Your words stay yours.

Locked with your password

Every case has its own encryption keys (AES-256-GCM). Those keys are stored only in locked form, sealed to your account's key, and your account's key opens only with your password or with the recovery code we show you once, when your account is created. We keep neither your password nor your recovery code.

When you sign in, your unlocked key is held for that session only, in a form that only your browser's session cookie can open. While you are signed in, our servers process your messages to produce answers, and they store your content only in encrypted form. Signing out discards the unlocked key.

What we hold

Your chats and case documents are stored only in a form we cannot read. Asked to hand them over, we could produce only encrypted data.

Your name never reaches the AI

Before anything is sent to the AI, your name, the names of the other people and companies in your case, email addresses, phone numbers, street addresses, identification numbers and card and account numbers are replaced with neutral labels. You do not have to list anyone: when you open a case, the names in your description are found and hidden from then on. The real details are put back only on your own screen.

Private AI infrastructure

Research runs on Anthropic's Claude models hosted on Amazon Bedrock, inside Confidelio's own Amazon Web Services account in the United States. Anthropic, the company that makes the AI, never receives what you write.

The account is set so that nothing is kept once an answer is returned. The service checks that setting before every request and sends nothing if it cannot confirm it. Nothing you write is used to train any model.

Who can read your cases

You. An attorney can read a case only while you choose to share it with them: the case key is sealed to that attorney's own key, which opens only with the attorney's password. Turn sharing off and the attorney's access is withdrawn; anything new on the case goes under a new key.

Confidelio staff run the systems but cannot decrypt your stored chats or documents. Neither can our hosting provider. We do not sell your data or share it with anyone.

In transit and in our logs

Everything travels encrypted (TLS). Our server logs never contain what you write.

What we collect

Your account details (name and email), your signed engagement and consent documents, your conversations and documents (encrypted as described above), consultation requests and usage counts. No advertising trackers and no analytics that profile you.

Your memory is yours

So you never have to explain yourself twice, Confidelio remembers what you have told it about yourself and your cases and uses it across your own cases. That memory is encrypted like everything else, belongs to you alone and is never used for anyone else. Read it, correct it or delete it at any time on the page “What Confidelio knows about you”.

Delete anytime

Delete any case yourself, from inside the case. Deletion is immediate and permanent: every message, every fact on file and the case description are erased, along with what was learned from that case. We keep only a record that the case existed, its dates, and proof that any written notice was given to you. To delete your whole account, write to us.

If you lose your password and your recovery code

Your recovery code keeps your cases readable if you forget your password. If you have neither, nobody can restore what you stored, us included, because no other copy of your key exists. You can start over with new keys.

What we keep under our own key so the service can run

A few things have to work when you are not signed in, so they are encrypted with a server key instead: the names found in your cases (so they can be replaced with neutral labels), the kind of case on your engagement documents, the documents you sign, and the dates and counts used for reminders. An account created before 21 October 2026 moves to password protection the next time you sign in.

Service providers

Amazon Web Services (AI processing on Amazon Bedrock, with your identifying details replaced; keeps nothing). Render (hosting and database; holds only encrypted content). Stripe (payments; your name, email and card, never your conversations). Google Workspace (the emails we send you; never your conversations). No one else receives your data.

Legal demands

We resist legal demands for your data to the full extent the law allows, and we assert attorney-client privilege and work product protection wherever they may apply.

Contact

Questions or requests: [email protected].