Overview
RegWatch Legal - AI legal workspace
RegWatch Legal - AI legal workspace
Cited answers over your contracts
AI-powered contract redlining
Tabular review across many documents
100+ built-in legal workflows
RegWatch Legal Private VPC is the self-managed edition of the RegWatch platform, deployed into your own AWS account on Amazon EKS with a Helm chart, so everything runs inside your VPC under your security and compliance controls.
WHAT YOU GET This is the full RegWatch platform. It includes RegWatch Legal, an AI workspace for legal work that reads your contracts and documents, answers questions with page-level citations, drafts and redlines Word documents with real tracked changes, runs tabular reviews across entire document sets, organises matters into project workspaces, and ships more than 100 built-in workflow templates across 11 practice areas, with optional US case-law research. It also includes RegWatch's AI regulatory-compliance monitoring, which tracks regulatory sources and converts updates into structured obligations with owners, deadlines, and linked evidence.
WHAT RUNS WHERE In your cluster and account (the data plane): the application API, the AI worker and scheduler, the Node legal service, and the web interface, backed by PostgreSQL 16 with the pgvector extension, Redis, and Amazon S3 object storage for documents and evidence. Leaves your account (a disclosed external dependency): the services call an LLM provider, Anthropic Claude by default and with support for other providers, for AI reasoning and embeddings. These calls are required for the AI features; the deployment is not air-gapped. You control egress through your own network policy and allow-list.
SECURITY AND ARCHITECTURE Strict per-organisation isolation is enforced at the database layer via PostgreSQL row-level security. SAML single sign-on and role-based access control gate the legal workspace and the compliance product. Uploads are validated by file signature, connector credentials are encrypted at rest, and all data is encrypted in transit and at rest under your own keys and retention. Services are stateless and horizontally scalable. AI answers always cite their sources; treat them as a first draft for professional review, not legal advice.
DEPLOYMENT Install with standard Helm commands against your EKS cluster. You provide connection details for PostgreSQL (with pgvector), Redis, an S3 bucket, and API keys for the LLM and embeddings providers via Helm values and Kubernetes secrets. The database schema is created and upgraded automatically by a migration job. Full prerequisites and step-by-step instructions are in the usage instructions and accompanying documentation.
COMMERCIALS AND SUPPORT Private VPC is offered as an annual contract. Multi-year terms, custom scope, and enterprise support are arranged through AWS Marketplace private offers. Support is provided by the RegWatch team with an assigned account manager.
This listing is for the self-managed edition. For the fully hosted service, see the RegWatch Legal SaaS listing.
Highlights
- Runs in your VPC: the entire platform deploys to your Amazon EKS cluster via Helm, under your network, your KMS keys, and your retention. Contracts, matters, and evidence stay in your own AWS account.
- The full RegWatch platform: the AI legal assistant with cited answers, real Word redlining, tabular review, project workspaces, 100+ workflows, and US case-law research, plus regulatory-compliance monitoring.
- Enterprise controls: SAML SSO, PostgreSQL row-level multi-tenant isolation, role-based access, full audit logging, and encryption in transit and at rest under your own keys.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
|---|---|---|
Legal Private VPC | Annual contract for the full RegWatch Legal platform, self-managed in your own AWS account on Amazon EKS via Helm. Includes the AI legal assistant and regulatory-compliance monitoring. | $24,500.00 |
Vendor refund policy
All sales are final. To request a refund or raise a billing issue, email support@regwatch.io within 30 days of purchase. Approved refunds are issued at RegWatch's discretion for cases such as duplicate charges or documented non-use. For annual contracts, contact us before renewal to make changes.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Helm chart on Amazon EKS
- Amazon EKS
- Amazon EKS Anywhere
Helm chart
Helm charts are Kubernetes YAML manifests combined into a single package that can be installed on Kubernetes clusters. The containerized application is deployed on a cluster by running a single Helm install command to install the seller-provided Helm chart.
Version release notes
RegWatch Private VPC 1.0.6 for Amazon EKS (Helm delivery). Deploys the api, web, worker, scheduler, and legal-api services with automatic database migrations.
Additional details
Usage instructions
PREREQUISITES
- An Amazon EKS cluster (Kubernetes 1.27+) with kubectl and Helm 3.19+ configured.
- PostgreSQL 16 with the pgvector extension (Amazon RDS/Aurora or in-cluster) and a Redis 7 endpoint.
- An Amazon S3 bucket for evidence/report storage.
- An IAM role for service accounts (IRSA) granting the pods S3 access to that bucket and AWS License Manager checkout permissions (license-manager:CheckoutLicense, CheckInLicense, ExtendLicenseConsumption, GetLicense). The containers use the AWS SDK default credential chain - do NOT configure static AWS access keys.
- API keys: an Anthropic API key (Claude) and an embeddings-provider API key (OpenAI).
- Outbound HTTPS egress allowed from the worker pods to api.anthropic.com and the embeddings provider endpoint.
-
SUBSCRIBE & PULL After subscribing, authenticate Helm to the AWS Marketplace registry: aws ecr get-login-password --region us-east-1 | helm registry login --username AWS --password-stdin 709825985650.dkr.ecr.us-east-1.amazonaws.com
-
CONFIGURE VALUES Create a values override file (my-values.yaml). Set: database URL (PostgreSQL+pgvector, postgresql+asyncpg scheme); Redis URL; S3 region/buckets; application secrets (AUTH_SECRET, ANTHROPIC_API_KEY, OPENAI_API_KEY, KMS key ref, download-signing and legal-connector secrets) preferably as a pre-created Kubernetes Secret referenced via secrets.existingSecret; the public authUrl/apiPublicUrl/corsAllowedOrigins; and ingress host/TLS. Grant AWS access exclusively via IAM roles for service accounts: annotate the chart's service account with your IAM role, e.g. serviceAccount.annotations."eks.amazonaws.com/role-arn"=arn:aws:iam::<account>:role/<role>. The chart has no fields for static AWS credentials and the containers never use them. Optional integrations (Sentry, email, SSO/SAML, OpenTelemetry) are enabled by setting their values; leave unset to disable. Image references default to this product's AWS Marketplace ECR repositories.
-
INSTALL helm install regwatch oci://709825985650.dkr.ecr.us-east-1.amazonaws.com/dynamiq/legal/regwatch-helm --version 0.1.8 --namespace regwatch --create-namespace -f my-values.yaml This deploys the api, web, worker, scheduler, and legal-api services. Database schema is created and upgraded automatically via a pre-install migration job.
-
SEED REFERENCE DATA (optional) helm upgrade regwatch ... --set seed.enabled=true runs a post-install job that imports regulatory reference data.
-
ACCESS & FIRST LOGIN Point your DNS/ingress at the web service, open the configured URL, and create the first administrator account. Configure SAML SSO if required.
-
UPGRADE helm upgrade regwatch oci://709825985650.dkr.ecr.us-east-1.amazonaws.com/dynamiq/legal/regwatch-helm --version <new> -f my-values.yaml - migrations run automatically as a pre-upgrade step.
SUPPORT Email support@regwatch.io . Architecture, sizing, and troubleshooting guidance are in the chart README inside the package and in docs/aws-marketplace/install-eks.md.
Support
Vendor support
Email support@regwatch.io for help with RegWatch Legal Private VPC, including deployment, configuration, upgrades, and troubleshooting on Amazon EKS. Website: https://www.regwatch.io . Enterprise buyers receive an assigned account manager and priority support via private offer.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.