Security and data
Public fact is not a public commercial graph.
The product may know that a firm appeared for a company in a matter without ever publishing that the company is the firm’s client. That principle runs through everything below.
What we hold
Public and licensed court records; your account; your confirmations; anything you explicitly share into a matter workspace.
What never enters
Sealed and restricted documents. Entry text only, never in summaries, exports or public pages. Natural persons are never leads.
Provenance
Every value on a canonical record carries the fetch it came from, its extraction method and a confidence. Losers of a conflict are kept for audit.
Court text is data
Docket entries and filings are marked untrusted on every API and assistant response and never used as instructions to a model.
Access
Organization-scoped and matter-scoped authorization. A shared matter is not a shared organization. A domain match grants work-email trust only.
Your data and models
Your confirmations and workspace content are not used to train models. Derived intelligence is computed from the public record and comparables.
Infrastructure
Encrypted at rest and in transit, private networking, least-privilege service roles, immutable raw storage with retention lock in production.
Compliance
SOC 2 Type II in progress; report available under NDA on request. Sub-processors listed on this page.
Trust levels
Verify the organization. Verify the person only for the action they take.
A work email lets you track matters. Verifying the firm unlocks the graph for everyone on the domain. Managing users, connecting systems or accepting a quote needs a named, approved admin. No level is inferred from another.
AnonymousSearch firms, public aggregates
Work email verifiedTrack matters, alerts, your own list
Firm verifiedFull matter graph, deadlines, profiles, team workspace
Authorized adminUsers, SSO, integrations, API keys
Commercially verifiedPurchasing and contractual actions