Nothing goes in a filing unverified.
Written for the person at your firm who has to sign off on the tool. Where the data is, who can see it, what the software will not do.
One case file per matter
Each matter is kept apart from every other, and a search in one has no path to another. A plan with several matters holds several of them, one per client file, and a client invited as a viewer sees that one and nothing beyond it.
Where your data lives
The application and the case files run on Hetzner Cloud in Falkenstein, Germany, in a data centre certified to ISO/IEC 27001:2022. Hetzner's cloud services also hold a BSI C5 Type 2 attestation, the German federal standard for cloud security. The operator, A2Z WEB PTE. LTD., is SOC 2 Type II certified. On the Enterprise plan the application and the case files can run on your own servers, in the geographic region you choose, with OCR and language models at providers chosen with you, on your own keys.
Two kinds of work leave that server. OCR of scanned pages runs on Amazon Textract in AWS's Frankfurt region. Language-model analysis runs at OpenAI and Anthropic in the United States, under Standard Contractual Clauses and contracts that prohibit training on your material. Nothing else sees a document. What each provider does with what it receives is on the data handling and compliance page.
GDPR and PDPA
We follow the GDPR for clients in the European Union and the United Kingdom, and Singapore's Personal Data Protection Act as a Singapore company. For the material in a matter we act as your processor under a data processing agreement, with Standard Contractual Clauses for any transfer outside the EEA. We process case material only on your instructions, assist with data subject requests, and notify you without undue delay of a breach that touches your file. The privacy policy lists what we collect and why.
Evidence cannot be rewritten
A document's fingerprint, its file and its extracted text are fixed the moment it enters the case, and the application refuses to overwrite them. What the AI writes about a document lives beside it and can be regenerated without touching the evidence. The fingerprint is also what proves a file has not changed since arrival and what stops the same document being filed twice under two names.
No public URLs to case material
A document is served only to a signed-in member of its matter. There is no public link to share, and no link that keeps working after someone leaves.
Roles, and the one that can delete
Each person on a matter has a role, and the role decides what they can do. Only the owner and an administrator can delete shared material, some roles work without the categories marked sensitive, and a viewer reads and exports and changes nothing. Every consequential action lands in an audit log that nobody in the matter can edit.
AI, and where it stops
Analysis runs on commercial language models under agreements that prohibit training on your material. Anything a model writes is labelled a draft, and a finding it makes is a suggestion until a lawyer confirms it, with the lawyer's name and the time on the verdict. Every draft and every chat answer is checked against the file before you see it: the cited document and page exist, the quotation is really there. Whatever fails that check is reported, never quietly repaired.
The assistant reads the records and sees only what the person asking may see. When asked, it adds a document, claim, event or contradiction to a matter, or leaves a note marked as its own; it does neither on its own initiative and changes nothing else. Legalnaut does not give legal advice, does not file anything with a court, and does not decide what a document means. How the citation check works is on the features page.
Sub-processors
| PROCESSOR | PURPOSE |
|---|---|
| Hetzner Online GmbH (Falkenstein, Germany) | Application hosting and case-file storage on Hetzner Cloud (ISO/IEC 27001:2022, BSI C5 Type 2) |
| Amazon Web Services (Frankfurt, eu-central-1) | Amazon Textract: OCR of scanned pages when local extraction fails |
| OpenAI and Anthropic (United States) | Document analysis, summaries, drafts and chat answers, with no training on customer content |
The current named list, with jurisdictions, is in the data processing agreement.
Retention
No plan puts a time limit on your case file, and no schedule deletes the records of a paid matter. If a subscription lapses, the matter locks until a plan is chosen, and the owner can still download a full export or delete it. Nothing in it is touched; clearing it is a deliberate action, and even then the erasure waits 30 days, with a warning 7 days before, in which one click keeps the file.
One exception, stated so it is not a surprise: a trial that ended and was never used is scheduled for deletion 30 days after it ended, with the same warning and the same grace period. Exports you generate expire after 7 days; the records they were made from do not.
Reporting something
If you believe an account has been compromised or you have found a vulnerability, write to contact@legalnaut.com. Legalnaut is operated by A2Z WEB PTE. LTD., registered in Singapore under 202614429R.