Security you can check,
not just trust.
How we protect your matters, documents and conversations — and how we meet US privacy law, including California's CCPA/CPRA.
- SOC 2 Type 2 infrastructure
- AES-256 encryption
- Database-enforced isolation
- CCPA / CPRA
Everything you store,
protected the same way.
Matters, documents, drafts and conversations are all covered by these safeguards.
Your firm's data stays your firm's
Each firm works in its own sealed workspace. The separation is enforced by the database itself, not only by our application: every request runs with access limited to your firm's records, so one firm's matters, documents and conversations cannot surface in another's.
Independently audited infrastructure
Our application hosting and database providers are independently audited to SOC 2 Type 2. Our database provider is also ISO 27001 certified.
Encrypted at rest and in transit
Stored data is encrypted at rest with AES-256, and everything sent between you and AnrakLegal is encrypted with TLS. Firms can also encrypt their content under a key of their own.
Backed up every day
Databases are backed up daily, so your work can be recovered if something goes wrong.
Your work powers your answers.
Nothing else.
Personal details are redacted before a page reaches a third-party AI model, and nothing you upload is used to train one.
Redacted before any AI model
Personally identifiable information is redacted from case documents before they reach a third-party AI model, by default. If redaction hasn't finished, the content is withheld rather than sent.
Never used to train models
Your content is not used to train or fine-tune third-party AI models.
Processed in the United States
AI model requests for US accounts are routed to US-region infrastructure where that routing is available. Account data is currently stored in our primary database in India; we are moving US accounts' storage to the United States.
Your US privacy rights
- Know and access the personal information we hold
- Correct or delete it
- Take a copy with you
- Opt out of sharing for cross-context behavioral advertising
- Use these rights without discrimination
Residents of California and other states with privacy laws have these rights; we honor Global Privacy Control signals.
Security or procurement review?
Talk to our team about your requirements. We answer security and data-handling questions up front.