Legal AI consolidation reached another marker on 29 July, when the Swedish supplier Legora agreed to buy Wexler, a British start-up whose software pulls facts out of large litigation document sets. It was Legora's fifth acquisition of 2026, paid for on the back of a 600 million dollar funding round raised earlier in the year. For a firm of eight fee earners running two or three AI subscriptions, the deal matters less than the pattern behind it. The suppliers are buying each other, and the contract you signed was written by a company that might not be the one servicing it a year from now.

Why the buying is happening

The economics push in one direction. Building a legal AI product means paying for model access, for engineers and for the long sales effort needed to reach a profession that buys slowly. Smaller specialists reach a point where they have solved one narrow problem well, such as verifying facts across a disclosure set, without the capital to build everything around it. The larger platforms have raised money at valuations that only make sense if they end up owning the whole workflow rather than one slice of it. Buying a team of eighteen people who have already cracked a problem beats spending two years cracking it again. This is happening across the market, and the research incumbents, the platform vendors and the general model providers are all doing versions of the same thing.

What changes when your supplier is bought

Little changes on the day, which is what lulls firms into ignoring it. The effects arrive over the following year. Pricing gets rebased when the smaller product is folded into a larger platform, and firms that bought a narrow tool at a narrow price find themselves quoted for a suite. Support moves to a different team in a different country. The product roadmap you were promised gets absorbed into somebody else's, and the feature you were waiting for either arrives inside a higher tier or quietly disappears. Your data moves too, onto different infrastructure, under a different security regime, with a different list of sub-processors reading it. None of that is improper. It is simply the ordinary consequence of a change of ownership, and it lands on the firm that did not read for it.

The questions to ask before the next renewal

Take out the contract for every AI tool that touches client work and look for four things. Whether a change of control gives you a right to terminate, or at least to be told. Whether you can export your data, and your prompt history, in a usable format rather than a screen dump. Whether pricing is fixed for a term or open to revision on notice. Whether the supplier has to tell you before it adds or changes a sub-processor, because a new owner brings a new set of them. If the answers are thin, that is worth raising at renewal rather than after the announcement. Suppliers keen to keep a professional client will often concede notice rights and an exit assistance clause when asked before signature, and almost never afterwards.

Your duties stay where they are

An acquisition does not move any part of your regulatory position. The SRA Code of Conduct for Firms requires you to keep effective governance over the services your firm provides, and outsourcing work to a third party leaves you answerable for it. Confidentiality is the same. Client information sitting inside a tool that has changed hands is still client information you are responsible for, and the duty runs to whoever now holds it. Under UK GDPR the new owner becomes your processor, so your record of processing activities, your privacy notice and any data protection impact assessment need updating to name the right company. That is a short administrative task if you catch it, and an awkward conversation with a client if you do not.

The practical answer is a supplier register. One page per tool, holding what it does, what data it touches, when the contract ends, what the notice period is and who owns the company today. Review it twice a year and read the trade press often enough to notice when a name on the list appears in a deal announcement. Firms that keep this discipline treat an acquisition as a diary entry. Firms that do not find out when the invoice changes.

The governance duty behind all of this sits in the SRA Code of Conduct for Firms, which holds you responsible for the services your firm delivers whichever way they are sourced.

If you are not sure what your AI contracts say about ownership, data and exit, we read them with you and build the supplier register in an afternoon: see how it works.