Security & data

Your inquiries stay in your accounts.

Prospective clients trust your firm with what happened to them. Everything we build is designed so that trust never leaves your systems.

Where it runs

In your accounts. Automations, logs and keys live in the firm's own cloud and software accounts, billed to the firm. We don't keep copies.
Behind your sign-in. Anything with a web address sits behind your firm's own sign-in with multi-factor authentication. Nothing is open to the public internet.
A named user per firm, with only the access the work needs. Access is revoked the day an engagement ends.

Commercial AI providers on zero-retention terms where offered, under the firm's account. No training on your data.
Drafts and bookings only. The system replies about the person's own inquiry and books with your staff. It never gives legal advice, and a lawyer decides on representation.
Support for your supervision duties under ABA Formal Opinion 512: a short written description of what the system does, what staff approve, and how to switch it off.

Inquiry data is treated as prospective-client confidential information (ABA Model Rule 1.18).
We never sell, share or route your leads. This is a clause in every agreement.
No case files or medical records are part of the engagement.

Written notice within 72 hours of any incident affecting your data.
A kill switch you control, with your existing answering service as the fallback.
Deletion on exit, within 30 days, with a written certificate.
Insurance: technology errors-and-omissions and cyber cover is in place before we receive any access. Certificates are attached to every agreement.

The list of services used for your firm is attached to your agreement and named before work starts. Questions: security@casestead.com.