Trust & Security

Every document you generate is encrypted at rest using AES-GCM-256 — the same authenticated-encryption standard required by FIPS 140-3 and used by major cloud providers for sensitive workloads. Encryption keys are managed by our cloud provider's KMS and rotated on the provider's standard schedule.

Data in transit is protected by TLS 1.2 or higher with modern cipher suites; older protocol versions are disabled at the edge.

We do not use your matter data, form inputs, or generated documents to train AI models. Our model providers are contractually prohibited from training on customer inputs or outputs, and we do not share matter data with third parties for advertising or marketing.

Document templates are oriented toward U.S. federal courts and all 50 states, with jurisdiction-aware captions, rule citations, and signature blocks generated for every draft.

Local-rule compliance checks — page limits, mandatory fonts, certificates of service, word counts, and chambers-specific formatting — are currently in beta for high-volume federal districts and select state trial courts. We expand coverage court-by-court based on user demand; if your court isn't covered, the draft is still produced and any local-rule placeholders are flagged for your review.

Every citation in a generated draft is checked in real time against CourtListener's free case-law database (Free Law Project) and normalized toward Bluebook form — reporter abbreviations, pinpoint formatting, parallel cites, and short-form rules.

When a citation can't be verified — a stale URL, an unreported decision, or a model hallucination — we flag it inline rather than silently drop it. Full Shepard's-grade signal flags (overruled / negative treatment) are on the roadmap. You should always re-verify in a paid research platform before filing.

Attorneys in our review marketplace are vetted before they ever accept a matter. Onboarding requires:

• State bar verification against the relevant state-bar lookup for every jurisdiction the attorney lists.
• KYC identity verification — government ID, selfie match, and address verification through our identity provider.
• Stripe Connect onboarding for payouts, which performs its own beneficial-owner and tax-form (W-9 / W-8) collection.
• Acknowledgement of our reviewer code of conduct, confidentiality terms, and conflict-check obligations.

Approved attorneys can only claim work in states they are licensed to practice in. Client matters are released to the attorney only after they accept the engagement, and the platform retains an immutable audit trail of every claim, deliverable, and payout.