Security and data
Your matters stay your matters.
Processed in the EU. Never used to train AI models. Your firm controls retention.
Processed in the EU
Never used to train AI
Data processing agreement for every firm
MFA for every member
AI notice on every screen
No certification yet
Security at a glance.
| Where it runs | Database and files in the Europe region. AI models through Google Cloud Vertex AI in the EU. |
|---|---|
| AI training | Never |
| Our role | Processor for your firm, which is the controller |
| Retention | Set by your firm, in years after a matter closes |
| Access | Two-factor authentication for every member. Support access only with your owner's written consent, for 24 hours, recorded. |
| Isolation | One firm never sees another. The database rules are tested in every release. |
| Audit trail | Uploads, drafts, confirmations, sign-offs and exports recorded in the matter's activity |
| AI Act | Article 50 properties on every exported file |
| Certification | None yet |
Three promises.
You always know when you are reading AI output
Every screen of a matter carries the AI notice.
You always know who processes your data
The list of sub-processors, with their regions, is in the pack for your firm.
Your firm's data stays in the EU
Text goes to a language model only to do the task in your matter, and is never used for training.
Due diligence
The pack for your firm.
What your practice needs to check Clausa as an IT provider with access to client data. Anything not yet confirmed is marked as such.
Documents and policies.
Questions about security: hello@clausa.ie