Written by Mike Pearlstein, CISSP, CEO of Fusion Computing Limited. Helping Canadian businesses build and manage secure IT infrastructure since 2012 across Toronto, Hamilton, and Metro Vancouver.
Three AI tools, three trust models, one decision a Canadian small firm has to make in 2026. Microsoft 365 Copilot, Thomson Reuters CoCounsel, and Harvey AI sit on the shortlist of nearly every 5-to-25-lawyer firm we advise. Across our 7 Ontario and British Columbia law-firm engagements in the last six months, each tool fit a different slice of the privilege-and-residency puzzle.
Fusion Computing deploys and secures Microsoft 365 Copilot for Canadian law firms, pairing each rollout with an acceptable-use policy and data-governance guardrails.
The LSO’s 2024 white paper on licensee use of generative AI still frames how Rule 3.1-2 competence meets Rule 3.3-1 confidentiality, so picking the wrong tool creates a compliance problem more than a UX problem. This comparison is a chapter inside our AI deployment guide for Canadian law firms.
Key Takeaways
- Microsoft sells two Copilot SKUs at very different prices. Copilot Business lists at C$28.50 per user per month on annual billing, promotionally C$24.43 for the first year until September 30, 2026, and it requires a Microsoft 365 Business plan underneath. A firm on E3 or E5 buys Copilot Enterprise at C$40.70 instead (Microsoft Canada, August 2026).
- Copilot is the only one of the three with a Canadian-tenant residency guarantee. It is now a Microsoft 365 Core Service, and Canada carries all three durable commitment methods for it: Product Terms, Multi-Geo, and Advanced Data Residency.
- CoCounsel (Thomson Reuters) ships legal-specific skills like deposition prep and contract review, and is now sold bundled with Westlaw rather than standalone. Configurator pricing for firms up to 10 attorneys sits in the region of US$640 per attorney per month. Larger firms go back to rep negotiation.
- Harvey AI lists SOC 2 Type II, ISO 27001, ISO 27701, and ISO 42001, the AI-management-system standard. Processing is offered in the US, the EU and Switzerland, and Australia. There is still no Canadian region and no public price (Harvey.ai, August 2026).
- None of the three is a turnkey LSO compliance solution. Each needs a written AI policy naming the tool, its data flows, and the Rule 3.3-1 confidentiality protocol.
Snapshot: how the three vendors compare
The table below is the spine of this article. Every figure was re-checked against the vendor’s own Canadian page in August 2026. Where a vendor publishes no number for Canada, we say so rather than guessing.
| Dimension | Microsoft 365 Copilot | CoCounsel | Harvey AI |
|---|---|---|---|
| Canadian tenant residency. | Yes. Product Terms, Multi-Geo and Advanced Data Residency all cover Canada. | Azure-hosted. A Canadian region has to be written into the contract. | No Canadian region. US, EU and Switzerland, or Australia only. |
| Rule 3.3-1 confidentiality fit. | Strong with Purview labels on privileged content. | Strong. Matter-scoped workspaces. | Strong technically. Residency caveat for Ontario clients. |
| Security certifications. | SOC 2 Type II, ISO 27001, ISO 27018. | SOC 2 Type II via Thomson Reuters. | SOC 2 Type II, ISO 27001, ISO 27701, ISO 42001. |
| Per-seat monthly cost, verified August 2026. | C$28.50 Business list, C$40.70 Enterprise. | About US$640 per attorney, bundled with Westlaw, up to 10 attorneys. | Not published. Quote only. |
| Best for. | Firm-wide drafting, Outlook and Teams. | Litigators and contract-heavy practices. | Larger firms with US or EU caseloads. |
| Key risk. | SharePoint oversharing without Purview. | Westlaw bundle lock-in and step-up pricing. | CLOUD Act exposure on the US region. |
1. Microsoft 365 Copilot for Microsoft 365
Microsoft 365 Copilot is the AI assistant embedded in Word, Outlook, Teams, Excel, and SharePoint. For an Ontario or British Columbia firm already on Business Premium or E5, it’s the path of least resistance, because the tenant, the identity model and the audit log are already in place.
Copilot is also the only one of the three publishing a Canadian list price at all. Watch which SKU you are reading. Microsoft Canada lists Copilot Business at C$28.50 per user per month on annual billing, promotionally C$24.43 for a first year until September 30, 2026, and C$34.20 on monthly billing. That SKU needs a Microsoft 365 Business plan underneath it.
A firm on E3 or E5, which is where the privilege controls in this article live, buys the other SKU. Copilot Enterprise lists at C$40.70 per user per month. Budgeting an E5 firm at the promotional Business rate understates the licence line by about 67 percent.
Residency got materially stronger this year. Copilot and Copilot Chat are now Microsoft 365 Core Services carrying Product Terms, Multi-Geo and Advanced Data Residency coverage in Canada, with data centres in Toronto and Quebec City. Purview Information Protection joined that commitment set in February 2026. Microsoft also states in writing that prompts, responses and Graph-accessed data are not used to train foundation models.
The real privilege story sits at the configuration layer. Copilot reads whatever a logged-in user can read, so a SharePoint site with broken permissions is a one-prompt-away breach. Pairing Copilot with Purview sensitivity labels on privileged content is the control that closes that loop. Our Copilot oversharing playbook covers the lockdown sequence, and the general Copilot vs ChatGPT vs Claude comparison covers non-legal context.
Pros: The tightest Outlook and Teams integration of the three. A contractual Canadian residency commitment your firm can point a client to. A licence your existing IT admin already knows how to buy and revoke. Published pricing.
Cons: Not legal-specific, so you build the prompts and templates yourself. The two-SKU split catches firms out at renewal, because a promotional Business quote does not apply to an E3 or E5 tenant. Purview labels have to be in place before rollout to be safe at scale. If your DMS is NetDocuments or iManage, you’ll need the connector layer covered in our NetDocuments and iManage Copilot integration guide.
Best for: A 5-to-25-lawyer Canadian firm that already runs Microsoft 365, wants firm-wide drafting and email triage, and has either an internal IT lead or a CISSP-led MSP that can stand up Purview properly.
2. Thomson Reuters CoCounsel
CoCounsel is the legal AI assistant from Thomson Reuters, the publisher behind Westlaw and Practical Law. It’s built around legal-research skills (deposition summaries, contract review memos, clause extraction, witness prep) rather than generic productivity tasks. The model runs on Microsoft Azure, giving it a path to a Canadian region, and Thomson Reuters sells it through Canadian field reps.
Pricing moved in 2026, and it moved against the small firm. CoCounsel is no longer sold standalone. It ships inside a Westlaw bundle, and Thomson Reuters now runs an online configurator that quotes firms of up to 10 attorneys directly. Published configurator pricing for Westlaw Advantage with CoCounsel Essentials lands in the region of US$640 per attorney per month on a one-year term.
Set that against Copilot before you shortlist. This is roughly twenty to thirty times the Canadian Copilot seat, not the four-to-six multiple we used to quote from 2025 rep conversations. Above 10 attorneys the configurator closes and you are back to negotiating against an existing Westlaw contract. Amy Salyzyn’s 2025 Slaw.ca primer recommends piloting any legal-specific AI tool before standardizing on it. We’d second that.
“We piloted CoCounsel against Copilot on a six-week clause-review trial. CoCounsel was sharper on litigation-style work, but Copilot won on what we actually do day-to-day: drafting, redlining, and Outlook triage. Residency in Canada and a price we could read off a public page sealed it.”
Pros: Legal-trained skills (deposition prep, clause extraction, Westlaw retrieval). Matter-scoped workspaces. Strong vendor reputation in Canadian litigation circles.
Cons: Sold only inside a Westlaw bundle, so the AI line and the research line move together. Self-serve pricing stops at 10 attorneys. The Canadian-region claim is real but has to be asked for in the contract.
Best for: Litigation boutiques, mid-size commercial-law firms, and any practice where deposition or contract review volume justifies a specialist tool over a general one.
3. Harvey AI
Harvey is the AI platform that put legal AI on the Bay Street radar. It serves large firms, in-house teams at multinationals, and a growing roster of professional-services shops.
Per Harvey’s security page, the product carries SOC 2 Type II, ISO 27001, ISO 27701, and ISO 42001, plus GDPR and CCPA coverage. ISO 42001 is the AI-management-system standard, and it is the newest signal on that list for a firm evaluating AI governance.
What Harvey still doesn’t offer in August 2026 is a Canadian region. Its stated localization options are the EU and Switzerland, or Australia, on top of the US default. A Canadian firm therefore routes through US tenancy, putting data inside CLOUD Act jurisdiction.
For a Bay Street commercial firm with US M&A workflows, that’s usually acceptable. For a Toronto family-law boutique handling child-protection files, it usually isn’t. Pricing isn’t public and the buying motion is enterprise sales, so a 12-lawyer firm rarely makes the shortlist.
Pros: Strongest reputation among AmLaw 100 firms. The deepest certification stack of the three, including ISO 42001 for AI management. Built specifically for legal workflows.
Cons: No Canadian region, and none announced. Enterprise sales motion that’s a poor fit for small firms. No public pricing.
Best for: Larger Canadian firms with significant US or EU caseloads, and a procurement team that can negotiate residency terms in the master agreement.
Editorial pick: what FC recommends and why
Where this usually goes next
Reading up on the tools is the easy part. The teams that get value out of Copilot, Claude or ChatGPT are the ones who sort out permissions first, agree what may and may not be pasted in, and train people on their own processes rather than a generic demo.
How we run AI enablement and training
Book a 20-minute call
Senior engineer, not sales. If there is nothing worth doing we will tell you.
Fusion Computing deploys and supports all three stacks, so the pick below is practice-based, not a reseller preference. Ask us to price all three against your firm → and we will map the shortlist to your matter mix.
FIELD NOTE FROM MIKE
A first-person field observation, drawn from anonymized client data. Of the seven Ontario and British Columbia firms we’ve sourced AI tooling for in the last six months, five Toronto, one Hamilton, one Vancouver, ranging 6 to 22 lawyers, six picked Microsoft 365 Copilot on E5 with Purview sensitivity labels.
The seventh, a 21-lawyer litigation boutique, ran a CoCounsel proof of concept and stayed. Zero picked Harvey. The single question that decided five of those engagements was “Can you point to the data residency clause in writing?”
Here is the correction we now make on every quote. Sitting on E5 for the Purview controls means buying Copilot Enterprise at C$40.70, not the C$24.43 Business promotion the partner has usually already found online. We tracked that gap at about C$195 per lawyer per year, roughly C$2,340 on a 12-lawyer firm. In our practice it is the most common budget surprise.
Copilot may not be the smartest model on the market. The reason for the pick is that the firm already pays for Microsoft 365, already trusts the residency boundary, and already has a tenant their MSP can lock down. We’d revisit CoCounsel the moment deposition prep becomes a weekly task.
Mike Pearlstein, CISSP, Fusion Computing. Based on FC engagement data, Q4 2025 to Q2 2026.
That pick only holds if the firm pairs the deployment with a written AI policy naming the tool, the data flows, and the human-review checkpoint. Without that, all three vendors are equally risky. Use the LSO-specific AI policy template for the language and our general AI acceptable-use policy guide for the structural elements.
What your firm needs before rollout: the 2026 procurement checklist
The licence line is where most Canadian firms get their first surprise, so start there. The chart shows what a seat costs on each Copilot SKU sold in Canada in August 2026.
- Confirm the SKU before you budget. An E3 or E5 tenant buys Copilot Enterprise, and the promotional Business rate does not apply.
- Get residency in writing. For Copilot that means ADR or Multi-Geo on the tenant. For CoCounsel it means a Canadian region named in the master agreement.
- Label privileged content in Purview first. Labels applied after go-live are remediation. Applied before, they are the Rule 3.3-1 control.
- Write the AI policy before the first prompt. Name the sanctioned tool, the human-review checkpoint, and the citation-verification step the Ontario Superior Court practice directions expect.
- Record who approved and who supervises. Rule 3.1-2 competence is evidenced by records, and those records are what a regulator or an insurer asks for.
- Diarize the renewal. The Copilot Business promotion ends September 30, 2026, and CoCounsel self-serve pricing closes above 10 attorneys.
Further reading and primary sources
- Law Society of Ontario white paper, Licensee use of generative artificial intelligence (April 2024). How the Rules of Professional Conduct apply to generative AI.
- LSO Technology Resource Centre. LSO checklists and technology guidance for licensees.
- Federation of Law Societies of Canada Model Code of Professional Conduct. The harmonized rules behind all 14 law societies.
- Ko v. Li, 2025 ONSC 6785 (CanLII). The Ontario contempt decision arising from AI-generated fake citations.
- LawPRO on the Ontario Superior Court AI practice directions (November 2025). What the civil and family directions expect of counsel.
- Mata v. Avianca, Inc. docket (CourtListener). The US precedent behind the global wave of AI-citation sanctions.
HOW THIS GUIDANCE WAS ASSEMBLED
This article draws on FC’s anonymized client data across multiple 2025-26 Ontario and British Columbia law-firm engagements. It adds a named-client moment with the principal of a Toronto litigation boutique whose Copilot rollout we led through full LSO Rule 3.3-1 review.
It also draws on an original survey of 11 partners and 9 associates conducted during 2026 Q1 onboarding calls. Behind that sits an FC internal benchmark covering Copilot, Purview, and Entra ID deployment timelines across 18 small-firm rollouts.
Every price, certification and external source here was re-verified live in August 2026.
Layered over all of it is first-person field observation from CEO Mike Pearlstein’s 12-year practice supporting regulated Canadian SMBs through privilege-sensitive technology change.
Frequently asked questions
Is Microsoft 365 Copilot allowed under LSO Rule 3.3-1 for a Canadian law firm?
Copilot can be deployed in a way that supports Rule 3.3-1, because the rule applies to the lawyer’s conduct rather than the tool. The firm needs a written AI policy, Purview labels on privileged content, and Canadian tenancy through Advanced Data Residency. Microsoft commits in writing that prompts are not used to train foundation models, the contractual baseline the LSO 2024 white paper implies.
Does CoCounsel keep Canadian client data in Canada?
CoCounsel runs on Microsoft Azure, which makes a Canadian region technically available. Thomson Reuters keeps residency commitments off public marketing pages, so ask the rep for the clause in writing and add it to the master agreement. Otherwise the default routing may send matter content through US infrastructure, raising CLOUD Act exposure for Ontario files. Ask before signing, because CoCounsel now ships inside a Westlaw bundle and that contract is harder to reopen.
What does Harvey AI cost for a small Canadian law firm?
Harvey keeps pricing off the website, and the enterprise sales motion suits firms over 25 lawyers. From public reporting and our sourcing conversations, a Harvey seat runs at multiples of a Copilot seat, and Copilot Enterprise is itself C$40.70 per user per month in August 2026. With no Canadian region on offer, the shortlist for most Canadian small firms collapses to Copilot or CoCounsel.
Can a Canadian law firm just use ChatGPT instead?
ChatGPT Business and Enterprise offer contractual non-training commitments, but neither offers Canadian data residency by default. Pasting privileged content into a free ChatGPT account is the failure mode the LSO 2024 white paper flags. For a general-purpose tool, Copilot is the safer Canadian default because the tenant residency story is more mature. Our general Copilot vs ChatGPT vs Claude comparison covers the trade-offs.
How do these tools integrate with NetDocuments or iManage?
Microsoft 365 Copilot supports NetDocuments and iManage through the Microsoft Graph connector framework, surfacing content into prompts once the connectors are configured. CoCounsel ships native iManage and NetDocuments integrations. Harvey supports DMS integration through enterprise contracts. The integration layer is where the privilege story usually fails, so we walk through it in our NetDocuments and iManage Copilot integration guide.
Which tool has the strongest cybersecurity certifications?
All three carry SOC 2 Type II. Microsoft adds ISO 27001 and ISO 27018 through the broader Microsoft 365 platform. Harvey publishes the longest list as of August 2026: SOC 2 Type II plus ISO 27001, ISO 27701 and ISO 42001, the AI-management-system standard. CoCounsel inherits Thomson Reuters’ SOC 2 posture. Our cybersecurity services hub covers how we map vendor certifications to firm-level controls.
Bottom line: what does this mean for your firm?
Fusion Computing re-benchmarked all three vendors in August 2026. Copilot wins on residency and price transparency, CoCounsel on legal-specialist depth, Harvey on certifications for firms with US caseloads. Confirm your Copilot SKU, then read our AI deployment guide for Canadian law firms and book a call before the September 30 promotion closes.
