
Security & data
What is true today. And what is being built.
Advocates will paste privileged facts into this product. The posture is described as it is, including the parts still being built.
The posture. True today.
Mumbai, at rest
Your matters are yours
Documents
Sessions
Keys
What leaves Mumbai. And why.
To produce a memo, the text of your query, the retrieved passages and any attached document are sent from our servers, never your browser, to two providers whose infrastructure is outside India. Anthropic drafts the analysis. OpenAI converts text into search vectors, transcribes voice and dictation, and stands in unseen as the backup for drafting when the primary is unavailable. Both are used under their commercial API terms, and neither may train on what is submitted. The response is checked before you see it.
We have no zero-data-retention agreements with either provider. So although neither may train on your material, each may keep what it receives for as long as its own standard terms allow. For a lawyer that is the point that matters: privileged facts, once sent, are held under the provider’s terms and not ours.
What to do with confidential material today. Bring CICERRO the legal question, not the client’s file. Remove or change names, identifiers and other identifying facts before you type or upload, and do not attach unredacted client documents. The research loses nothing from an anonymised question. Whether to put a client’s material into any cloud tool is your professional judgment; this page gives you the facts to make it.
Errors are reported to Sentry in a form built to leave out the text of questions, matters and drafts. An uptime monitor watches the service. There is no session recording or replay. The database is backed up daily and each backup is kept for 7 days; point-in-time recovery is switched off, so a restore would return us to the last daily backup. The privacy notice has not yet been reviewed by a lawyer.
Not yet in place
Zero-data-retention terms with model providersComing
Point-in-time database recovery (off today)Coming
An access log of who read which matterComing
A retention schedule and self-service erasureComing
A lawyer’s review of the privacy noticeComing
An independent security reviewComing
Every claim here corresponds to something in the running system. When an item moves from the second list to the first, this page changes the same day.