How we protect your information
Built for sensitive decisions.
Employment matters contain some of an organization's most sensitive information. Legaleez is designed with security, privacy, and responsible AI governance as part of the system — not as an afterthought.
Customer information remains customer information. Access is controlled. Matters are separated. AI operates under defined data protections. And the people using Legaleez remain responsible for the decisions they make.
Our principles
Your information should work for you — not become the product.
Your information stays yours.
Customer matter information remains customer data. Legaleez processes that information to provide the service and generate the intelligence, analysis, and experiences requested by the customer. Customer matter information is separated through organization membership controls, matter-level authorization, and database security policies. These controls restrict access between customer organizations during ordinary platform use. Customer matter data is not used to train the models that power Legaleez.
Your matters don't train foundation models.
Legaleez does not use customer matter data to train the foundation models that power the platform. Legaleez configures production model requests to avoid creating application-state storage with model providers, and selects providers whose data-handling practices are designed for business use rather than general-purpose model training.
Access stays with the people who should have it.
Legaleez uses organization membership controls and matter-level authorization to separate customer information. Access policies are implemented through database-level security and server-enforced authorization, so that one organization's matter data is not accessible to another through ordinary use of the platform. Private matter evidence is stored separately and protected by server-enforced access policies — not only by what the interface displays.
Platform administrators retain elevated access for operational purposes.
AI is governed as part of the system.
Legaleez uses AI to analyze information and provide decision intelligence. Model providers are components of the system — not the authority defining how customer data is handled. Production model requests are configured not to create application-state storage with the model provider.
Standard provider abuse-monitoring retention may apply under applicable provider policies.
Legaleez informs decisions. It doesn't make them.
Legaleez provides legal-risk intelligence and risk-reducing options to support human decision-making. Employers and their advisors retain authority over employment decisions. The platform is designed to make that judgment better-informed — not to replace it.
Technical safeguards
Protection beyond the interface.
Sensitive information is protected through multiple layers of technical controls that operate below what any user sees on screen.
Private matter storage
Matter evidence is maintained in private storage and is not publicly accessible. Access to stored evidence is enforced through server-side authorization.
Server-enforced access
Matter access is enforced through server-side authorization and database-level access policies, providing protection beyond what is visible in the user interface.
Organization and matter separation
Access policies are designed to restrict ordinary customer access to the organizations and matters they are authorized to access. Separation is implemented through access controls and database-level policies.
Server-side credentials
Privileged service credentials and model-provider credentials are maintained server-side rather than exposed through the customer-facing application.
Controlled production access
Access to the Legaleez platform is invitation-based. New accounts are provisioned through a controlled onboarding process rather than unrestricted public self-registration.
Model request controls
Production model requests are configured with application-state storage disabled. Standard provider abuse-monitoring retention may still apply under applicable provider policies.
Event logging
Platform activity logging covers selected events to support operational oversight and accountability.
Role-based permissions
The platform implements role-based permissions that govern what authorized users can access and do within their organization.
Infrastructure
Built on enterprise cloud infrastructure.
Legaleez runs on established cloud infrastructure designed for enterprise workloads. Infrastructure providers are selected for their security capabilities and data-handling controls.
Customer information is encrypted in transit and at rest using the encryption capabilities of Legaleez's infrastructure providers.
AI governance
AI should expand intelligence without giving up control of your information.
AI models are components of Legaleez — not the system of record. Legaleez maintains the application, matter context, access controls, and decision-intelligence experience around the models it uses.
Learn more about how the platform uses AI.
Model provider governance
Legaleez uses third-party AI providers to support its legal-risk intelligence capabilities. Model providers operate as components of the platform rather than defining its customer-data boundaries or authorization controls.
No foundation-model training
Legaleez does not use customer matter data to train the foundation models that power the platform. This reflects Legaleez's own practice and configuration.
Controlled retention
Production model requests are configured not to create application-state storage with the model provider. Model providers may retain request data for abuse-monitoring purposes under their applicable policies — Legaleez discloses this rather than obscuring it.
Governance
Technology is only part of protecting sensitive information.
Security also depends on controlling how systems, providers, and people interact with customer information.
Internal access governance
Legaleez limits internal staff access to customer information to what is required for operational and support purposes. Platform administrators retain elevated access necessary to operate and maintain the platform.
Provider governance
Legaleez uses third-party service providers to operate and support the platform, subject to applicable data-handling arrangements.
Data governance
Legaleez distinguishes customer information from the intelligence and operational systems used to run the platform. Defined rules govern how customer information may be processed. Customer matter data is not used to train or improve the AI models that power Legaleez.
AI governance
Legaleez maintains its application, authorization controls, and customer-data boundaries independently of the AI models used to provide legal-risk intelligence.
Your data, your timeline
What happens to your information over time.
Enterprise buyers need to understand not just how their data is protected while they use Legaleez, but what happens to it when their needs change.
Retention
Customer matter information is retained for the duration of the customer relationship to support the service. Legaleez does not publish a fixed retention schedule at this time. Customers with specific retention requirements are encouraged to contact Legaleez directly.
Archive and restore
Matter data can be archived and restored within the platform. Archiving is not permanent deletion — archived matters remain in the system and can be restored by authorized users.
Deletion
Self-service permanent deletion of customer matter data is not currently available. Customers with data deletion requirements should contact Legaleez directly to discuss their needs.
Reporting and export
The platform provides reporting and selected export capabilities for authorized users. Comprehensive data portability is not currently a self-service feature. Customers with specific portability requirements should contact Legaleez directly.
Built to evolve
Security grows with the platform.
Legaleez is continuing to strengthen its security, privacy, and governance program. Controls are evaluated against the sensitivity of the information the platform processes, the needs of customers, and evolving security and AI-governance practices.
Independent security assurance and additional enterprise security capabilities are on the Legaleez roadmap. No independent certification or assurance has been completed at this time. Customers with specific compliance or assurance requirements are encouraged to contact us directly.
Questions about security, privacy, or AI governance?
Enterprise buyers, in-house counsel, and prospective law-firm partners are welcome to ask detailed questions about Legaleez's security and data-handling practices. We respond directly.