Data handling and your responsibilities
Different data categories have different handling. Encryption of protected content does not mean that all account information is unreadable to the service.
| Category | Handling | Your responsibility |
|---|---|---|
| Protected case content and files | Encrypted before storage and synchronisation. | Keep the correct private key and secure the devices that can read the content. |
| Account, billing and operational metadata | Readable where needed to operate the service, including technical identifiers, dates and file sizes. | Review the privacy policy and enter only the information required for your work. |
| Optional AI input | Submitted prompt, history and selected context are processed in readable form by the service and provider. | Review what you submit and verify generated text before use. |
| Recovery key and readable export | The service does not keep a permanent recovery copy of your private key. Readable export requires the key. | Store the recovery file safely and protect any exported copy. |
Encryption before synchronisation
Protected content is encrypted on the device before it is sent for storage and sync. The content mechanism combines AES-256-GCM with ML-KEM-768 to protect the encryption key. This applies to encrypted content; it does not mean every field in the service is unreadable.
Information the service needs to read
Account and billing information, organisational fields and operational metadata support the service. Examples include dates and times, connection identifiers and file sizes. The privacy policy describes the data categories in detail.
Your private key and recovery
The private key is provided during activation and is not kept as a permanent recovery copy by the service. Keep the recovery file somewhere safe. Access to encrypted content depends on the correct key being available.
Offline work and secure synchronisation
You can work with data available on your device. When the connection returns, protected content syncs in encrypted form. Securing your computer or phone, locking the screen and keeping the key safe remain essential.
Privacy when using AI
The optional AI Assistant processes the content you choose to submit in readable form through the service and the third-party AI provider. This differs from storing encrypted case content. Read the notice before enabling the feature.
Your data and management options
The account includes data export and a deletion process. Exporting readable data is a separate process requiring your private key. The policy explains the conditions, retention and relevant procedures.
Transparency and personal data protection
The privacy policy describes processing purposes, providers, rights and contact channels. Encryption is part of the protection architecture; it is not by itself a certification of GDPR compliance for every use within your practice.