest answer to most hard questions below is unknown, and privileged material deserves that uncertainty priced in.
Risk by plan
The same product often carries very different terms depending on the tier — consumer plans are where the exposure concentrates.
No third-party model training per the vendor, but vendor product-improvement use of inputs and outputs is reserved in the FAQ — ask MyCase to disclaim it in writing for your account.
Data handling
Training on inputs
AffiniPay states 8am IQ offerings do not train third-party AI models, but that inputs and outputs may be used to develop and improve its own products per its privacy policy — a broader product-improvement license than competitors' flat no-training commitments. Which LLM providers process the data is not published.
Retention
Not published for IQ features specifically; retention of prompts, outputs, and any product-improvement copies is unknown — confirm in your agreement.
Residency
Not published for IQ processing. MyCase serves U.S. and Canadian firms; Canadian firms subject to PIPEDA should ask where AI processing occurs before enabling the features.
Compliance
- SOC 2Not verified
- GDPR / DPANot verified
- HIPAA BAANot verified
Certifications typically apply to specific tiers and contracts — confirm scope in writing before relying on them.
New to these frameworks? See our plain-language guides to SOC 2 and the other AI compliance standards.
Enterprise controls
- Features inherit MyCase account permissions
- Vendor-stated no-training of third-party models
- Published 8am IQ FAQ
- Admin control over enabling AI features
Frequently asked questions
Is MyCase IQ private — does MyCase use our client data?
Partly answered. AffiniPay says IQ features do not train third-party AI models, but reserves the right to use inputs and outputs to develop and improve its own products, and does not publicly name the LLM providers that process your data. For a platform holding entire client files, that is a wider gap than competitors leave; ask MyCase to name subprocessors and exclude your data from product-improvement use in writing.
Is MyCase AI safe to enable for a small firm?
The risk is less the features than the unknowns around them: unpublished retention, unnamed model providers, and no IQ-specific security attestation in public view. If you enable it, do so after getting those answers in your contract, and remember the AI can only be as well-scoped as your MyCase permissions — audit who can see which matters first.
Our staff already paste MyCase data into ChatGPT — does IQ fix that?
It reduces the temptation for in-platform tasks, but a built-in assistant never fully displaces the consumer chatbots people use for everything else, and those sit outside any agreement at all. Treat IQ adoption and shadow-AI controls as two separate line items: vet the sanctioned tool's terms, and put monitoring or redaction in front of the unsanctioned ones.
Policy changelog
- Initial entry published from MyCase/AffiniPay's published documentation; several facts unverifiable from public sources and marked unknown.
Sources
- MyCase IQ announcement (MyCase blog)
- 8am IQ FAQs (MyCase support center)
- AffiniPay IQ launch press release
This profile summarizes the vendor's published policies as of the verification date. It is not legal advice.
MyCase IQ is probably already in your organization.
Sanitized AI shows you who is using it and redacts sensitive data from prompts before it leaves your control.
More AI tool profiles
AI assistant built into Clio Manage, the dominant solo and small-firm practice management platform, answering questions and drafting from the firm's own matter data.
Thomson Reuters' professional AI assistant, delivered inside Westlaw Precision for legal work and as CoCounsel Tax, Audit & Accounting for advisory practices.
Legal AI platform for law firms and in-house teams: research, drafting, document review, and workflow automation built on foundation models.
LexisNexis' generative AI research and drafting assistant, now sold as Lexis+ with Protégé, grounded in the Lexis primary-law and Shepard's citation database.