# Firmfact

Last updated: 2026-06-15

Summary: Firmfact helps legal firms replace spreadsheet-heavy vendor, invoice, allocation, and audit workflows with one operating system for spend visibility and control.

## What it does
- Track vendors, contracts, invoices, and internal owners in one system
- Forward invoices and supporting documents into AI-assisted extraction and review workflows
- Compare expected charges against real invoices before finance or operations accept them
- Allocate costs across offices, practice groups, departments, and legal entities
- Preserve audit-ready history for approvals, corrections, renewals, and vendor reviews

## Who it is for
- Legal operations and finance teams managing software, services, and outside vendor spend
- CFOs, COOs, and managing partners who need clearer cost visibility
- Procurement and operations teams coordinating renewals, approvals, and controls
- IT and enterprise architects evaluating integrations, security posture, and AI access

## Product facts
- Self-serve evaluation includes a Production account for real setup and a Demo account for safe exploration
- EU-hosted deployment with primary hosting in Germany
- API and MCP access are currently available on Enterprise plans

## For AI agents
- Product summary: https://app.firmfact.com/ and https://app.firmfact.com/about
- Machine-readable summary: https://app.firmfact.com/llms.txt
- Extended machine-readable brief: https://app.firmfact.com/llms-full.txt
- Interactive API and MCP docs: https://app.firmfact.com/api-docs (canonical public MCP docs)
- MCP endpoint: `/mcp`
- MCP transport: Streamable HTTP MCP over JSON-RPC
- MCP authentication: `Authorization: Bearer YOUR_API_TOKEN`
- MCP protocol header: `MCP-Protocol-Version: 2025-03-26`
- Current public MCP surface: 15 tools

## MCP capabilities
- Record lookups for vendors, contracts, products, allocations, applications, projects, and cost centres
- Higher-value analysis for allocation mix, cost trends, and utilization patterns
- Conversational analysis with `chat_with_workspace` as a heavier convenience layer
- Account-scoped execution with tenant isolation, origin validation, and rate limiting

## AI agent onboarding path
1. A human admin signs up at https://app.firmfact.com/users/sign_up
2. The admin confirms the email address and enters the workspace
3. The organization upgrades to Enterprise for MCP access
4. An account admin creates a token in `Settings to API Tokens`
5. The AI client connects to `/mcp` with the Bearer token

## Public pages
- Homepage: https://app.firmfact.com/
- About: https://app.firmfact.com/about
- European Infrastructure: https://app.firmfact.com/european-infrastructure
- Privacy Policy: https://app.firmfact.com/privacy
- Terms and Conditions: https://app.firmfact.com/terms
- API Docs: https://app.firmfact.com/api-docs

## Trust and compliance documents
- DPA: https://app.firmfact.com/downloads/dpa
- SLA Support: https://app.firmfact.com/downloads/sla-support
- Subprocessors List: https://app.firmfact.com/downloads/subprocessors-list
- Security Whitepaper: https://app.firmfact.com/downloads/security-whitepaper
- Vulnerability Management Policy: https://app.firmfact.com/downloads/vulnerability-management-policy
- Technical Governance Report: https://app.firmfact.com/downloads/technical-governance-report

## Company
- Firmfact is developed by Dutchcode B.V. (Netherlands)
- Public support: `support@firmfact.com`
- Security contact: `security@firmfact.com`