New Zealand-based LawVu announced the new integration in a press release on 11 November 2026. The tools are Anthropic’s Claude, Microsoft Copilot, OpenAI’s ChatGPT and the legal AI services Harvey and Legora. The connections are available immediately and require no custom development, the company said.

LegalOS is a system built for in-house legal teams. It stores legal matters, contracts, legal spend and the company’s own legal knowledge, among other things. Unite.AI reported the news the same day, based on the press release and LawVu’s documentation. The information therefore comes from the company and has not been independently verified.

What the tools can do

The connection runs through LawVu’s MCP server. MCP (Model Context Protocol) is an open standard for connecting AI tools to external systems. The server offers more than 50 actions for reading and updating LegalOS data, LawVu said.

Based on LawVu’s documentation, a tool can, for example, search and summarise legal matters and contracts and read key contract dates, Unite.AI reported. It can also create matters and contracts, log status updates, assign tasks and start contract workflows. In LawVu’s own example, a lawyer asks Copilot which vendor contracts auto-renew next quarter. The lawyer then assigns a review task to a colleague without leaving Copilot.

Permissions stay at user level, but data goes to the AI provider

The documentation promises that an AI tool gets no broader permissions than its user has, Unite.AI reported. A user who cannot open a contract in LawVu cannot reach it through the AI tool either. Actions taken through MCP appear in LawVu’s activity log in the same way as actions performed directly on the platform.

LawVu’s control does not, however, extend to everything that happens to data once it leaves the platform. Data involved in a query is passed to the selected AI provider for processing. LawVu does not control what the provider does with it. The company advises customers to check the provider’s processing terms and privacy practices against their own obligations.

The documentation lists prompt injection, meaning instructions hidden in content that can steer the model, as a risk. Other risks include third-party MCP servers, misleadingly named tools and unwanted autonomous actions. LawVu recommends giving tools only the permissions they need and using vetted tools and servers. It also recommends monitoring logs, rolling the feature out to a limited group first and, where possible, having a human approve AI changes to records.

The feature is not switched on automatically. Customers must request it from LawVu, and an organisation administrator must enable it in the Integrations view. The AI service must also be configured. Unite.AI reported that Claude and Harvey have official connectors, and ChatGPT and Codex an official plugin. The list does not mention Copilot or Legora. Other MCP-compatible services connect using LawVu’s server URL, with OAuth 2.0 authentication where required.