Security Built for Attorney-Client Privilege

We design our architecture around strict legal privilege obligations, guaranteeing your confidential case files remain completely protected.

Zero-Data Model Training

Your firm's uploaded documents, queries, and summaries are NEVER used to train, fine-tune, or refine open-source or commercial AI models.

AES-256 & TLS 1.3 Encryption

All client data is encrypted at rest using military-grade AES-256 and in transit using TLS 1.3 cryptographic protocols.

SOC 2 Type II Certified

Independently audited controls covering system security, availability, confidential handling, and privacy processing integrity.

Isolated Tenant Architecture

Every firm operates inside logically or physically isolated workspaces with dedicated database containers to prevent cross-contamination.

Enterprise Controls

How askMarshal Protects Your Work Product

Traditional consumer AI tools retain prompts and outputs for model tuning. AskMarshal explicitly breaks this paradigm with dedicated API agreements guaranteeing zero data retention across all sub-processors.

Role-Based Access Controls (RBAC) with granular case workspace permissions.

Immutable audit logs tracking every document view, prompt, and export event.

Single Sign-On (SSO / SAML 2.0) with mandatory multi-factor authentication (MFA).

Compliance Standards

SOC 2 Type II Certified

HIPAA Compliant Options

ABA Model Rule 1.6 Aligned

ISO 27001 Infrastructure

GDPR & CCPA Compliant

Zero Customer Data Retention

Have Specific Security or BAA Questions?

Our Security & Compliance engineering team can assist your firm’s IT department with custom security questionnaires and SOC 2 report requests.