Skip to main content
LegalDraft™

Security & Governance

How your work is safeguarded

This page states what LegalDraft verifiably does — not a badge. Where we have not completed a formal third-party certification, we say so. Everything below can be checked against the coverage, engine, and DraftBench pages.

Default-deny data access

Ownership, tenant, entitlement, artifact-version, decision, sharing, and client-intake records run with row-level security enabled and direct anonymous or signed-in table access revoked. The application service layer authorizes each operation before using its privileged database connection.

Opaque document links

Document ids are generated from cryptographic randomness. Paid content still requires a valid document unlock, and shared views use separate opaque references that do not grant edit or signing authority.

Signed sessions

When you sign in, your session is carried in an HMAC-signed cookie the server verifies on every request — a tampered or forged cookie is rejected.

Metadata-only spend ledger

The AI request ledger records what ran — surface, model, token counts, an estimated cost, an error class, and a grounding verdict. It stores no document content, no prompts, and no personal data. Per-matter cost on the firm console is computed from this ledger; the estimate is a guide, the provider invoice is the truth.

Append-only audit trails

Attorney adjudications are written to an insert-only decision log — decisions are never edited in place. The Review Certificate is derived from that log, so it cannot claim a review that did not happen. Authority checks and drift are recorded to their own ledger on a daily schedule.

Grounded-or-flagged answers

Answers on the counsel surface are checked for grounding: a statement the system cannot tie to your document or a cited source is flagged rather than presented as settled. The verification layers, and which are live versus awaiting a key, are disclosed on the engine page.

Spend governor & outage detection

Model spend runs through a governor that can observe or enforce a monthly ceiling and fails safe; terminal model-provider failures are detected and recorded so an outage surfaces instead of silently degrading output.

Brand isolation

LegalDraft and its sibling platform are separate deployments with separate configuration; the operating brand is fixed at build time.

The protected core

These capabilities may be strengthened, evidenced and fixed; none is altered in method, removed, collapsed or made optional. A build fails when any clause below stops holding in source (the contract test under src/lib/protected-core/contract.test.ts runs on every push).

  • The grounded five-exemplar method on every drafting and editing desk. Review, Draft, draft edit, Compare, Revise and the workspace grounded route run the one grounded method (exemplar set, compare, foundation rules, guards); no document-producing route calls a model directly.
  • The exemplar spine. The foundation lanes and source kinds, the two locality ladders, docket-outcome grading, the counsel-of-record rule, SHA-256 pins, the similarity and party guards, the run-time discovery fallback and the Foundation Analysis memo.
  • The dual-engine program. Dual-default and dual-max; two independent drafting passes on the same pinned foundations; deterministic cross-comparison; claim reconciliation; the synthesis pass; the silent-synthesis guard; single-engine choices remain selectable; a missing second provider never becomes a silent single-engine "dual" success.
  • Draft and revise. The grounded first draft; the revision engine that generates the final from the attorney's decisions alone; the document wizard; the deterministic caption, signature and certificate merge.
  • The Opposing Counsel Pass. Mandatory on every draft, no opt-out; on outside paper on demand; every objection a finding only counsel can clear.
  • The adjudication rail. Approve, reject, revise per finding; reason codes; in-place editing; an append-only trail; the finalization gate; no bulk approval; the printed decision packet and the Review Certificate.
  • The existing operations and desks. Review, Redline, Cite Check, War Room, Assistant and dictation: the existing operations, entitlements and controls.
  • The deterministic engines stay deterministic. The nine estate masters and state packs; the Florida probate packet engine; the hash-pinned official forms with transcription-only filling; the kits; the citation-format engine; the matter-OS extractor; the template interpreter; the deadline calculators and their traces.
  • The consumer lane never calls a model. The consumer brand publishes templates; the gateway refuses every model call on it.
  • The trust surfaces. DraftBench (release-blocking), the engine, coverage, transparency, trust and governance pages, the authority monitor, the accessibility program and display settings.
  • Governance. The UPL capability matrix, the 14 gates, the page registry, the failure ledger, the consumer template lane, the referral fleet and the four locales.
  • The commerce model. Per-matter pricing, engine-upgrade pricing, the trial, the refund terms and the two-flag commerce interlock (closed until M19-06).
  • Mobile and Office. The PWA, the Word taskpane and the existing Expo wrapper repository.

The autonomy floor

Six acts always stop for a person, at every setting. A firm may raise the confirmation an act needs; no setting lowers this floor, and there is no bulk approval. The floor law (src/lib/autonomy/floor.test.ts) runs on every push.

  • send. Nothing is sent to anyone outside the platform without a person choosing to send it. (minimum: person)
  • share-externally. No share link leaves without a person minting it for a named recipient. (minimum: person)
  • finalize. No artifact is finalized without an attorney’s recorded decision on its exact version. (minimum: attorney)
  • export-final-packet. No final packet or external delivery leaves without an attorney’s approval and the export gate. (minimum: attorney)
  • delete. Nothing is deleted without a person confirming the deletion; legal holds refuse it outright. (minimum: person)
  • change-matter-state. A matter’s state (open, closed, on hold, archived) changes only when a person changes it. (minimum: person)

What we do not claim

We have not completed a third-party security certification such as SOC 2, and this page is not such a certification. It is a factual description of the platform's design and controls. We would rather tell you exactly what is true than display a badge we have not earned. LegalDraft provides software for reviewing and preparing documents; it is not a law firm and does not provide legal advice.