Security you can check,
not just trust.
How we protect your matters, documents and conversations — and how we meet India's Digital Personal Data Protection Act, 2023.
- SOC 2 Type 2 infrastructure
- AES-256 encryption
- Database-enforced isolation
- DPDP Act, 2023
Everything you store,
protected the same way.
Matters, documents, drafts and conversations are all covered by these safeguards.
Your firm's data stays your firm's
Each firm works in its own sealed workspace. The separation is enforced by the database itself, not only by our application: every request runs with access limited to your firm's records, so one firm's matters, documents and conversations cannot surface in another's.
Independently audited infrastructure
Our application hosting and database providers are independently audited to SOC 2 Type 2. Our database provider is also ISO 27001 certified.
Encrypted at rest and in transit
Stored data is encrypted at rest with AES-256, and everything sent between you and AnrakLegal is encrypted with TLS. Firms can also encrypt their content under a key of their own.
Backed up every day
Databases are backed up daily, so your work can be recovered if something goes wrong.
Your work powers your answers.
Nothing else.
Personal details are redacted before a page reaches a third-party AI model, and nothing you upload is used to train one.
Redacted before any AI model
Personally identifiable information is redacted from case documents before they reach a third-party AI model, by default. If redaction hasn't finished, the content is withheld rather than sent.
Never used to train models
Your content is not used to train or fine-tune third-party AI models.
Stored in India
Your data is stored in India. Some processing may take place outside India, as the DPDP Act permits, and never in a country the Government of India has restricted.
Your rights under the DPDP Act
- Access the personal data we hold about you
- Correct or update it
- Erase it
- Nominate someone to act for you
- Raise a grievance
If a concern is not resolved, you can complain to the Data Protection Board of India.
Security or procurement review?
Talk to our team about your requirements. We answer security and data-handling questions up front.