Firm isolation in the database
Every firm's records are kept apart by PostgreSQL row-level security, enforced by the database itself — not only by application code.
CONFIDENTIALITY & SECURITY
Your clients' documents, kept to your firm.
Client confidentiality is the first rule of practice, so it is the first rule of LegalOpine. Here is how your firm's documents are protected.
SECURITY
Isolation by design.
Protection is part of how LegalOpine is built — not a setting someone has to remember.
Least-privilege access
The application connects without administrator rights, so it cannot step around those rules.
Private document storage
Files sit in private storage with no public links. LegalOpine streams each one only to people allowed to see it.
Tamper evidence
The SHA-256 fingerprint of every uploaded file is recorded.
Checked uploads
Files are identified by their contents, not their names, and only document and image formats are accepted.
Protected sign-in
Passwords are stored only as bcrypt hashes, and every session has its own protection against forged requests.
Audit trail
Every change is recorded in an audit log.
AI AND YOUR DATA
AI, only on your terms.
Reading, classifying and risk checks run on our own servers. Drafting, and any other feature that uses an outside AI provider, works under these safeguards.
- Off unless you switch it on Sending text to an outside AI provider is opt-in for each firm, and off by default. Without it, only processing on our own servers runs.
- Names and IDs masked first Party names, Aadhaar and PAN numbers, phone numbers, email addresses and addresses are replaced with tokens such as [PERSON_1] before any text leaves, and restored when the answer returns.
- Zero-retention providers only We use only providers whose contracts forbid them from keeping the text or training on it.
- Nothing kept in between The list matching tokens to real names lives in memory for a single request and is never stored.
- Never used for training Your firm's matter data is never used to train AI models.
FAQS
Confidentiality questions.
Can another firm on LegalOpine see our matters?
No. Every record your firm owns carries your firm's identity, and the database refuses to return another firm's rows — even if the application asked for them.
Can LegalOpine staff read our documents?
LegalOpine staff do not open a firm's matter data, except when the firm grants time-limited support access or the law requires it.
Where is our data stored?
Our application servers are in India. Documents are held in private object storage that only LegalOpine can reach. The Privacy Policy describes the service providers involved.
Who is responsible under the DPDP Act?
For your clients' matter data, your firm is the Data Fiduciary and Vidyadhari AI is your Data Processor, acting only on your instructions.