Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsFor sensitive legal documents, the best AI option is the approved commercial or enterprise service whose specific product surface, contract, model, retention settings, and processing location meet your firm’s requirements. OpenAI business/API services and Anthropic commercial/API services document enterprise privacy controls; Claude is also available through Amazon Bedrock, which has AWS-specific retention and regional-processing behavior. None of these paths automatically preserves privilege or makes every workflow appropriate for client files. Verify the exact configuration with counsel before use.
Can you use AI to review confidential legal documents?
Possibly, but “private AI” is not a single product setting. The protections that apply depend on how you access the model, the agreement governing that access, your account’s eligibility, the model and feature used, retention choices, and where processing occurs. Consumer chat, an enterprise workspace, a direct API, and a cloud marketplace deployment can have materially different terms.
The providers’ documentation describes their own controls; it is not independent validation, a comparison of legal-review accuracy, or a legal opinion. A vendor’s confidentiality commitment may be relevant to a lawyer’s analysis, but no setting guarantees that a court or regulator will treat a particular disclosure as privileged or protected work product.
Compare the available service paths
The following are documented service paths, not a ranking or a complete survey of legal-AI products. Availability of controls can depend on the account, contract, region, model, and feature.
#1 Best Overall
- PORTABLE SCANNER FOR USE ON-THE-GO — The fastest and lightest mobile single-sheet-fed compact document scanner in its class¹
- QUICK DOCUMENT SCANNING ― This Epson ultra-fast scanner scans a single page as quickly as 5.5 seconds²; Windows and Mac compatible
- VERSATILE PAPER HANDLING ― Portable scanner scans documents up to 8.5 x 72 in; Also easily digitizes receipts and ID cards to make accounting, bookkeeping, and organizing simpler
- INTUITIVE, HIGH-SPEED SOFTWARE — Epson ScanSmart Software³ is a smart tool allowing you to easily scan, review, and save; Stay organized easily with the help of this Epson scanner
- EASY SETUP — USB-powered connect to your computer for quick and simple scanning; No batteries or external power supply required to operate portable document scanner; Standard Connectivity: USB 2.0
| Service path | What provider documentation describes | What to verify before client data |
|---|---|---|
| OpenAI business or API services | OpenAI describes configurable business-data retention, including API zero data retention (ZDR), and data-residency and some in-region-processing choices for eligible customers. Its security materials also list compliance and certification information. | Confirm that your organization and exact product or endpoint are eligible; check the negotiated contract and data-processing terms, selected region, retention settings, and which features those settings cover. Do not assume consumer-account controls match API or business terms. |
| Anthropic Claude commercial or API services | Anthropic describes ZDR for eligible organizations and specified API features. Its standard API policy generally deletes inputs and outputs within 30 days, subject to exceptions and features with longer retention. ZDR does not cover consumer products and has other stated exclusions and model-specific exceptions. | Confirm the organization’s ZDR approval and status, exact model and feature, and whether use is through a commercial interface or API. Check treatment of files, tools, integrations, safety or legal exceptions, and any feature that may retain data longer. |
| Claude through Amazon Bedrock | AWS documents Bedrock-specific retention modes. For models requiring aws_review—currently Claude Fable 5 and Claude Fable 5.1 in AWS’s documentation—prompts and completions are retained within the AWS boundary for up to 30 days and may be reviewed by AWS to meet a human-review requirement. Cross-region inference affects the region in which retained inputs and outputs reside. |
Verify the selected model and retention mode, account and region configuration, whether cross-region inference is used, and applicable AWS contractual and compliance terms. Hosting within a cloud account is not the same as zero retention. |
Anthropic’s ZDR documentation says that, under an applicable arrangement, it does not store customer prompts or responses at rest after the API response is returned. That statement is bounded by the eligible organizations, APIs, features, products, and model-specific exceptions in Anthropic’s API and data-retention documentation; it should not be generalized to all Claude access.
What to establish before uploading a document
Ask the provider or your account administrator for written answers tied to the precise service path you intend to use. A general statement that a vendor does not train on customer data is not a substitute for checking retention, access, location, and contractual terms.
Rank #2
- FAST SPEEDS - Scans color and black and white documents a blazing speed up to 16ppm (1). Color scanning won’t slow you down as the color scan speed is the same as the black and white scan speed.
- ULTRA COMPACT – At less than 1 foot in length and only about 1. 5lbs in weight you can fit this device virtually anywhere (a bag, a purse, even a pocket).
- READY WHENEVER YOU ARE – The DS-640 mobile scanner is powered via an included micro USB 3. 0 cable allowing you to use it even where there is no outlet available. Plug it into you PC or laptop and you are ready to scan.
- WORKS YOUR WAY – Use the Brother free iPrint&Scan desktop app for scanning to multiple “Scan-to” destinations like PC, Network, cloud services, Email and OCR. (2) Supports Windows, Mac and Linux and TWAIN/WIA for PC/ICA for Mac/SANE drivers. (3)
- OPTIMIZE IMAGES AND TEXT – Automatic color detection/adjustment, image rotation (PC only), bleed through prevention/background removal, text enhancement, color drop to enhance scans. Software suite includes document management and OCR software. (4)
- Contract and confidentiality: Confirm the applicable business terms, data-processing agreement, confidentiality commitments, permitted uses, subprocessors, and any customer-data training restrictions. Check that the agreement actually governs the account and feature in use.
- Retention and deletion: Determine whether inputs, outputs, uploaded files, logs, feedback, and tool activity are retained; for how long; who can access them; and what deletion or safety-review exceptions apply. Verify ZDR eligibility and endpoint coverage rather than relying on the label alone.
- Location: Distinguish stored-data residency from the region where inference or other processing occurs. Confirm whether the selected region covers every part of the workflow, including cross-region inference, file handling, and integrations.
- Access and audit: Establish who can use the workspace or API, how identity and permissions are managed, whether access can be logged, and what customer control exists over encryption keys and administrative access. Treat these as questions to verify, not features guaranteed on every plan.
- Full workflow: Inspect connected tools, connectors, file uploads, logs, feedback channels, and any downstream systems. A privacy setting for a model endpoint may not describe every service that touches the document.
- Legal and client requirements: Check engagement terms, client instructions or consent practices, protective orders, professional-conduct obligations, and cross-border rules that apply to the matter.
Use a controlled review workflow
- Choose an approved service path. Use a firm-approved commercial account, enterprise workspace, API, or cloud deployment. Prohibit unapproved consumer accounts for client files under firm policy; do not infer their protections from a business or API product.
- Map the task to the exact model and feature. Record the access surface, model, endpoint or feature, enabled retention mode, and relevant region. Recheck eligibility if the task uses file analysis, tools, connectors, or another feature beyond a basic prompt.
- Minimize the material sent. Provide only the passages and context needed for the task. Consider local redaction or an in-tenancy deployment where the matter’s risk and requirements warrant it.
- Set permissions and records. Apply least-privilege access and the firm’s identity controls. Record the AI’s role where policy requires it, and handle prompts and outputs under the firm’s document-retention rules.
- Keep a lawyer responsible for the work. Treat generated summaries, extracted clauses, citations, quotations, and issue lists as unverified work product. Check each material claim against the original document before relying on it, and retain an attorney as the decision-maker.
- Review the configuration when it changes. Recheck terms and settings when the vendor changes a model, adds a feature, alters regional availability, or updates retention documentation. Model names and service behavior can change.
Privilege, confidentiality, and lawyer supervision
Whether use of an AI service affects privilege or work-product protection is a legal and contextual question, not a product certification. Relevant facts can include the vendor’s confidentiality commitments, the lawyer’s direction and purpose, who receives or can review the information, the client’s terms, and the law governing the matter. These considerations do not produce a universal answer across jurisdictions.
Anthropic’s legal-work guidance expressly characterizes its discussion as the company’s perspective, not legal advice, and says the right answer depends on jurisdiction, clients, and matters. Its discussion identifies competence, confidentiality, supervision, verification, client consent, and engagement letters as issues lawyers should consider. Have your own counsel assess applicable professional rules and matter-specific obligations before adopting a workflow.
Rank #3
- FAST DOCUMENT SCANNING — Document scanner with feeder allows you to speed through stacks with a 50-sheet Auto Document Feeder (ADF); Efficient office scanner to help you scan more productively
- INTUITIVE, HIGH-SPEED SOFTWARE — Quickly scan with this desktop document scanner; Epson ScanSmart Software lets you easily preview scans, email files, upload to the cloud, and more; Plus, automatic file naming saves even more time
- SEAMLESS INTEGRATION — Easily incorporate your data into most document management software with the included TWAIN driver; Office document scanner integrates seamlessly with business workflows
- EASY SHARING — Duplex scanner allows you to scan straight to email or popular cloud storage2 services like Dropbox, Evernote, Google Drive, and OneDrive for simple storage and sharing
- SIMPLE FILE MANAGEMENT — Scanner allows the creation of searchable PDFs with Optical Character Recognition (OCR) and convert scans to editable Word or Excel files effortlessly; Designed for home and office document scanning
How to choose between the options
- Prefer a direct business or API arrangement when the firm needs contractual controls and can verify retention, endpoint coverage, and processing location for its exact deployment.
- Consider Claude through Bedrock when the firm’s cloud architecture and AWS terms fit the matter, but verify model-specific retention and cross-region behavior rather than assuming cloud hosting means no retention.
- Do not use a product solely because it advertises “private,” “enterprise,” or “zero retention.” Match the claim to the exact organization, interface, model, feature, and contract.
- Do not choose on privacy statements alone. The provider materials reviewed do not establish a comparative legal-document accuracy rate. Build lawyer review and source-document verification into the workflow.
Service eligibility, model designations, retention modes, security attestations, and regional availability can change. Confirm current provider documentation and negotiated terms at procurement and before material changes to the workflow.
Quick Recap
Best Value
- OUR MOST ADVANCED SCANSNAP. Large touchscreen, fast 45ppm double-sided scanning, 100-sheet document feeder, Wi-Fi and USB connectivity, automatic optimizations, and support for cloud services. Upgraded replacement for the discontinued iX1600
- CUSTOMIZABLE. SHARABLE. Select personalized profiles from the touchscreen. Send to PC, Mac, mobile devices, and clouds. QUICK MENU lets you quickly scan-drag-drop to your favorite computer apps
- STABLE WIRELESS OR USB CONNECTION. Built-in Wi-Fi 6 for the fastest and most secure scanning. Connect to smart devices or cloud services without a computer. USB-C connection also available
- PHOTO AND DOCUMENT ORGANIZATION MADE EFFORTLESS. Easily manage, edit, and use scanned data from documents, receipts, photos, and business cards. Automatically optimize, name, and sort files
- AVOIDS PAPER JAMS AND DAMAGE. Features a brake roller system to feed paper smoothly, a multi-feed sensor that detects pages stuck together, and skew detection to prevent paper damage and data loss
Rank #4
- Scanner type: Document
- Connectivity technology: USB
- With Auto Scan Mode, the scanner automatically detects what you're scanning
- Digitize documents and images
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
