Security and privacy

How your case files are protected, and how to secure your own login.

Protecting your account

Turn on multi-factor authentication (MFA):

Click your name at the bottom of the sidebar to open your Account page.
Under Multi-Factor Authentication, click Enable MFA.
Enter the 6-digit code sent to your email address.

From then on, each sign-in asks for a code sent to your email. We recommend MFA for everyone at your firm.

How your data is protected

Documents are encrypted in transit and at rest. Case text, extracted facts and AI output are also encrypted in the database.
Each case is isolated. Questions and analyses in one case never draw on documents from another.
Access is limited to your firm, and each member's role sets what they can do. See Firm and team.

AI processing

AI processing runs on Microsoft Azure OpenAI under Microsoft's enterprise data terms. Case files are never sent to consumer AI services.
Your documents, questions and results are never used to train AI models.
Social Security numbers and payment card numbers are redacted from AI prompts before they're sent.
Documents and case data are stored on U.S.-based infrastructure. Some AI models currently run on Azure global deployments, which may process a request outside the U.S. If your matter requires U.S.-only processing, contact us before uploading.

Medical records

You can work on matters that include medical records. We don't yet sign a Business Associate Agreement (BAA). If your matter requires one, contact us before uploading.

Your data

Your data stays in your account until you delete it. Deleted documents are permanently removed. To have a case or your firm's data deleted, email support@caseinsight360.com.

For the full details, see the Privacy Policy and Terms of Use. Security questions: security@caseinsight360.com.