The agent that never forgets.
And never waits to be asked.

Sandboxed legal agents with durable contract memory, secure tool access, and full control in your infrastructure.

Try the Legal demo View source on GitHub

Company

Legal Engineering Support Finance Sales

Personal

Leadership Venture Capital

Public

Agent Community Market Intelligence

Cron

When a new contract drops in the inbox

Review new contracts for risk, flag clauses that need counsel approval, and file a review ticket.

Trace

watcher.poll(since: last_run)

→ 3 events collected

10:02Redwooduploaded NDA v2 for signature review

10:04Lenaneeds legal readout before today's customer call

10:06DocuSigndetected updated indemnity language in §7

docusign.contracts.get(redwood-nda)

→ 37 pages · 9 clauses

recall(counterparty: Redwood, topic: risk)

→ Acme NDA blocked Sep — similar §7 language

upsert(Contract Redwood-NDA-v2)

→ linked Clause §7 "uncapped indemnity"

jira.create(legal-review)

→ REV-88 assigned to Priya

link(Contract → Clause §7 → Risk)

→ flagged counsel-required

Skills

Learn about Skills →

MCP

docusignjira

Network

github.com.github.com.githubusercontent.comregistry.npmjs.org.npmjs.org

Memory

Learn about Memory →

Entities touched

ContractEntity: Redwood NDA

primaryagreement

ClauseClause: residuals

clausereview

RiskRisk: unlimited confidentiality term

riskopen issue

CounterpartyCounterparty: Redwood Capital

counterpartycontext

Relationship

Contract Redwood NDAcontains_clauseClause Residuals clause

Outcome →

#legal-reviews

Clause §7 carries uncapped indemnity language — the same pattern that blocked the Acme NDA in September, so it needs counsel sign-off before you countersign. I've filed REV-88 with Priya and linked the clause to the Redwood counterparty record for future drafts.

Available in

Slack Telegram WhatsApp Discord Teams Google Chat REST API

Live workspace

Open workspace →

Read-only preview of the Legal workspace running on Lobu.

Architecture

Every agent runs in a sandboxed container with no outbound network by default — on your infrastructure, not ours.

Messaging platforms

Slack

Block Kit, interactive actions

Mini App, inline buttons

Reply buttons, list menus

Discord

Servers, DMs, markdown replies

Teams

Channels, bots, enterprise workflows

Google Chat

Cards v2, Workspace spaces

Link users across platforms with single sign-on
Approval flows, rich cards, buttons, and more

Bring your own agent

any MCP-capable agent

Lobu Memory

Lobu

Control Plane

Secrets

Single Sign-On (IdP)

Skill Registry Traces Sandboxing

Workers never see secrets
HTTP proxy with domain allowlist
MCP proxy with per-user OAuth
BYO provider keys (Anthropic etc.)

Equip your agent

Lobu Skills

OpenClaw Runtime

User A

isolated

OpenClaw Runtime

User B

isolated

OpenClaw Runtime

User C

isolated

One sandbox per user and channel
Kata Containers / Firecracker microVMs / gVisor on GCP
virtualized bash for scaling beyond 1000 users
No direct internet access (internal network)
Nix reproducible environments
OpenTelemetry for observability

Lobu in memory benchmarks

Apples-to-apples comparison on public memory datasets. The model is GLM 5.1 via z.ai.

LongMemEval (oracle-50)

Single-session knowledge retention.

System	Overall	Answer	Retrieval	Latency
Lobu	87.1%	78.0%	100.0%	237ms
Supermemory	69.1%	56.0%	96.6%	702ms
Mem0	65.7%	54.0%	85.3%	753ms

LoCoMo-50

Multi-session conversational memory.

System	Overall	Answer	Retrieval	Latency
Lobu	57.8%	38.0%	79.5%	121ms
Mem0	41.5%	28.0%	66.9%	606ms
Supermemory	23.2%	14.0%	36.5%	532ms

Read the methodology

From the blog

Latest blog posts

memoryApr 13

Filesystem vs Database for Agent Memory

Agents need a workspace to think in and a warehouse to remember in. The filesystem is for ephemeral work. The memory layer is for durable organizational knowledge.

Read post →

tutorialApr 9

Add OpenClaw to your Next.js app in 10 minutes

Embed OpenClaw agents in a Next.js project with per-user sandboxing, MCP tools, and network isolation — no Docker required.

Read post →

mcpApr 2

MCP Is Overengineered, Skills Are Too Primitive

MCP HTTP is great for external services. MCP stdio is redundant. And most skill systems are just prompt text with no reproducibility. Here's what we built instead.

Read post →