Security

Client files deserve more care than a chat window.

Here is exactly how your data is encrypted, who can reach it, how AI uses it, and how it is deleted today — hosted by us, or deployed standalone in your own environment. A SOC 2 program is planned.

Encryption

All traffic is encrypted in transit with TLS, and case files and database contents are encrypted at rest. Client portal uploads go directly to encrypted storage — documents are never handled as email attachments.

AI data handling

When Attest analyzes a document, the prompt and the file go to established third-party model providers under enterprise API terms that prohibit training on customer content. Your case files are never used to train AI models — ours or anyone else’s — nothing is retained to improve a model, and files can be deleted on request. The providers themselves are named on our subprocessor list.

Access & audit

Attest keeps an append-only audit log of the events that matter professionally: document uploads, AI analysis runs, and attorney approvals. The log records who did what and when, and it cannot be edited after the fact — a defensible record of human review.

Single sign-on

Firms on SAML 2.0 or OIDC can point Attest at their own identity provider, so joining and leaving the firm is handled where it already is. A domain has to be verified over DNS before it can be claimed for SSO, which is what stops anyone else asserting it.

Two-factor & session policy

Any member can turn on two-factor for themselves; an admin can require it firm-wide, restrict which sign-in methods are allowed at all, and set an idle timeout after which a session has to re-authenticate. The timeout is enforced on every page and every action, not just at login.

Roles & permissions

Five roles ship built in, and a firm can define its own when those don’t fit its shape. Permissions are checked on the server for every action, not just used to hide buttons — client fees, for instance, are their own permission, so a role without it cannot reach a matter’s billing tab by URL either.

Client portal links

Intake and document-request links sent to clients expire automatically and can be revoked by the firm at any time. Link tokens are stored hashed at rest, so a database read alone cannot reconstruct a working link.

Data deletion

You can delete individual documents, whole cases, or your entire firm account. Deletion requests to [email protected] are honored across primary storage and backups on a fixed schedule.

API keys

Developer API keys are shown once at creation and stored only as a hash — like the portal links, a database read alone cannot reconstruct one. Keys are firm-scoped, revocable at any time, and last use is tracked.

Responsible AI

Every AI output is a draft until an attorney approves it — clients never see unreviewed AI content. Factual claims carry page-level citations to source documents, and any statement without a citation is presented as unsourced. The AI assists; the attorney decides.

Model behavior

This page covers the infrastructure. How the AI itself is kept honest — citations from the model, approval gates on every surface, the deadline confirmation gate, and the audit trail — has its own page: AI & trust.

Questions about a specific practice, or need something in writing for your firm? Send us the questionnaire and we’ll answer it.

Run it where your files live.

Same product, same plan, two places it can run. Most firms take the hosted service; firms with data-custody or residency requirements deploy Attest standalone.

Hosted by us

The managed service: we run the infrastructure, apply the updates, and carry the monitoring. Everything on this page and the subprocessor list describes exactly how it is operated.

Standalone, in your environment

The same product, deployed inside infrastructure your firm controls. Case files, the database, and the client portal never leave your environment. The one exception is AI analysis, which calls the model providers — and those calls can run under your firm’s own enterprise API keys, so even that traffic is governed by agreements you hold.

Verifiable AI starts with data practices you can verify too.

Book a demo