Security | LegalTime AI
Security

Protection built for privileged work.

Your clients trust you with their most sensitive matters. Capture stays local-first on the attorney device. When you use AI features, relevant activity is sent for processing.

Start a free trial

Local-first by design

Capture stays local-first on the attorney device by default. When you use AI features such as draft generation (Create), relevant activity is sent for AI processing.

Zero Data Retention

ZDR agreements in writing. Raw activity data is purged automatically on a rolling basis.

No model training

Your client content never trains shared models. That commitment is part of every agreement we sign.

Encrypted in transit

The entries you release travel to your billing system over TLS 1.2+, through your firm’s own login.

Instant pause

One click stops capture entirely, and nothing is recorded until you resume. Personal time stays personal.

SOC 2 in progress

A SOC 2 examination is in progress. LegalTime AI is not certified. Current controls and documentation are available under NDA.

Report a security issue

Help us keep LegalTime safe.

If you believe you have found a security, privacy, or ethics issue, email team@legaltime.ai or use the anonymous report form. Email is optional. Reports can remain anonymous.

The machine-readable disclosure contact is at /.well-known/security.txt.

Security questions, answered.

Where does my data live?
Capture stays local-first on your machine by default, and raw activity is purged on a rolling schedule. When you use AI features such as draft generation (Create), relevant activity is sent for AI processing. The finished entry you approve is then sent to your billing system. Drafts stay attorney-only until you release them.
Does data leave my device for AI processing?
Yes, when you use AI features such as draft generation (Create). Capture stays local-first on the attorney device by default. Create sends relevant activity or content for AI processing. Released entries then go to your billing system after you approve them. We do not train shared models on your content. The current AI processing path is on subprocessors.
Do you train AI models on our data?
No. We sign Zero Data Retention agreements and never train shared models on client content. Improvements to your drafts come from your own corrections, scoped to your account.
Can my firm or other partners see my drafts?
No. Drafted entries are visible only to you until you release them. LegalTime AI is not a monitoring tool, and we will not build one.
Is LegalTime AI SOC 2 certified?
A SOC 2 Type II examination is in progress. LegalTime AI is not SOC 2 certified. We are happy to share our current security documentation and controls under NDA on request.
What exactly leaves my computer when I release an entry?
The finished entry: narrative, matter, billing code, and duration. It is sent to your billing system through your firm’s existing connection, encrypted in transit. That release path is separate from Create. When you use AI draft generation, relevant activity is sent for AI processing before you review the draft.
Can I pause capture?
Yes, with one click, and capture stays off until you turn it back on. Nothing is recorded while paused.
What happens to our data if we stop using LegalTime AI?
Uninstalling removes capture, locally stored raw data is purged, and the entries already in your billing system remain yours, where they always were.

Start a free trial