Security & trust

Website and matter-system separation

The public website collects only minimal contact information and a non-confidential matter description. Contracts, evidence, communications and financial records enter through a controlled portal or client-designated environment.

Matter and access isolation

• Matter- or tenant-specific workspaces
• Role-based access control
• Controlled exports and data lifecycle
• Access and operation audit records

Model and deployment control

• Model providers configured by engagement
• Private-cloud or law-firm-network deployment options
• Prompt, rule and model version records
• Assessment of third-party processing boundaries

Data boundary for private deployment

Under a private deployment within a law firm’s controlled network, matter data remains on the firm’s own servers and within the agreed environment. The deployment architecture, security schedule and contract define the final boundary.

Review and traceability

Material findings should retain source locations, generation context, version history and review state. Traceability does not make a source or conclusion automatically correct; it gives professionals the evidence needed to inspect it.

Scope of claims

This page describes a target control framework and does not claim certifications that have not been obtained. Data location, encryption, backup, model and retention terms depend on the security schedule and engagement.