Vannus / Catalog / Luminance

Luminance D Fragile

Graded D on resilience. In Vannus's assessment it has not disclosed which model it runs — single-point-of-failure risk.

Legal-grade AI for contract generation, negotiation and review, marketed at legal and commercial teams for redlining and bulk contract analysis. The privacy policy states personal data is stored on Luminance servers located in Cambridge, United Kingdom, while also noting data "may be used, processed or stored anywhere in the world". The group entity is given as Luminance Technologies Ltd, company

legal, AI, enterprise
Model provenance

Not disclosed. Luminance does not publish which model it runs, so this criterion is excluded and the grade rests on what we could verify. We say so rather than guess.

Who controls it
Allied / Safe Harbor Origin
OriginGBR
Data jurisdictionUK
Within U.S. CLOUD Act reachNo
Trains on your dataYes, unless you opt out

This is a separate question from the grade above. The grade measures resilience — whether the tool endures and whether you could leave it. This measures who can compel your data. A tool can score modestly on one and strongly on the other, and many do.

Signals on file
Origin
United Kingdom
US legal control
No
Training on your data
Trains on your data unless you opt out

The vendor's published or catalog-recorded posture — the concrete facts this grade is built from. A full audit verifies each against the vendor's current documentation.

How this grade is set

Vannus grades Luminance against nine dimensions of trust — data sovereignty, training privacy, compliance posture, operational resilience, exit portability, and more. The heaviest criterion asks whether the tool builds its own AI or resells someone else's model; where the vendor discloses it, the grade cites the vendor's own documentation. No paid placements — scoring is walled off from affiliate revenue. See the methodology →

Related tools we grade
Visit Luminance ↗ Grade your whole stack →