For sensitive legal documents, the best AI option is the approved commercial or API deployment whose exact model, features, contract, retention settings and processing region meet your firm’s requirements—not a product label that says “private.” OpenAI business/API services and Anthropic commercial/API services describe enterprise privacy controls; Claude is also available through Amazon Bedrock, which has AWS-specific retention and regional-processing rules. Before using a client file, confirm the terms and settings for the entire workflow and have counsel assess professional-conduct, client and cross-border obligations. No configuration alone guarantees privilege or work-product protection.
Which AI tools keep legal documents private?
Three documented service paths are useful to compare: OpenAI business/API services, Anthropic Claude commercial/API services, and Claude accessed through Amazon Bedrock. They are deployment choices, not a complete survey of legal AI products or a universal safety ranking. Their controls differ by account eligibility, product surface, model, endpoint, feature, contract, retention setting and processing location.
As an Amazon Associate I earn from qualifying purchases.
The descriptions below reflect provider documentation available as of October 4, 2026. They establish what providers say their services can do; they are not independent security validation, legal advice or proof that a specific firm configuration is compliant.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitches| Service path | What the provider documentation describes | Confirm before client use |
|---|---|---|
| OpenAI business/API | OpenAI describes configurable retention for business data, including API zero data retention (ZDR), and data-residency and some in-region processing choices for eligible customers. Its security page lists compliance and certification information. | Eligibility; product surface and endpoint coverage; selected region and in-region processing availability; the negotiated contract and data-processing agreement (DPA); and the actual account settings. Consumer-account terms should not be inferred from business or API controls. |
| Anthropic Claude commercial/API | Anthropic documents ZDR for eligible organizations and API features, with exclusions for consumer products and other surfaces, plus model-specific exceptions. Its standard API retention policy and exceptions are described separately. | Organization approval and ZDR status; exact model, feature and interface; and whether files, tools, integrations or legal/safety processes create different retention. Do not assume a Claude interface has the terms of an API integration. |
| Claude through Amazon Bedrock | AWS documents retention behavior for Bedrock separately from Anthropic’s own API terms. For models requiring aws_review—the AWS documentation lists Claude Fable 5 and Claude Fable 5.1—prompts and completions are retained within the AWS boundary for up to 30 days and may be reviewed by AWS. Cross-region inference affects the region where retained data resides. |
Selected model and retention mode; AWS account and region configuration; whether cross-region inference is used; and AWS contractual and compliance terms. A cloud deployment is not automatically zero-retention. |
Provider model names, eligibility and service behavior can change. Check the current documentation and your own account configuration rather than treating this comparison as a permanent feature list.
#1 Best Overall
- PORTABLE SCANNER FOR USE ON-THE-GO — The fastest and lightest mobile single-sheet-fed compact document scanner in its class¹
- QUICK DOCUMENT SCANNING ― This Epson ultra-fast scanner scans a single page as quickly as 5.5 seconds²; Windows and Mac compatible
- VERSATILE PAPER HANDLING ― Portable scanner scans documents up to 8.5 x 72 in; Also easily digitizes receipts and ID cards to make accounting, bookkeeping, and organizing simpler
- INTUITIVE, HIGH-SPEED SOFTWARE — Epson ScanSmart Software³ is a smart tool allowing you to easily scan, review, and save; Stay organized easily with the help of this Epson scanner
- EASY SETUP — USB-powered connect to your computer for quick and simple scanning; No batteries or external power supply required to operate portable document scanner; Standard Connectivity: USB 2.0
What “private AI” needs to mean in practice
Privacy is a set of terms and controls across the full route a document takes: the interface used to submit it, the model and endpoint that process it, any file-handling or connector features, and the provider or cloud boundary involved. A privacy claim about one route does not establish the behavior of another.
- Contract and use of data: Verify confidentiality, permitted-use and no-training commitments in the terms that apply to your organization and service. Do not infer a contractual promise from a general product description.
- Retention and deletion: Establish whether prompts, outputs, uploaded files, logs and feedback are retained, for how long, and under what exceptions. Check whether the exact model and feature qualify for ZDR.
- Processing location: Distinguish data residency from where inference actually occurs. Confirm whether the chosen region covers all relevant processing and whether cross-region routing is enabled.
- Access and audit: Determine who at the firm and provider can access material, what identity controls and audit records are available, and whether customer-managed keys or other controls are supported for the specific service.
- Workflow exposure: Review integrations, connectors, logs, files and feedback mechanisms—not just the prompt box. Minimize the material sent and consider local redaction or an in-tenancy deployment if the matter requires it.
These are procurement questions, not features guaranteed by every provider or plan. Availability may depend on organization approval, endpoint, region and configuration.
Rank #2
- FAST SPEEDS - Scans color and black and white documents a blazing speed up to 16ppm (1). Color scanning won’t slow you down as the color scan speed is the same as the black and white scan speed.
- ULTRA COMPACT – At less than 1 foot in length and only about 1. 5lbs in weight you can fit this device virtually anywhere (a bag, a purse, even a pocket).
- READY WHENEVER YOU ARE – The DS-640 mobile scanner is powered via an included micro USB 3. 0 cable allowing you to use it even where there is no outlet available. Plug it into you PC or laptop and you are ready to scan.
- WORKS YOUR WAY – Use the Brother free iPrint&Scan desktop app for scanning to multiple “Scan-to” destinations like PC, Network, cloud services, Email and OCR. (2) Supports Windows, Mac and Linux and TWAIN/WIA for PC/ICA for Mac/SANE drivers. (3)
- OPTIMIZE IMAGES AND TEXT – Automatic color detection/adjustment, image rotation (PC only), bleed through prevention/background removal, text enhancement, color drop to enhance scans. Software suite includes document management and OCR software. (4)
Retention is not always zero
OpenAI business/API
OpenAI describes configurable business-data retention, including API ZDR for qualifying organizations, alongside data residency and some in-region processing options for eligible customers. The availability and scope of those controls must be confirmed for the product surface, endpoint, region and contract in use.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Anthropic Claude commercial/API
Anthropic says ZDR arrangements apply only to eligible APIs and specified products; consumer products and several other surfaces are excluded. Some designated models require retention. For its standard API, Anthropic’s Privacy Center says inputs and outputs are automatically deleted from its backend within 30 days of receipt or generation, subject to stated exceptions and features with longer retention. That is not an unconditional deletion promise, and it is not the same as ZDR.
Rank #3
- FAST DOCUMENT SCANNING — Document scanner with feeder allows you to speed through stacks with a 50-sheet Auto Document Feeder (ADF); Efficient office scanner to help you scan more productively
- INTUITIVE, HIGH-SPEED SOFTWARE — Quickly scan with this desktop document scanner; Epson ScanSmart Software lets you easily preview scans, email files, upload to the cloud, and more; Plus, automatic file naming saves even more time
- SEAMLESS INTEGRATION — Easily incorporate your data into most document management software with the included TWAIN driver; Office document scanner integrates seamlessly with business workflows
- EASY SHARING — Duplex scanner allows you to scan straight to email or popular cloud storage2 services like Dropbox, Evernote, Google Drive, and OneDrive for simple storage and sharing
- SIMPLE FILE MANAGEMENT — Scanner allows the creation of searchable PDFs with Optical Character Recognition (OCR) and convert scans to editable Word or Excel files effortlessly; Designed for home and office document scanning
Claude through Amazon Bedrock
AWS documents its own retention modes for Bedrock. For the models identified in its documentation as requiring aws_review—currently Claude Fable 5 and Claude Fable 5.1—prompts and completions are retained within the AWS boundary for up to 30 days and may be reviewed by AWS to meet the model provider’s human-review requirement. AWS also says cross-region inference changes the destination region for retained data. Confirm the current model list and configuration because both can change.
How to assess privilege, ethics and client obligations
Technical confidentiality controls matter, but they do not decide whether a disclosure preserves privilege or work-product protection. Those questions depend on the jurisdiction, client, matter, applicable terms and actual use of the tool. Anthropic’s legal-work guidance explicitly presents its discussion as the company’s perspective, not legal advice, and says the right answer depends on those circumstances.
Rank #4
- Scanner type: Document
- Connectivity technology: USB
- With Auto Scan Mode, the scanner automatically detects what you're scanning
- Digitize documents and images
Before adopting a workflow for client material, have the firm’s own counsel assess professional-conduct duties, client agreements, protective orders and cross-border rules. Consider competence, confidentiality, supervision, verification, client consent and engagement-letter practices in the relevant jurisdiction. Vendor commitments and attorney direction may be relevant to privilege or work-product analysis, but neither guarantees a particular legal result.
A pre-use checklist for a legal team
- Choose an approved service path. Identify the specific business workspace, API deployment or cloud marketplace service. Prohibit unapproved consumer accounts for client files.
- Map the workflow. Record the interface, model, endpoint, features, file handling, integrations, connectors and any human review involved.
- Check binding terms. Confirm the applicable confidentiality and no-training commitments, DPA, retention terms, exceptions and any organization-level approvals.
- Verify settings in the actual account. Check ZDR eligibility and status where relevant, retention mode, region, cross-region processing, identity controls and access rights. Save evidence of the configuration required by firm policy.
- Minimize disclosure. Send only the material needed for the task; redact identifiers or use an approved in-tenancy or local workflow when appropriate. Inspect where uploaded files, logs and feedback may go.
- Keep a lawyer responsible for the work. Treat generated analysis as a draft. Verify quotations, citations, extracted clauses and factual statements against the source documents, and record AI use where firm policy requires it.
- Review with counsel before live matters. Resolve client-consent, engagement-letter, protective-order and jurisdiction-specific requirements before processing an actual client file.
How to choose among the documented options
- Consider OpenAI business/API when the firm can secure the eligible business or API configuration it needs and verify the contractual, retention and regional controls for its exact workflow.
- Consider Anthropic commercial/API when the intended organization, model and API feature qualify for the required controls, and the team can work within the applicable ZDR exclusions or standard retention policy.
- Consider Claude through Bedrock when the firm wants the AWS service path and can validate the selected model’s retention mode, AWS boundary and any cross-region inference against its requirements.
These are fit criteria, not a ranking. No independent comparative legal-document accuracy result is established by the provider materials described here, so privacy documentation should not be mistaken for proof that a model can perform legal review reliably. Choose the workflow only after evaluating both its data handling and the lawyer’s ability to supervise and verify its output.
Quick Recap
Best Value
- OUR MOST ADVANCED SCANSNAP. Large touchscreen, fast 45ppm double-sided scanning, 100-sheet document feeder, Wi-Fi and USB connectivity, automatic optimizations, and support for cloud services. Upgraded replacement for the discontinued iX1600
- CUSTOMIZABLE. SHARABLE. Select personalized profiles from the touchscreen. Send to PC, Mac, mobile devices, and clouds. QUICK MENU lets you quickly scan-drag-drop to your favorite computer apps
- STABLE WIRELESS OR USB CONNECTION. Built-in Wi-Fi 6 for the fastest and most secure scanning. Connect to smart devices or cloud services without a computer. USB-C connection also available
- PHOTO AND DOCUMENT ORGANIZATION MADE EFFORTLESS. Easily manage, edit, and use scanned data from documents, receipts, photos, and business cards. Automatically optimize, name, and sort files
- AVOIDS PAPER JAMS AND DAMAGE. Features a brake roller system to feed paper smoothly, a multi-feed sensor that detects pages stuck together, and skew detection to prevent paper damage and data loss
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
