Security.
You are handing us confidential deals. Here is how the paper is protected, who can see it, and what we do and do not do with it.
Your documents are used to do your work, and for nothing else.
They are encrypted, kept inside the matter they belong to, seen only by your team, and never used to train a model. When you delete them, they leave the active record.
The controls
-
Encrypted at rest
Documents and deal data are encrypted at rest with AES-256-GCM. Your paper is unreadable on disk.
-
Encrypted in transit
Everything moves over TLS. Drafts, redlines and email content are protected on the wire.
-
Isolated by matter
Each negotiation runs in its own workspace. Only the people on the matter can see the paper. Nothing crosses between matters.
-
Only your team can email her
Every inbound email is checked against the sender's domain authentication. Mail from outside your team is turned away unread.
-
Not used to train models
Your documents are not used to train shared or public models. Model providers see them only inside the request that needs them.
-
Retention and deletion
You control how long deal data is kept. Delete a document or a matter and it is removed from the active record.
Where it is processed
In the United States by default. Regional residency is available for enterprise deployments on request.
Who processes it
A short list of infrastructure and model providers, each named with what it handles and where. Deal content goes to model providers through commercial terms that retain nothing. See the list.
Compliance
SOC 2 Type II certification is in progress. Current status and security documentation are available to evaluators on request.
Single sign-on
Sign in with Microsoft or Google, so access follows the identity controls your organization already runs. Owners approve who joins the team, and a pending member cannot email Leela until approved.
Responsible disclosure
Found something? Write to [email protected] with "security" in the subject line. We respond within 1 business day and coordinate disclosure with you.
Run your security review with us.
Schedule a walkthrough