The governed legal & compliance stack

Two of the four tools, Harvey and Vanta, are quote-based enterprise platforms with no list price; Microsoft Copilot and Spellbook have published tiers. The 03 COSTS table above breaks down each seat's costs. Two meters here are quote-led: Harvey prices by quote, obtained by requesting a demo, and Vanta on the frameworks and company size in scope; the contract-review and tenant seats move per head. Budget the procurement cycles as much as the spend, and cost the independent auditor separately, because no platform fee includes one.

Rarely all at once; the deal usually decides the order. Harvey and Spellbook are the legal core: reasoning across whole matters and running contracts under playbooks. The numbered steps are capability order, not a rollout you buy in one go. Add Vanta when a first enterprise customer asks for SOC 2 or ISO 27001, since evidence takes time to mature before an audit; let Copilot follow the Microsoft 365 estate you already license.

Your Microsoft 365 Copilot subscription already covers tenant-grounded drafting, summaries and mail inside Word and Outlook, and this stack keeps it as that surface. What Copilot cannot do is govern the legal work behind it: Spellbook reviews contracts against playbooks with legal-grade data terms, Vanta monitors controls and collects audit evidence continuously, and Harvey reasons across whole matters. Defer those until the pressure is real; keep Copilot drafting meanwhile.

Spellbook and Vanta both sit under the compliance banner, where teams conflate them. The dividing rule is which obligation each governs. Spellbook governs the promises going out: contracts reviewed against playbooks so terms stay within what the organisation can stand behind. Vanta governs whether you keep them: controls monitored continuously and the evidence an audit demands. They are two ends of one obligation, not substitutes. The Spellbook and Vanta comparison, linked above, covers where the line falls.

Often, and this tier says so. Harvey's matter-scale reasoning and Vanta's continuous evidence only repay their procurement and rollout overhead when whole matters are the unit of work and enterprise customers demand certifications on a schedule. Without recurring audit pressure, or when contracts are handled deal by deal rather than at portfolio scale, most of this sits idle. A team that mainly needs playbook-driven contract review wants the competitive tier, the professional contract stack.

This stack is built to take privileged material, but only once the terms are agreed. Spellbook is SOC 2 Type II and offers Zero Data Retention, keeping contracts out of model training; confirm that before uploading client work. Harvey holds confidential matter material, so vault access, retention and what may leave the firm are procurement decisions settled with risk owners. Vanta and Copilot take deep, permission-aware access to your systems: review their data terms and keep the enterprise or business tenancy, where training exclusion applies, before anything confidential goes in.