Encryption
In transit: every connection to CaseFile uses HTTPS (TLS 1.2+). Data is never sent in the clear.
At rest: stored data is encrypted at rest (AES-256) on our cloud providers (Vercel and Google Cloud), both of which maintain SOC 2 Type II-audited infrastructure.
Note: CaseFile runs on SOC 2-compliant infrastructure; CaseFile is not itself SOC 2-certified. We'll tell you plainly what is and isn't in place.
🤖How AI handles your data
- Never used for training. Content you send to CaseFile's AI features is processed to produce the output you asked for and is not used to train AI models (Anthropic's API, which powers CaseFile, does not train on submitted data).
- Drafting tools don't keep your case content. The brief generator, case-note summarizer, communication drafter, intake builder, and inquiry triage process your input to generate a result; they don't persist the underlying case text — only minimal usage metadata (e.g., timestamps and token counts for plan limits).
- Human-in-the-loop. Every AI output is a first draft for an attorney to review and edit. CaseFile does not give legal advice and does not create an attorney-client relationship (ABA Formal Opinion 512; Model Rules 1.1, 5.5).
⚖️Confidentiality & privilege
- The client portal treats messages and documents as privileged and confidential by default (ABA Model Rule 1.6). A firm's clients can only see their own matter.
- Trust-account information is presented per ABA Model Rule 1.15 safekeeping principles.
- Conflict-check screening runs only against your own firm's matters — it never crosses firms or accounts.
Your document vault
Files you upload to a matter (engagement letters, filings, court orders) are stored encrypted at rest and are accessible only to your firm and the client linked to that matter. Files are served over private, expiring links — not public URLs.
🗝️Your data & your controls
- It's your data. You can request an export or deletion of your firm's data at any time — email hello@bizbottech.com.
- Data Processing Agreement (DPA) available for Firm-plan subscribers.
- We honor applicable privacy rights (including CCPA). We don't sell your data, ever.
🤝What we ask of you
Per ABA Formal Opinion 512, get informed client consent before putting client confidences into any AI tool, and share only what's needed for the task. CaseFile is a tool for licensed attorneys — you remain responsible for reviewing every output and protecting privilege.