How firms' client data is protected. TrusteeClear is software infrastructure — not a law firm — and your attorneys control all legal work and approvals.
How your data flows — the architecture
Your browser
→TLS
TrusteeClear app
Sign-in + tenant proxy — every request scoped to your firm or matter
→
Postgres with row-level security
Your tenant's rows only — enforced in the database, tested in CI
Encrypted document storage
Governed AI gateway
Spend ceiling, tripwires, no training on your data
→
The audit chain
Every action logged · Trust Receipts hash-chained
How your clients' data is protected
Tenant isolation. Every firm's data is separated at the database level by Row-Level Security — one firm can never see another's matters. Enforced in the database, not just the app, and covered by an automated test suite.
Encryption. Data is encrypted in transit (HTTPS/TLS) and at rest.
Document security. Trusts, death certificates, and financial documents live in private storage with signed, matter-scoped access — never public URLs, never emailed as attachments.
Access control. Magic-link sign-in (no passwords to steal), least-privilege keys, per-firm staff roles, and separated, logged platform administration.
Audit trail. An append-only audit log records who accessed or changed what, and when.
AI handling. AI organizes documents and answers general questions; it never gives legal advice, and our AI vendor terms prohibit training on your client data. Our model provider retains API inputs and outputs for up to 30 days for safety monitoring, then deletes them — we do not claim zero retention, because that would not be true. Every AI call runs through one governed gateway with a fail-closed monthly spend ceiling, and every client-facing output is gated by your attorney's review.
Backups & recovery. Automated backups with periodic restore testing.
Incident response. A documented runbook with defined severities, containment steps, and notification.
Compliance posture
SOC 2 Type II: on our roadmap — the control practices described on this page operate today; a certified report is not yet available and we will not claim one until it is.
Data Processing Addendum: available — TrusteeClear acts as your data processor; your firm remains the controller.
UPL / Fla. Bar Op. 24-1: built around attorney-controlled outputs; the AI discloses it is not a lawyer and never delivers a final legal document without your attorney's approval.
Accessibility. built to WCAG 2.2 AA with automated scans, keyboard automation and source guards on every release; the accessibility statement and the conformance report (VPAT 2.5 layout) are public. Accessibility statement and conformance report
Subprocessors
Supabase (database/auth/storage), Vercel (hosting), Anthropic (AI), Stripe (payments), and email/SMS providers — all US-based, under data-protection terms.
Questions?
For a security questionnaire or our DPA, contact security@trusteeclear.com.
TrusteeClear. General information about Florida Trustee duties, not legal advice. Using these tools does not create an attorney-client relationship. AI organizes and drafts; TrusteeClear never files or sends anything on your behalf. Where attorney review happens, it is your firm's attorney or an independent attorney you engage directly. AI observations and chat are informational only — not legal advice, and not attorney-reviewed.