This isn't that uncommon for many technologies, people and especially organizations who are procuring software look for signals that can offload perceived risk. These signals can be things as small as the formation of a company at all, or other ongoing partnerships which shows more social trust. Whether or not the company or provider is actually safe is a different conversation though.

No they're trusting the lawyers turned solution architects that you get when you buy Harvey.

No, they are trusting Harvy because the founders have legal/Law background and know what the customer wants. Plus the B2B contracts I'm sure they sign.

Yes.

Would you rather trust sensitive legal documents with me running a self hosted app that shares data with whichever provider openrouter chooses, or Harvey?

They trust the companies that already use Harvey or Legora for their legal work and nobody got fired for buying services from both of them.

But someone will risk getting fired for vibe-coding their own without the support, sales, infrastructure and engineering to recreate them.

yes, esp if you're a company

it's more like you _don't_ trust ai if it comes from provider Y, or was vibe-coded by some random dev that you've never heard of