Security and trust

Legal-grade security, privacy, and control by design.

The web scope, mobile scope, and AI proposal all emphasize role-based access, encrypted transport, audit visibility, session controls, and privacy-first architecture. The result is a platform story that speaks directly to legal confidentiality expectations. fileciteturn1file6 fileciteturn1file10 fileciteturn1file4

Talk to security team See hosting models

Security baseline

RBAC at frontend and API levels
TLS-encrypted transmission
Session expiry and secure logout
No sensitive local storage on mobile
Audit and notification controls

🔐

Access control

Dynamic roles, configurable permissions, action-level controls, branch-scoped visibility, and per-user control patterns support enterprise governance.

📜

Auditability

Action logs, login history, active sessions, notification history, and full control over internal workflows improve accountability and traceability.

🧱

Privacy-first AI

On-premise AI architecture avoids sending client data to external AI providers and keeps model execution aligned to internal infrastructure.

Security details reflected across the product

The mobile scope calls for JWT or OAuth 2.0 authentication, API-level RBAC, session expiry, TLS 1.2+, graceful offline handling, and no sensitive device-side storage. The web scope adds secure session management, audit retention, frontend and backend RBAC enforcement, and protections against common web vulnerabilities. fileciteturn1file10 fileciteturn1file6

Mobile trust layer

Fast app launch, read-only offline cache for recent data, push notifications, and protected mobile API access keep the companion experience secure without becoming heavy.

Web trust layer

Secure browser access, multilingual support, notification controls, session logs, action audits, and API-ready architecture support both daily operations and future integrations.

Your data never leaves your building

That exact privacy stance appears in the AI proposal: no external AI services, no internet requirement after installation, legal-compliance suitability for sensitive cases, no ongoing API costs, full audit control, and firm-specific learning over time. fileciteturn1file4

🚫

No external AI services

No dependency on public AI APIs for firms that need strict confidentiality.

📡

No internet required

Once deployed internally, the private AI layer can operate fully within your environment.

🏛

Full audit control

Every AI-assisted decision can remain visible, controlled, and accountable inside the firm.