Trust Center
Security is the product.
How Firmclave isolates, protects, and accounts for every piece of client data.
01
Our data promise
Never used for training
Your firm's data is never used to train any model, ours or a provider's.
Sealed to your firm
Every record is isolated by firm, matter, and ethical wall. No other firm can reach it.
You choose retention
Your firm sets how long data is kept. Legal holds override deletion.
Export and delete everything
Export before you leave. Deletion is subject to legal holds and applicable retention obligations.
We tell you where it goes
Per-run receipts record provider and retention details. The provider register below awaits verification.
02
Closed AI architecture
What happens to a prompt
- You submit a task in a matter you are allowed to access. Your session must have passed two-step verification.
- Our server checks your firm, matter membership, ethical walls, and the matter's AI-consent status.
- Selected documents are retrieved from your firm's partition only. If your firm enables it, personal data is redacted.
- Documents are sent to the model as data, never as instructions, under zero-retention and no-training terms.
- The draft returns to your matter, is logged to the audit trail, and waits for attorney review.
03
Data Receipts
Every AI run creates a receipt showing the model provider, region, fields redacted, retention setting, and deletion status, so your firm can answer "where did this go?" for any output. Firm Admins can view and export all receipts by date range. The card below is a sample.
04
Where your data lives
United States hosting is the intended default. Hosting region, backup locations, and provider terms must be verified before this register is finalized. Dedicated region choice is planned.
Sub-processors
Last updated October 29, 2026. Placeholder register; names and regions await confirmation.
| Name | Purpose | Region | Data handled |
|---|---|---|---|
| [Hosting provider] | Application hosting and database | United States | All firm data (encrypted) |
| [Model provider] | AI model inference | [Region] | Prompts and selected document text |
| [Email provider] | Transactional email | [Region] | Names and email addresses |
| [Payments provider] | Billing | [Region] | Billing contact and payment details |
05
Model providers
Placeholder rows for review, not verified provider or zero-retention attestations.
| Provider | Models | Data retention | Training terms |
|---|---|---|---|
| [Provider name] | [Model family] | Zero data retention: [status] | No training on customer data: [terms reference] |
| [Provider name] | [Model family] | Zero data retention: [status] | No training on customer data: [terms reference] |
06
Retention and deletion
Firm-set retention
Your Firm Admins choose how long matter data is kept.
Legal hold
A hold on a matter blocks deletion until it is released.
Export before exit
Export your data before offboarding.
Deletion certificate
Offboarding includes a deletion certificate. Legal holds and applicable retention obligations still apply.
07
Access controls
Tenant isolation
Database rules restrict every record to its firm.
Ethical walls
A walled user can never open that matter, regardless of role.
MFA and SSO
Two-step verification is required for everyone. Enterprise SSO is planned, not active.
Support access
Platform Support never sees matter content. Firm-approved metadata access expires after two hours and is audited.
08
How we compare
| Firmclave | Consumer AI chat tools | Typical enterprise legal AI platforms | |
|---|---|---|---|
| Training on your data | Never | Varies by provider | Often on enterprise plans only |
| Who can see your data | Your firm only; support needs firm approval | Varies by provider | Varies by provider |
| Named model provider published | Pending verification | Varies by provider | Varies by provider |
| Sub-processors published | Pending verification | Varies by provider | Often on enterprise plans only |
| Per-run data receipts | Yes | Varies by provider | Varies by provider |
| Data location choice | Planned | Varies by provider | Often on enterprise plans only |
| Retention control | Yes | Varies by provider | Often on enterprise plans only |
| Ethical walls | Yes | Varies by provider | Varies by provider |
| Client consent tracking | Yes | Varies by provider | Varies by provider |
| Quarterly certified law updates | Review and publication workflow built | Varies by provider | Varies by provider |
Comparison reflects publicly available information as of October 29, 2026.
09
Compliance roadmap
No certification, approval, or endorsement is claimed. Privacy and healthcare frameworks also require legal review.
SOC 2 Type II
Status: [pending review]
Target: [quarter]
ISO 27001
Status: [pending review]
Target: [quarter]
ISO 42001
Status: [pending review]
Target: [quarter]
GDPR
Status: [pending review]
Target: [quarter]
CCPA / CPRA
Status: [pending review]
Target: [quarter]
HIPAA
Status: [pending review]
Target: [quarter]
10
Security packet and disclosure
Request our security questionnaire and Data Processing Agreement.
Responsible disclosure
Responsible disclosure contact: hello@firmclave.ai (placeholder). Do not submit client data or secrets in a report.