Security & data protection
Use AI without putting your bar license at risk.
Enterprise-grade protections. No enterprise price tag.
Bars are issuing AI ethics opinions. Malpractice carriers are asking about AI on applications. Your clients are already asking how you protect their data. These are the commitments we make to every firm, in writing.
We took the same security patterns enterprises use and built them into every Albi tier from day one. A 15-lawyer firm gets big-firm protection without a big-firm budget.
- 1.
Your data never trains AI models.
Nothing you put into Albi ever trains or improves any AI model. Not ours, not our providers'. Period, and it's in the DPA.
- 2.
Your firm's data is isolated and encrypted.
Each firm gets its own private space inside Albi. Encrypted in transit and at rest. Nothing shared, and no firm can ever see another firm's data.
- 3.
Every AI action is logged and auditable.
Every request, every output, every document reference, timestamped. The log is hash-chained and verified nightly, so when a bar committee asks what happened you can show the record has not been altered.
- 4.
Privileged work routes to private models.
Work you classify as privileged is routed to private models and never touches shared ones. And if the system can't tell whether something is privileged, it treats it as privileged.
- 5.
You control what Albi can access.
Albi has its own permission model on top of your case management system. Access is granted per user, with six confidentiality presets that decide what each person can reach.
- 6.
You own your data, including on the way out.
Cancel and we export everything to you, then permanently delete it within 30 days, except the audit records we are required to keep for seven years. You get a signed certificate of deletion. Your data is yours the whole time you are with us, and when you leave.
Clause 3, as it actually looks.
An audit trail is either real or it is a sentence on a page.
This is a fragment of the record Albi keeps: who asked, what was generated, which matter it drew on, and where the output was written back. The routing decision is logged as its own line, so a privileged document routing to a private model is something you can point at rather than something we assert.
Draft generated · demand letter
Routed to private model
Approved and written back
hash-chained · verified nightly
Ask us anything a bar committee would ask.
Where does privileged data go. What happens if a model provider changes their terms. Who at Albi can see your matters. What the audit record actually contains, and how you would produce it.
We will answer all of it on a call, and in writing if you want it in writing.