Controls

The database listens only on private interfaces; no port is exposed to the internet.

Database volumes, the document store and backups are encrypted with AES-256.

Every connection uses TLS 1.2 or later, and HSTS is enforced.

Traffic passes through a web application firewall with rate limiting and bot filtering.

Hosts and the edge are monitored for anomalous traffic and access, with alerts to on-call.

Servers run a minimal image, accept key-based SSH only, and receive security patches automatically.

Encrypted backups are continuous and restored in scheduled drills.

Staff sign in to production and every business system through SSO with hardware-backed MFA.

Everyone with production access is background-checked before they start.

Staff and contractors sign confidentiality agreements before any access is granted.

Training at onboarding and annually, including phishing and data-handling.

Every member of staff acknowledges it at onboarding and on every revision.

Company devices enforce full-disk encryption, screen lock and automatic updates.

Production and vendor access is reviewed quarterly and removed within a day of departure.

Every query is scoped to your workspace, and every route declares who may call it.

Sign-in by one-time email code or Google and Microsoft SSO; no passwords to leak.

Private and shared cases, with per-case membership decided by your administrators.

Reads, changes and decisions are recorded with who, what and when; entries are never deleted.

A case under legal hold cannot be altered or deleted until the hold is released.

Peer-reviewed changes, dependency scanning and automated tests gate every release.

An independent firm tests the application and infrastructure every year and after major changes.

Cases stores what you give it to build your case, and nothing else.

Deleting a case removes it from the product immediately and from backups within 35 days.

Documents are stored in the European Union.

A DPA with Standard Contractual Clauses is available to every customer.

Every subprocessor is reviewed before use and annually, and you are notified before a new one is added.

Data protection impact assessments are run for new processing.

Contracts with every model provider prohibit training on your documents or outputs.

Model providers do not retain prompts or completions beyond processing the request.

Every finding links to the passage it came from, so a person can verify it.

Consequential proposals wait in the Decision Inbox for a person to approve or reject.

Model and prompt changes are evaluated against reference cases before release.

Controls are monitored continuously, and a failing control opens a tracked issue.

A tested plan with defined roles, and notification within 72 hours of a confirmed breach.

Risks are assessed annually and when the business or the platform changes materially.

Vendors are assessed for security before onboarding and reviewed annually.

Production changes are reviewed, tested and deployed through an audited pipeline.

Recovery objectives are defined and verified by restore drills.