Security
Client files deserve more care than a chat window.
Here is exactly how your data is encrypted, who can reach it, how AI uses it, and how it is deleted today — hosted by us, or deployed standalone in your own environment. A SOC 2 program is planned.
Encryption
All traffic is encrypted in transit with TLS, and case files and database contents are encrypted at rest. Client portal uploads go directly to encrypted storage — documents are never handled as email attachments.
AI data handling
When Attest analyzes a document, the prompt and the file go to established third-party model providers under enterprise API terms that prohibit training on customer content. Your case files are never used to train AI models — ours or anyone else’s — nothing is retained to improve a model, and files can be deleted on request. The providers themselves are named on our subprocessor list.
Access & audit
Attest keeps an append-only audit log of the events that matter professionally: document uploads, AI analysis runs, and attorney approvals. The log records who did what and when, and it cannot be edited after the fact — a defensible record of human review.
Single sign-on
Firms on SAML 2.0 or OIDC can point Attest at their own identity provider, so joining and leaving the firm is handled where it already is. A domain has to be verified over DNS before it can be claimed for SSO, which is what stops anyone else asserting it.
Two-factor & session policy
Any member can turn on two-factor for themselves; an admin can require it firm-wide, restrict which sign-in methods are allowed at all, and set an idle timeout after which a session has to re-authenticate. The timeout is enforced on every page and every action, not just at login.
Roles & permissions
Five roles ship built in, and a firm can define its own when those don’t fit its shape. Permissions are checked on the server for every action, not just used to hide buttons — client fees, for instance, are their own permission, so a role without it cannot reach a matter’s billing tab by URL either.
Client portal links
Intake and document-request links sent to clients expire automatically and can be revoked by the firm at any time. Link tokens are stored hashed at rest, so a database read alone cannot reconstruct a working link.
Data deletion
You can delete individual documents, whole cases, or your entire firm account. Deletion requests to [email protected] are honored across primary storage and backups on a fixed schedule.
API keys
Developer API keys are shown once at creation and stored only as a hash — like the portal links, a database read alone cannot reconstruct one. Keys are firm-scoped, revocable at any time, and last use is tracked.
Responsible AI
Every AI output is a draft until an attorney approves it — clients never see unreviewed AI content. Factual claims carry page-level citations to source documents, and any statement without a citation is presented as unsourced. The AI assists; the attorney decides.
Model behavior
This page covers the infrastructure. How the AI itself is kept honest — citations from the model, approval gates on every surface, the deadline confirmation gate, and the audit trail — has its own page: AI & trust.
Questions about a specific practice, or need something in writing for your firm? Send us the questionnaire and we’ll answer it.
Run it where your files live.
Same product, same plan, two places it can run. Most firms take the hosted service; firms with data-custody or residency requirements deploy Attest standalone.
Hosted by us
The managed service: we run the infrastructure, apply the updates, and carry the monitoring. Everything on this page and the subprocessor list describes exactly how it is operated.
Standalone, in your environment
The same product, deployed inside infrastructure your firm controls. Case files, the database, and the client portal never leave your environment. The one exception is AI analysis, which calls the model providers — and those calls can run under your firm’s own enterprise API keys, so even that traffic is governed by agreements you hold.