Is Jarvis Safe For Law Firms?

Jarvis (getjarvis.eu) can be used safely by law firms when configured with care, but no AI assistant removes your professional duty to protect client information. Jarvis is a screen-aware desktop AI assistant (Cmd+/ on macOS, Ctrl+/ on Windows) that routes work to frontier models from Anthropic, OpenAI, and Google. For firms, the relevant safeguards are concrete: OAuth tokens for Gmail, Outlook, Google Drive, and Microsoft 365 are encrypted with AES-256-GCM; data is stored in the EU on GDPR-aligned infrastructure with your data stored in the EU; Jarvis never trains its models on your data; and it operates under GDPR and the EU AI Act. From $16/month (Pro), with Unlimited at $32/month. The honest limit: Jarvis runs in the cloud, the underlying models are third-party providers, and there is no on-premises option, so firms handling highly sensitive matters should review their own confidentiality obligations first.

The features that matter to a firm are the security and data-handling guarantees, not the chat experience. Jarvis encrypts the OAuth tokens that connect Gmail, Outlook, Google Drive, Microsoft 365, and Notion using AES-256-GCM, so a leaked token cannot be replayed in plaintext. Processing happens on GDPR-aligned infrastructure with your data stored in the EU rather than US data centres, which simplifies GDPR data-residency analysis for European firms. Critically, your prompts, documents, and screen content are never used to train Jarvis or the underlying frontier models from Anthropic, OpenAI, and Google, so client material does not leak into a future model. Persistent memory is user-controlled, meaning you decide what is retained.

Safe tooling does not equal compliance. Lawyers remain bound by confidentiality and privilege rules regardless of which software they use, so the decision to put a client matter through any cloud AI is a professional judgement, not a vendor checkbox. Jarvis processes data in the cloud and relies on third-party model providers, so for the most sensitive instructions some firms will prefer to redact identifiers, work from anonymised facts, or keep certain matters off the tool entirely. There is no air-gapped, on-premises deployment today. Treat Jarvis as a capable assistant whose use you must still document, supervise, and disclose where your jurisdiction requires.

Privacy & data