Security & confidentiality

Built to keep secrets

You handle the most sensitive records a client owns: their money, their accounts, their whole financial life. CounselPro is built to hold them the way your duty of confidentiality demands.

  • AES-256 at rest
  • TLS 1.3 in transit
  • SOC 2 Type II vendors
  • Hosted in the US
  • Isolated per matter
Confidentiality by design

Three promises we build around

Bank-grade protection

Your client's financial records get AES-256 encryption at rest and TLS 1.3 in transit, on SOC 2 Type II certified infrastructure. The same bar the banks that issued those statements hold themselves to.

Privilege comes first

Every matter is processed in its own isolated space with strict access controls. Nothing bleeds between clients, and your work product stays your work product.

Never training data

Our AI reads a document to pull the numbers, then lets it go. Your client's records are never kept to train a model, ours or anyone else's. That is written into our agreements, not just our promises.

Data lifecycle

Follow one document

From the second you drop a file in to the second you delete it, here is exactly what happens and who can touch it.

01
TLS 1.3

You upload

Your file leaves your machine over an encrypted connection and lands in storage that is encrypted with AES-256.

02
Isolated per matter

It goes into its own room

The document is processed in a space walled off from every other client, reachable only by the systems that need it.

03
No training, ever

The AI reads it, then forgets it

Our AI pulls the numbers and lines them up against the original page. It never keeps the content, and it is never used to train a model.

04
Delete at any time

You control the file

The structured data lands in your workspace, linked back to the page it came from. The source document stays available for that traceability, and you can delete it, or the whole matter, at any time.

Infrastructure

Locked at every layer

There is no single wall to breach. Encryption, access control, and isolation stack on top of each other, so a gap in one is still covered by the rest.

AES-256 at rest

Stored data is encrypted with the same standard financial institutions use.

TLS 1.3 in transit

Every byte between you and CounselPro moves over a modern encrypted connection.

SOC 2 Type II vendors

Our infrastructure runs on SOC 2 Type II certified providers with continuous monitoring.

Multi-factor authentication

MFA guards every account, so a stolen password alone gets no one in.

US-only hosting

Client data stays hosted in United States data centers. It does not leave the country.

Per-matter isolation

Each matter is processed in its own walled-off space with strict access controls.

Ethics & obligations

Built for your duty

Aligned with ABA Model Rule 1.6

Your duty to protect client information shaped how the product works. We keep our framework current as state bars sharpen their expectations for AI and client data.

Every number is defensible

CounselPro refuses to use a figure the statement doesn't actually print, and every number links back to its exact source page. What you hand a judge, you can stand behind on cross.

You can see exactly who touches the data

We publish every subprocessor we use, from cloud hosting to the AI providers behind the analysis. Each one is under an enterprise agreement that forbids training on your data.

View subprocessors