TRUST CENTER
Treated like legal mail.
Every request is a paper trail. We store it like one — encrypted, immutable, exportable, and privileged when you need it to be.
Encryption
AES-256 at rest, TLS 1.3 in transit. Keys rotated quarterly via KMS.
Audit log
Immutable record of every AI draft, every edit, every send. Exportable per matter.
Access control
SSO via Google, Microsoft & Okta. MFA required. Role-based access down to the matter.
Data residency
US-East-1 only. No cross-border replication. Deletion honored within 30 days.
Privilege mode
Firm tenants can mark AI logs as attorney work-product. Walled off from non-team staff.
Compliance
SOC 2 Type II in progress (Q3 2026). Annual third-party pen test.
Need the full security pack?
SOC 2 roadmap, DPA, sub-processor list, and pen-test summary.