Aligned with ISO 27001.
ISO 27001 processes; certification in preparation.
Security
Security in practice
Enterprise-grade security and controls
Legal Cognition protects legal work from the PII gateway before model calls to matter-based permissions and an append-only audit trail. We answer the most important questions directly.
How does Legal Cognition protect personal data during AI calls?
A matter- and tenant-bound PII gateway can replace personal and identifying data with stable, HMAC-based placeholders before external model calls. A second tripwire checks the already pseudonymised outbound payload. The protection level is configurable for each deployment model.
How is data separated between organisations and matters?
Database and storage rules restrict direct access to the active tenant. Backend endpoints additionally check the relevant matter and the role assigned within it.
Who can view content or unmask pseudonymised data?
Access rights belong to the individual matter. External participants see only the content released for their role. Unmasking is limited to privileged roles, can require a reason and is recorded in the audit trail.
Can Legal Cognition staff access our matters?
Not in normal operation. Troubleshooting access requires your approval, is time-limited and is recorded in the audit trail. With Distributed and Air-Gapped, you control operations on your own infrastructure. Air-Gapped requires no external connection.
How does Legal Cognition ensure no one is training on my data?
Legal Cognition contractually prohibits model providers from using customer data for training. Your data is used only to process your requests, not to improve general-purpose models. We require Zero Data Retention (ZDR) from model providers.
What is logged, and can the log be altered?
The domain change and its audit event are written in the same transaction. The trail records the actor, action, target, time and relevant request context. For regular application roles it is append-only; existing entries cannot be changed or deleted.
How are unusual access patterns detected?
Audit data can be evaluated for bulk access, long-inactive external accounts and selective reading patterns. Results remain restricted to internal roles.
How often does Legal Cognition perform security audits and vulnerability assessments?
Legal Cognition runs automated vulnerability scans and maintains continuous security monitoring. Identified vulnerabilities are assessed, remediated and re-tested.
Where is data hosted and processed?
You choose between Managed Cloud, Dedicated, Distributed and Air-Gapped. Data residency, external connectivity and operational control follow the agreed deployment model.
Can we operate Legal Cognition entirely ourselves?
Yes. Distributed and Air-Gapped run on your own infrastructure and can use local models. You control operations, keys, backups, access and audit logs. Air-Gapped requires no external connection. Dedicated provides an isolated environment for your organisation; deployment on your own infrastructure is optional.
Semantics-preserving masking
When masking is enabled, Legal Cognition replaces personal information with consistent placeholders before sending content to an external AI model. The semantic meaning of the text is preserved.
The mapping to the original information is not sent to the model. Only authorised people can unmask the data.
On AWS
Amazon Bedrock AgentCore
AWS infrastructure
Agents with clearly defined access limits
Legal Cognition runs agents in isolated execution environments. Within their permissions, they can carry out tasks autonomously. Access to matters, tools and external services is checked and technically enforced outside the model.
Credentials remain with the protected credential broker. It uses them exclusively for authorised requests; the agent receives the result.
These limits remain in place even if an agent follows malicious instructions in a document. A transfer of confidential matter content to an unapproved destination is blocked and recorded.
Security
Security you can verify.
Controls that can be verified in the architecture, in the contract and throughout operation.
Your data, under your control.
Dedicated provides an isolated environment for your organisation. Distributed and Air-Gapped run on your infrastructure.
Professional and official secrecy.
Confidentiality duties for law firms, courts and public administration.
Encrypted throughout.
In transit and at rest — tailored to the chosen deployment model.
Authorized users only.
Roles, responsibilities and access are logged.
Security as a process.
Regular audits and tests keep protection current.
FROM SECURITY REVIEW TO APPROVAL
Your requirements.Backed by evidence.
We address your questions on privacy, information security, access controls and operating models, and provide the technical and organizational evidence your security and procurement processes require.