Spellbook

AI contract drafting and review directly inside Microsoft Word

PrivateNode

AI specialists for UK professional services — employment law, tax, immigration, and more with zero data retention

Spellbook

Moderate

15/25

PrivateNode

Strong

18/25

Score Breakdown

DimensionSpellbookPrivateNode

Data Residency

Where is your data stored and processed?

Spellbook: Data processed in US and Canada. Zero retention policy with OpenAI API prevents document storage for AI training. Limited EU data residency options may concern European law firms.

PrivateNode: All infrastructure hosted on Hetzner servers in Germany (EU). Zero US cloud dependency — no AWS, Azure, or GCP. Data stays within the EU at all times.

3/5

Data processed in US and Canada. Zero retention policy with OpenAI API prevents document storage for AI training. Limited EU data residency options may concern European law firms.

5/5

All infrastructure hosted on Hetzner servers in Germany (EU). Zero US cloud dependency — no AWS, Azure, or GCP. Data stays within the EU at all times.

Legal Jurisdiction

Which laws govern the company and your data?

Spellbook: Incorporated in Ontario, Canada. Canadian privacy law (PIPEDA) provides reasonable protections. Canadian jurisdiction is generally considered acceptable for legal professionals handling confidential client data.

PrivateNode: UK limited company (Twakka Ltd, England & Wales). UK GDPR-equivalent jurisdiction with EU adequacy decision. Not subject to US CLOUD Act. Outside EEA but UK adequacy provides smooth data transfer basis.

3/5

Incorporated in Ontario, Canada. Canadian privacy law (PIPEDA) provides reasonable protections. Canadian jurisdiction is generally considered acceptable for legal professionals handling confidential client data.

3/5

UK limited company (Twakka Ltd, England & Wales). UK GDPR-equivalent jurisdiction with EU adequacy decision. Not subject to US CLOUD Act. Outside EEA but UK adequacy provides smooth data transfer basis.

Data Retention & Training

Is your data used for model training?

Spellbook: Strong data minimisation posture with zero data retention policy through OpenAI's API. Documents are not stored beyond the session, reducing exposure of sensitive legal content.

PrivateNode: Explicit zero data retention policy. Conversations are not stored after session ends. No user data used for model training. Single-tenant architecture provides full isolation.

4/5

Strong data minimisation posture with zero data retention policy through OpenAI's API. Documents are not stored beyond the session, reducing exposure of sensitive legal content.

5/5

Explicit zero data retention policy. Conversations are not stored after session ends. No user data used for model training. Single-tenant architecture provides full isolation.

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Spellbook: Holds SOC 2 Type II certification. Certification portfolio is limited for a tool handling highly sensitive legal documents; ISO 27001 certification would strengthen the trust posture.

PrivateNode: No SOC 2 or ISO 27001 certifications publicly confirmed. Hosting provider (Hetzner) holds ISO 27001 certification. Early-stage company; formal certifications would strengthen trust posture.

2/5

Holds SOC 2 Type II certification. Certification portfolio is limited for a tool handling highly sensitive legal documents; ISO 27001 certification would strengthen the trust posture.

1/5

No SOC 2 or ISO 27001 certifications publicly confirmed. Hosting provider (Hetzner) holds ISO 27001 certification. Early-stage company; formal certifications would strengthen trust posture.

Regulatory Fit

Suitability for regulated industries and professional services

Spellbook: Good fit for North American law firms and corporate legal departments. Zero data retention aligns with attorney-client privilege requirements. Limited certifications may require additional due diligence for EU or highly regulated clients.

PrivateNode: Strong fit for UK regulated professional services. Domain-specific specialists trained on authoritative legislation sources. Zero data retention addresses key GDPR concerns. Suitable for SRA-regulated solicitors and FCA-regulated advisers.

3/5

Good fit for North American law firms and corporate legal departments. Zero data retention aligns with attorney-client privilege requirements. Limited certifications may require additional due diligence for EU or highly regulated clients.

4/5

Strong fit for UK regulated professional services. Domain-specific specialists trained on authoritative legislation sources. Zero data retention addresses key GDPR concerns. Suitable for SRA-regulated solicitors and FCA-regulated advisers.

Total Score

15/25

18/25

Best For

Spellbook

Best for regulated industries (ICO, SRA); privacy-conscious teams who need strong data retention controls.

PrivateNode

Best for privacy-conscious teams who need strong data retention controls; enterprises requiring SSO integration.

Detailed Comparison

PrivateNode vs Spellbook: Trust & Compliance Comparison

PrivateNode (PrivateNode, GB) scores 18/25 overall with a Silver (Strong) trust badge. AI specialists for UK professional services — employment law, tax, immigration, and more with zero data retention. Spellbook (Rally Legal, CA) scores 15/25 with a Bronze (Moderate) trust badge. AI contract drafting and review directly inside Microsoft Word.

Dimension-by-Dimension Breakdown

#### Data Residency

PrivateNode leads with 5/5 vs 3/5.

●PrivateNode (5/5): All infrastructure hosted on Hetzner servers in Germany (EU). Zero US cloud dependency — no AWS, Azure, or GCP. Data stays within the EU at all times.

●Spellbook (3/5): Data processed in US and Canada. Zero retention policy with OpenAI API prevents document storage for AI training. Limited EU data residency options may concern European law firms.

#### Legal Jurisdiction

Both score equally at 3/5.

●PrivateNode (3/5): UK limited company (Twakka Ltd, England & Wales). UK GDPR-equivalent jurisdiction with EU adequacy decision. Not subject to US CLOUD Act. Outside EEA but UK adequacy provides smooth data transfer basis.

●Spellbook (3/5): Incorporated in Ontario, Canada. Canadian privacy law (PIPEDA) provides reasonable protections. Canadian jurisdiction is generally considered acceptable for legal professionals handling confidential client data.

#### Data Retention & Training

PrivateNode leads with 5/5 vs 4/5.

●PrivateNode (5/5): Explicit zero data retention policy. Conversations are not stored after session ends. No user data used for model training. Single-tenant architecture provides full isolation.

●Spellbook (4/5): Strong data minimisation posture with zero data retention policy through OpenAI's API. Documents are not stored beyond the session, reducing exposure of sensitive legal content.

#### Certifications

Spellbook leads with 2/5 vs 1/5.

●PrivateNode (1/5): No SOC 2 or ISO 27001 certifications publicly confirmed. Hosting provider (Hetzner) holds ISO 27001 certification. Early-stage company; formal certifications would strengthen trust posture.

●Spellbook (2/5): Holds SOC 2 Type II certification. Certification portfolio is limited for a tool handling highly sensitive legal documents; ISO 27001 certification would strengthen the trust posture.

#### Regulatory Fit

PrivateNode leads with 4/5 vs 3/5.

●PrivateNode (4/5): Strong fit for UK regulated professional services. Domain-specific specialists trained on authoritative legislation sources. Zero data retention addresses key GDPR concerns. Suitable for SRA-regulated solicitors and FCA-regulated advisers.

●Spellbook (3/5): Good fit for North American law firms and corporate legal departments. Zero data retention aligns with attorney-client privilege requirements. Limited certifications may require additional due diligence for EU or highly regulated clients.

Certifications at a Glance

Certification	PrivateNode	Spellbook
SOC 2 Type II	No	Yes

Overall Verdict

PrivateNode has a clear trust advantage, scoring 18/25 compared to Spellbook's 15/25. PrivateNode particularly excels in data residency, data retention & training, regulatory fit.

Frequently Asked Questions

Which is better for EU compliance, Spellbook or PrivateNode?

Spellbook has a TrustKit score of 15/25 while PrivateNode scores 18/25. PrivateNode currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Spellbook and PrivateNode compare on data residency?

Spellbook scores 3/5 for data residency (Data processed in US and Canada. Zero retention policy with OpenAI API prevents document storage for AI training. Limited EU data residency options may concern European law firms.), while PrivateNode scores 5/5 (All infrastructure hosted on Hetzner servers in Germany (EU). Zero US cloud dependency — no AWS, Azure, or GCP. Data stays within the EU at all times.).

Are Spellbook and PrivateNode GDPR compliant?

Both tools are assessed across five compliance dimensions. Spellbook has a regulatory fit score of 3/5 and PrivateNode scores 4/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool