Security, in plain words

Where your files are

In a private bucket in a Supabase project hosted in the EU, encrypted at rest by the provider and reachable only by our server. A file is never public: when someone in your firm opens one, the server mints a link that stops working after fifteen minutes.

Who can see them

Only people your firm has invited. Every request is filtered by your firm’s identity before it touches the database, and a record belonging to another firm answers exactly as a record that does not exist — there is nothing to probe for. The database rejects the public keys outright: only the server holds a key that works.

How people sign in

With a one-time link sent to a work address, valid for fifteen minutes and usable once. We store only a SHA-256 hash of it, so a copy of our database is not a set of keys. The session afterwards is a signed cookie holding two identifiers and nothing else. Roles are read fresh on every request, so removing someone takes effect at once.

What the model sees

When automatic reading is on, the text of a document is sent to OpenRouter with zero data retention and data collection denied, and the answer is fields for a person to confirm. Turn it off in settings and nothing leaves at all — the checklist works the same way with the fields typed in.

Deleting

Every matter has a Delete matter and all documents button: the records go and the files are removed from storage, immediately, with a line left in the audit log saying who did it. A daily job deletes documents after 30 days and matters after 60 days in any case. And the firm’s owner can delete the firm itself, from Settings — that takes the people, the matters, the letters, the files and the audit log with it, and we cannot recover any of it afterwards.

What is still missing

Conveyancing Chaser is a prototype. There is no two-factor authentication yet (sign-in is by email link), no penetration test, no ISO certification and no signed data processing agreement — a draft is with the owner. Ask before you put a live file in it that you could not afford to lose.