108 Total
43 High severity
56 Medium severity
9 Low severity

Key Facts

Against what must you defend Harvey AI?
You must defend Harvey AI against any third-party claim arising from or relating to Your Input or Your Customer Data, and indemnify Harvey AI for resulting damages, costs, and attorneys' fees.
What must you indemnify Harvey AI for?
You must defend Harvey AI against any third-party claim arising from or relating to Your Input or Your Customer Data, and indemnify Harvey AI for resulting damages, costs, and attorneys' fees.
Who owns Your Content?
Harvey AI recognizes that, as between the parties, you own Your Content.
Will Harvey AI refund prepaid unused fees?
You may terminate the Agreement and any operative order form upon 3 business days' notice, and Harvey AI will refund any prepaid unused fees for the applicable service.
What is Harvey AI's total liability for claims relating to data breaches of Your Customer Data?
For claims relating to data breaches of Your Customer Data caused by Harvey AI's breach of its obligations under the Security Addendum or the DPA, Harvey AI's total liability will not exceed the greater of two times the amount actually paid or $500,000.
Will liability exceed the greater of the amount actually paid or $250,000?
Neither party's total aggregate liability to the other party or any third party for all claims will exceed the greater of the amount actually paid or payable to Harvey AI in the prior 12 months or $250,000.
What will Harvey AI defend you against?
Harvey AI will defend you against any third-party claim alleging that the Service, when used in accordance with the Terms and Documentation, infringes any intellectual property right of that third party.
When will Harvey AI defend you against third-party claims?
Harvey AI will defend you against any third-party claim alleging that the Service, when used in accordance with the Terms and Documentation, infringes any intellectual property right of that third party.
When may Harvey AI suspend your access to the Service?
Harvey AI may suspend your access to the Service if any undisputed amount of your fees is past due, after providing you written notice of late payment.
When will Harvey AI securely delete remaining Customer Data or Content?
Within 30 days of termination, Harvey AI will securely delete any remaining Customer Data or Content unless otherwise instructed by you.
Stay ahead of the changes
Track Harvey AI and get the diff the day its terms change.
Summary

This document sets the rules for using Harvey AI's service. Harvey AI cannot use your data to train its AI models, and you keep ownership of your own content. If you disagree with any changes, you can cancel with 3 business days' notice and get a refund of any prepaid unused fees, but any disputes must go through arbitration rather than court.

Analysis

This Agreement establishes the terms under which Harvey AI provides its Service to customers, defining a data processing framework in which Harvey AI receives a non-exclusive, worldwide, royalty-free license to process Customer Data and Inputs solely to deliver the Service, with an explicit prohibition on using that data to train AI models. Liability is capped bilaterally at the greater of 12 months of fees paid or $250,000, with a separate elevated cap of two times fees paid or $500,000 applying to qualifying data breach claims under the Security Addendum or DPA. Indemnification obligations run in both directions: customers bear the burden of third-party claims arising from their submitted content, while Harvey AI bears the burden of third-party IP infringement claims when the Service is used as specified. Customers retain ownership of their Content as between the parties, and Harvey AI must securely delete Customer Data and Content within 30 days of termination. All disputes, including threshold arbitrability questions, are resolved exclusively through binding arbitration.

What this means for you

Harvey AI is contractually prohibited from using your Customer Data or Content to train AI models, and you retain ownership of your Content. Harvey AI must delete your remaining data within 30 days after termination unless you direct otherwise. Your financial recovery for any claim is capped at the greater of 12 months of fees paid or $250,000, even if your actual harm is greater. You are responsible for defending Harvey AI against third-party claims arising from content or data you submit. If Harvey AI updates the Agreement, it must give you at least 15 days' advance notice, and you may terminate with 3 business days' notice to receive a refund of prepaid unused fees for the applicable service.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Featured, High severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

108 provisions
12 featured
22 clause types
43 high severity
General Contract Terms 24 5 high
Show all 24 general contract terms provisions
Enforcement Actions 1 1 high
Restricted or Prohibited Content/Industries 1 1 high
Disclosure and Transparency Requirements 1
Privacy Rights 1
Refunds & Chargebacks 1
Stay ahead of the changes

Monitoring

Harvey AI has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Access Credentials May Not Be Shared and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
CFAA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured July 11, 2026 03:57 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000504
Version ID CA-V-004723
SHA-256 1d9e48d455ac5024238a11813bc22d4a0522b870f0b746468ac0b9955c0526b3
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans