Skip to content
COUNSELKRAFT
Data security

Your Clients’ Data Deserves More Than a Promise.

Privileged information is handled on audited infrastructure, under role-based access, with encryption in transit and at rest. It is never used to train an AI model.

Book a Strategy CallSee How We Work
  • ISO 27001 certified
  • SOC 2 Type II compliant
  • HIPAA compliant workflows
  • SOC 2 Type II
  • Encrypted at rest
  • Role-based access
  • Audited infrastructure
  • Continuous monitoring
  • No client data trains AI
How we protect your data

Controls at Every Layer.

Security is designed into the workflow, not bolted on at the end.

Encryption Everywhere

TLS in transit and AES-256 at rest, across every system that touches client data.

Role-Based Access

Least-privilege access by matter and by role, with multi-factor authentication required.

Audited Infrastructure

Segregated environments, hardened endpoints, and infrastructure reviewed against SOC 2 criteria.

No AI Training on Your Data

Client content is never contributed to model training, ours or any vendor’s.

Continuous Monitoring

Logging, alerting and regular penetration testing, with an incident response plan we rehearse.

Contractual Protection

NDAs with every client and every professional, plus BAAs where PHI is involved.

Confidentiality by design

Built for Privileged Work.

Legal work carries obligations that ordinary outsourcing does not. Our operating model is shaped around them.

  • Non-disclosure agreements signed with every client
  • VPN and client-server working arrangements available
  • Secure FTP transfer to prevent data pilferage
  • Confidentiality training for every professional
  • Clean-desk and device-control policies in delivery centres
  • Confidential by Design
  • Competence Focused
  • Attorney Supervised
  • You Stay in Control
Certifications

Independently Verified.

  • SOC 2 Type II

    Security, availability and confidentiality controls verified over time, not just at a point in time.

  • ISO 27001

    A certified information security management system governing how we handle client information.

  • HIPAA

    Workflows designed to assure HIPAA compliance wherever protected health information is involved.

Ask us the hard questions.

We are happy to walk your IT and risk teams through our controls, policies and audit reports.

Book a Strategy CallSee our ethics model