Security
Last updated: 1 August 2026
Security and confidentiality are core to a legal platform. Here is how we protect your data.
Per-matter isolation
Every table enforces row-level security, so data is isolated per matter and per firm at the database layer — not merely in application code.
Encryption
Traffic is served over HTTPS with HSTS. Credentials and API keys are encrypted at rest; secrets are never exposed to the browser.
Zero-retention AI
AI model calls run under zero-retention terms — your client data is not retained by the model provider and never trains a model.
Access and hardening
The platform runs behind a hardened reverse proxy with a strict content-security policy, rate limiting, and a firewalled network. Administrative access is restricted and audited.
Backups
The database is backed up on a daily schedule with retention, so data can be restored after an incident.
Reporting a vulnerability
Found a security issue? Email support@lucyailegal.com and we will respond promptly. Please do not disclose publicly before we have addressed it.