CICERRO
CICERRO

Security & data

What is true today. And what is being built.

Advocates will paste privileged facts into this product. The posture is described as it is, including the parts still being built.

The posture. True today.

Mumbai, at rest

Compute runs in Mumbai and the database is in Mumbai. Your matters, memos and document extracts are stored at rest only there.

Your matters are yours

Every account sees only its own matters and documents. It is enforced in the application on every request and by row-level security in the database itself, which is switched on in production.

Documents

The extract is indexed for your matter and the original file is deleted from storage.

Sessions

Verified against the authentication server on every request. Cross-site requests are refused first.

Keys

The browser holds only a public key; the secrets stay on the server.

What leaves Mumbai. And why.

To produce a memo, the text of your query, the retrieved passages and any attached document are sent from our servers, never your browser, to two providers whose infrastructure is outside India. Anthropic drafts the analysis. OpenAI converts text into search vectors, transcribes voice and dictation, and stands in unseen as the backup for drafting when the primary is unavailable. Both are used under their commercial API terms, and neither may train on what is submitted. The response is checked before you see it.

We have no zero-data-retention agreements with either provider. So although neither may train on your material, each may keep what it receives for as long as its own standard terms allow. For a lawyer that is the point that matters: privileged facts, once sent, are held under the provider’s terms and not ours.

What to do with confidential material today. Bring CICERRO the legal question, not the client’s file. Remove or change names, identifiers and other identifying facts before you type or upload, and do not attach unredacted client documents. The research loses nothing from an anonymised question. Whether to put a client’s material into any cloud tool is your professional judgment; this page gives you the facts to make it.

Errors are reported to Sentry in a form built to leave out the text of questions, matters and drafts. An uptime monitor watches the service. There is no session recording or replay. The database is backed up daily and each backup is kept for 7 days; point-in-time recovery is switched off, so a restore would return us to the last daily backup. The privacy notice has not yet been reviewed by a lawyer.

Not yet in place

Zero-data-retention terms with model providersComing

Point-in-time database recovery (off today)Coming

An access log of who read which matterComing

A retention schedule and self-service erasureComing

A lawyer’s review of the privacy noticeComing

An independent security reviewComing

Every claim here corresponds to something in the running system. When an item moves from the second list to the first, this page changes the same day.