Everlaw

United States · www.everlaw.com · 25 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 25 sub-vendors.

Insights

Last updated 2026-08-01 · revision 1

25 direct vendors, 278 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Everlaw exhibits medium migration readiness. Its cloud-native SaaS architecture on AWS, coupled with the use of modern technologies such as Generative AI, LLMs, and RAG, provides a strong foundation for agility and internal migrations within its current cloud environment. This modern tech stack inherently supports flexibility. However, a significant challenge to broader migration readiness is the substantial vendor lock-in. Everlaw is deeply integrated with AWS for its core infrastructure and relies heavily on Google Gemini and Anthropic Claude for its AI capabilities. Migrating away from these foundational platforms would be a complex, costly, and time-consuming undertaking due to deep technical integrations and potential re-architecting efforts. The provided vendor data is inconsistent ('Total Vendors: 0' contradicts the explicit mention of AWS, Google, and Anthropic in the tech stack, and 'Vendor Geographic Diversity: 1 unique countries' contradicts 'Vendor Owner Countries: United States, France'). Assuming AWS, Google, and Anthropic are key vendors, their concentration and US-based HQs contribute to this lock-in. Furthermore, data residency requirements are not specified, which could introduce significant complexities if strict requirements exist for a new environment. The absence of financial stability data also makes it difficult to assess the company's capacity to fund a major platform migration. While the strong regulatory compliance is positive for operations, it could add overhead for re-certification or re-evaluation during a full platform migration to a different ecosystem.

Compliance

10 in-scope frameworks identified; showing 3.

EU-U.S. Data Privacy Framework — Compliant

Everlaw participates in the EU-U.S. Data Privacy Framework (DPF), which provides a legal mechanism for transferring personal data from the EU to the US following the invalidation of Privacy Shield. The DPF logo is displayed on the Trust Center and a dedicated DPF Notice is published. This is a critical compliance mechanism for a US company processing EU personal data. Risk is Low as participation is confirmed and the DPF Notice is publicly available.

Evidence: https://www.everlaw.com/trust/, https://www.everlaw.com/legal/data-privacy-framework-notice/, https://www.everlaw.com/legal/customer-data-processing-addendum/

ISO 27001 (source) — Compliant

Everlaw holds a current ISO/IEC 27001:2022 certification — the latest version of the standard — demonstrating a formally audited and certified Information Security Management System (ISMS). ISO 27001:2022 certification requires independent third-party audit by an accredited certification body and periodic surveillance audits to maintain. The certificate is publicly available for download. Risk is Low because the certification is current, covers the most recent standard version, and is independently verified.

Evidence: https://www.everlaw.com/trust/security/, https://assets.ctfassets.net/jqxgjfvolqmr/6BJLdaS4isqw35blQG5zcv/b79bf7e6730b117aa603b442a1dac459/Everlaw_2026_-_ISO_27001_2022_Certificate.pdf, https://www.everlaw.com/trust/

SOC 2 (source) — Compliant

Everlaw holds a current SOC 2 Type 2 attestation covering the Trust Service Criteria of Security, Availability, Confidentiality, and Privacy — the most comprehensive SOC 2 scope available. SOC 2 Type 2 is the gold standard for cloud service providers and demonstrates that controls were not only designed appropriately (Type 1) but operated effectively over a period of time (Type 2). Additionally, Everlaw publishes a SOC 3 report publicly. Risk is Low because the attestation is current, covers all four relevant trust service criteria, and is independently audited by a qualified CPA firm.

Evidence: https://www.everlaw.com/trust/security/, https://trust.everlaw.com/, https://assets.ctfassets.net/jqxgjfvolqmr/6GNrhEywHdrXLzIz5ZQFqP/cf9487086731671e9aafd490824beeac/Everlaw_-_2026_-_SOC_3_-_Report.pdf, https://www.everlaw.com/trust/

Financials

Three-year financials

Financial Resilience Score: 7/10

Everlaw is a well-capitalized private SaaS company that has raised over US$300M across Series C (US$62M in March 2020) and Series D (US$202M in November 2021), achieving unicorn status (>US$1B valuation) with backing from top-tier investors including Andreessen Horowitz, CapitalG (Alphabet), TPG, Menlo Ventures, and HIG Capital. The recurring subscription SaaS model typically supports high gross margins and strong retention, and Everlaw has demonstrated strong customer traction with major law firms, corporations, and government entities. Regulatory moats such as FedRAMP Moderate authorization, GovRAMP/StateRAMP authorization, and FedRAMP certification of EverlawAI Assistant provide defensible, sticky revenue channels in federal and state government sales. Product leadership is validated by consistent #1 rankings on G2 and IDC MarketScape Leader status. Continued executive team build-out (CFO, CLO, CMO, CRO, CTO in 2023–2025) and an expanded Oakland HQ with hiring plans signal preparedness for further scale or potential IPO. However, resilience cannot be fully verified because Everlaw is private and does not disclose audited revenue, EBIT, equity, or cash runway. The lack of a new funding round since November 2021 is ambiguous—it may indicate cash-flow self-sustainability or an inability/unwillingness to raise at higher valuations in the current SaaS multiples environment. Heavy investment in generative AI features implies rising compute costs that could compress margins.

Key strengths: Raised over US$300M across Series C and Series D funding rounds, Unicorn valuation (>US$1B) achieved in November 2021, Top-tier investor base (a16z, CapitalG, TPG, Menlo, HIG Capital), Recurring SaaS subscription revenue model with high gross margins, FedRAMP Moderate and GovRAMP/StateRAMP authorizations enabling government sales, FedRAMP certification of EverlawAI Assistant (Aug 2025), Consistent #1 ediscovery ranking on G2 and IDC MarketScape Leader, Strong enterprise customer wins (Holland & Knight, Vodafone, United Airlines, U.S. DOI), Executive team build-out with CFO, CLO, CMO, CRO, CTO hires in 2023-2025, Expanded Oakland HQ (Oct 2025) with hiring spree plans

Risk factors: No financial transparency—no audited revenue, EBIT, or equity disclosures, No new funding round since November 2021 (approximately 4 years), Crowded competitive market with well-funded rivals (Relativity, DISCO, Reveal, Logikcull), Revenue tied to cyclical litigation and investigations activity, Government contract dependencies with procurement cycles and political/budget risk, Rising compute costs from generative AI foundation-model API spend could compress margins, Cash runway and profitability unverifiable from primary sources

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report