Security and AI transparency

How Lawfly handles your data and uses AI.

This page sets out what we do with case data and how AI features work, in plain language. Statements here are kept short and factual. Sections not yet published are marked.

NoteSections marked "To be published" are completed before launch. The Canadian edition is planned; the sections below describe what it is designed to do, and Canadian data arrangements are published before availability.

Canadian edition

Planned

Nothing is available to use in Canada yet. Before the edition is available we will publish where Canadian client data is stored and processed, how AI processing works, and how backups and logs are handled. India-specific arrangements do not describe the Canadian edition.

This website today

Now

This site collects what you enter in the early-access and contact forms. How it is used, kept and removed is set out in the privacy notice.

Privacy notice →

01 · AI use and its limits

What the AI would do, and what it would not

The Canadian edition is designed to answer questions about a matter’s documents and to help prepare drafts. AI output can be wrong or incomplete; every proposal waits for a lawyer’s decision. Lawfly does not provide legal advice.

To be published: AI vendors or models used; whether prompts and outputs are stored and for how long; whether customer data is used to train any model.

02 · Source references

Answers point to their sources

Answers and draft passages are planned to point to the passages they rest on where a source exists, and to mark where none does. A reference is a pointer for your own verification, not a guarantee.

To be published: whether Canadian case-law and legislation research is offered, and which sources it would cover.

03 · Human review

The lawyer stays in control

Proposals never change approved facts or draft text without your decision. For the Canadian edition, no court integration or automatic filing is planned, and Lawfly does not calculate or guarantee legal deadlines.

04 · Data handling

Where client data would live and how it would be protected

For the Canadian edition, where client data would be stored and processed, including AI processing, backups and logs, will be published before the product is available. No Canadian hosting location is promised today.

To be published: hosting provider and region; encryption in transit and at rest; backup practice.

05 · Access

Who would see your matters

Access controls for the Canadian edition will be described before availability.

To be published: staff access policy; authentication options; audit logging.

06 · Retention and deletion

How long data is kept, and how to remove it

To be published: retention periods; export options; deletion on request and on account closure.

07 · Subprocessors

Third parties that process data for Lawfly

To be published: list of providers and the purpose of each.

08 · Reporting a concern

How to reach us about security or AI behaviour

If you believe you have found a security issue, or an AI output that should be reviewed, write to us through the contact page.

To be published: a dedicated security contact address and response commitment.