Home / Safety / Andri for law firms

Andri AI B.V. (Amsterdam, NL)

How safe is Andri for legal practice?

GDPR profileOur summary of what the provider itself publishes about your data: whether the data is stored in the EU (2 points), whether there is a certification or GDPR guarantee (1) and whether the provider is based in the NL or the EU (1). 3 or 4 points is Strong, 2 Good, 1 Limited, 0 Unknown. How we measure for legal practiceStrong

Andri has a strong published GDPR profile and, with the right business settings, is well suited to law firms.

Where does Andri stand in law firms?

Shared place 1 of 45 options for legal practice (professional tools and general assistants) on GDPR profile. 19 options, like Andri profile, are strong. Each tile is an option we track for this field; click for the check.

Strong19
Good10
Limited6
Unknown3
Caution7

Stronger or equally strong in legal practice

Latest developments

9 November 2026Claude Code stores approved commands containing passwords in settings.local.json

If you choose "Yes, and don't ask again" in Claude Code, the tool saves the command verbatim in .claude/settings.local.json, including passwords or API keys. Apiiro found real secrets in 1,122 of 104,185 public copies on GitHub, including 379 database passwords. Keep the file out of git, use variables for secrets, and replace any keys that have already leaked. source

November 2 2026Message threads (beta) fall outside Zero Data Retention

With message threads in the Claude API, Anthropic stores the conversation, the system prompt and the tools on the server, encrypted in memory and not on disk, until up to one hour after the last use. The feature does not qualify for Zero Data Retention; your other ZDR agreements still apply. If you work with personal data under ZDR, only enable threads if your DPIA covers it. source

30 October 2026Mistral Large 4: weights freely available under an open-weight licence

The weights of Mistral Large 4 are available on Hugging Face under the Mistral Ecosystem Open-Weight License, a derivative of MIT with restrictions for model-as-a-service. This means you can host the flagship model yourself within the EU or on your own servers, so personal data does not go to an external provider. If you offer the model as a service to third parties, check the licence terms first. source

Questions

How safe is Andri for legal practice?
Andri has a strong published GDPR profile and, with the right business settings, is well suited to legal practice. EU hosting options, no training on your data and/or self-hosting available.
Does Andri train on my data?
Claude by Anthropic (via AWS Bedrock, EU regions) and Mistral AI (EU); data stored in AWS eu-west-1 (Ireland); customer data never used for training; ISO 27001-certified (Kiwa); GDPR and Security Addendum (per provider)
What should I watch out for with AI in legal practice?
Professional secrecy is mandatory. Only enter client data into a business/EU variant with a data processing agreement, where input is not used for training. Always keep a lawyer in the loop.

Source documents

Everything about Andri Best AI for legal practice

Summarised by the editorial team from provider documentation · not legal advice

Last checked: 29 October 2026 · How we check

Every Friday: what changed in AI for law firms

New models, prices, oversight and tools, with sources and what it means for you. One email a week, unsubscribe with one click.

View a sample

We only use your address for this newsletter. You confirm first by email.