Security for client financial records
You hold the most sensitive records a client owns: their money, their accounts, their whole financial life. CounselPro is built to hold them the way your duty of confidentiality demands.
Duty
Bank-grade encryption
Client financial records get AES-256 at rest and TLS 1.3 in transit, on infrastructure that outside auditors check. It is the same bar the banks that issued those statements hold themselves to.
Privilege comes first
Every matter is processed in its own isolated space with strict access controls. Nothing bleeds between clients, and your work product stays your work product.
Never training data
The AI reads a document to pull the numbers, then lets it go. Client records are never kept to train a model, ours or anyone else’s. That is written into the agreements we sign, not just into this page.
Follow one document
From the moment a statement leaves your machine to the moment you delete it, here is every place it sits, what is switched on around it, and what it is never allowed to reach.
You upload
The file leaves your machine over an encrypted connection and lands in storage that is encrypted at rest.
The file gets its own room
The document is processed in a space walled off from every other client, reachable only by the systems that need it.
The AI reads the pages
Only what the page prints becomes a figure, read again against the page image until every number matches what the bank printed. The document is never kept to teach a model.
You delete the file
The source stays only so every figure keeps its page. Delete a document, or the whole matter, whenever you want.
Another matter, even one in your own firm.
A model’s training set, ours or a vendor’s.
A vendor we have not published on the subprocessors page.
A server outside the United States.
Controls
Locked at every layer
There is no single wall to breach. Encryption, access control and custody of the file stack on top of each other, so a gap in one is still covered by the rest. Hand this band to your client or to the firm’s IT person; it is written to answer them.
Encryption
On the wire, and on the disk it lands on.
AES-256 on every stored document and on the figures pulled out of it.
TLS 1.3 between your browser and CounselPro, and between our own services.
Access
Who can reach a matter, and what stops them.
Every sign-in is a one-time code sent to your email address. There is no account password to steal, reuse or leave saved in a browser.
Every matter runs in its own walled-off space, reachable only by the systems that need it.
Custody
Where the file lives, and how it leaves.
United States data centers. Client data does not leave the country.
We run on providers audited to SOC 2 Type II, with continuous monitoring. That is their certification, attested to us, and not CounselPro’s own.
No client document, figure or export trains a model, ours or a vendor’s. The enterprise agreements we sign forbid it.
Delete a document, or an entire matter, whenever you want.
Every vendor is named, from cloud hosting to the AI providers behind the analysis, along with what it does and where it sits. Read the subprocessors
Your duty
Built around ABA Model Rule 1.6
Your obligation to protect client information shaped how the product works. We keep the framework current as state bars sharpen what they expect from AI and client data.
Every figure links to its page
CounselPro cannot use a number the statement does not print. Each figure links back to the exact page it came from, so you can stand behind it on cross.
The documents behind the claims
Every claim on this page has a document under it. All three are public, and none of them need a call first.
Subprocessors
Every vendor that touches your data, from cloud hosting to the AI providers behind the analysis, and where each one sits.
Read the subprocessorsPrivacy policy
What we collect, why we hold it, and what we will never do with it.
Read the privacy policyAsk us the hard questions
Send the security questionnaire, or put the one question your IT person always asks in an email. We would rather answer it before you sign than after.
Questionnaires welcome