Legal AI Security Built So Client Files Stay Client Files

Legal AI security means encrypted connections, strict per-firm data isolation, and a hard guarantee that client data never trains AI models. This page documents how CaseAgent is built to that bar, stated as design commitments, because we will not claim certifications we do not hold. If you are still comparing platforms, these are the controls to demand of any legal practice management software that touches privileged files.

Compare plans

Encrypted in transit Never trained on client data Commitments, not certificates

Data handling

How client data is protected

Case files are privileged material. CaseAgent is built so protection is the default, not a tier upgrade, on every plan from Solo up.

A-1

Encrypted in transit

All traffic between your browser and CaseAgent is encrypted with TLS. There is no unencrypted path into or out of the system.

A-2

A private link per person

Every person on the firm opens the workspace with their own private link or a code sent to their own inbox. Switching a seat off stops that link at once, without touching anybody else's.

A-3

Isolated per firm

Each firm's matters live in their own isolated space. CaseAgent is built so one firm's data can never leak into another firm's context, results, or drafts.

A-4

Least-privilege access

Our staff do not browse client files. Operational access is limited and reserved for support you request or incidents that require it.

The AI stance

Your files are never training data

The question every firm asks first, answered without hedging. This is the same stance stated on our confidentiality FAQ.

B-1

Client data never trains models. Files, drafts, and matter data are never used to train AI models, ours or any provider's. The agent reads your file to work your matter, and nothing else.

No training

B-2

Demo text is never stored. Case summaries pasted into the public demo are processed for your session and discarded. No demo input is written to a database.

Not stored

B-3

AI output is labeled and gated. Every draft is marked for attorney review, and every citation is flagged for verification. See the review gate in how the AI legal assistant works.

Flagged

B-4

Export any time. Your firm's work product is exportable in standard formats. No lock-in is a design commitment: if you leave, your files leave with you. Data ownership and export terms are worth checking on every vendor you use, which is why we published the eight diligence questions to ask before signing cloud based legal practice management software.

Your data

For legal ops & IT

Workspace controls, plan by plan

What the workspace enforces today, what each control covers and which plan includes it. Nothing on this list is a roadmap item.

Control	What it covers	Status
Role-based permissions	Owner, admin and member. The owner runs billing and the plan, admins run the seats, members work the matters. Checked by the server on every action, not by hiding buttons.	Practice and Enterprise
Seats with private links	Each person gets their own private link and can also sign in with a code sent to their own inbox. A seat switched off stops working at once; the matters and their history stay with the firm.	Firm, Practice and Enterprise
Audit log	Who opened a matter, added, viewed or removed a document, ran the agent, downloaded or reviewed work product, changed a deadline, a seat or the plan, when (UTC) and from which IP address. Entries are never edited; the owner and admins filter them by person and action and export them as CSV.	Enterprise
SAML single sign-on	People sign in through the firm's identity provider (Okta, Microsoft Entra ID, Google Workspace or any SAML 2.0 provider). Each response is checked against the firm's signing certificate, audience and time window, and works once. Only addresses that hold a seat get in. The firm can require SSO for every seat; the owner keeps the emailed code as the way back in.	Enterprise
DPA and SLA	The data processing agreement is signed by the owner or an admin in the workspace, and the signed record stays there. The service level agreement sets 99.9% monthly uptime with service credits.	Enterprise
Invoices and billing	Every payment has a PDF invoice and receipt in the billing portal, which only the firm owner can open. The same page changes the card and cancels the plan. On Enterprise the owner adds the company name, address, tax ID and PO number, and every next invoice carries them.	Every plan

Evaluating CaseAgent for a large firm? Enterprise adds up to 45 users, SAML single sign-on, the audit log, the signed DPA and the uptime SLA for $1,798 a month, or $899 a month billed yearly, and you can start Enterprise on the same order form as every plan. Tier details are on the pricing page.

Honesty clause

What we claim, and what we don't

Security pages are where startups exaggerate. Ours works the other way: if it is not true yet, it is listed as a commitment or a roadmap item, never as a badge.

We do not claim certifications we do not hold. CaseAgent is not yet SOC 2 audited and makes no compliance certification claims today. SOC 2 readiness is on the roadmap, and the controls on this page are being built with that audit in mind.

Design commitments are still commitments. Everything phrased as "CaseAgent is built so that" on this page is an engineering constraint we hold ourselves to now.

The disclaimer applies here too. CaseAgent is a tool for lawyers, not legal advice. Security controls protect your data; a licensed attorney still reviews every output before it matters.

Responsible disclosure

Found a vulnerability? Tell us.

We take reports from security researchers seriously and respond to every good-faith submission.

E-1

Email [email protected] with the subject "Security vulnerability report" and enough detail to reproduce the issue.

Report

E-2

We acknowledge reports promptly, keep you informed while we investigate, and credit researchers who report in good faith if they want credit.

Response

E-3

Do not access data that is not yours, degrade the service, or publicly disclose before we have had a reasonable window to fix. We will not pursue good-faith research conducted within those lines.

Good faith