What happens to a document you check, where it is processed, which providers see what, and what we keep. Written for the due diligence a law firm runs before a pilot. Deutsch · Français
A pasted text or an uploaded file is read into memory, checked, and discarded when the report is returned. It is not written to disk and not kept in any database. What stays is a row of numbers about the result: how many citations, of which colour, and for each citation its colour, reporter and year and the deep check's verdict. Never the text, the case names or the volume and page. A brief you choose to save in your account is the one exception; see below.
The application and the registers run on one server at Hetzner Online in Falkenstein, Germany. The server accepts no web traffic directly: SSH with keys only, and the site reaches it through an encrypted Cloudflare tunnel. Cloudflare terminates TLS at its edge, so a check is decrypted there and re-encrypted to our server; Cloudflare caches the public pages, never a check. Citations are looked up in our own copy of the public registers (CourtListener, Caselaw Access Project, govinfo, entscheidsuche.ch), so no citation and no text is sent to a register to check it.
| You use | Goes to | What |
|---|---|---|
| The default check (US or Swiss) | nobody | Nothing leaves the server. |
| Find cases, Swiss (a statute article) | nobody | Nothing leaves the server. |
| The deep check | the judgment model (jev, by TypeSafe) through OpenRouter, USA | For each citation, the sentence before it and passages of the cited, public decision. |
| Find cases, US (beta) | the same model | Your sentence, then your sentence with passages of up to 10 candidate cases. |
| Sign-in | Resend, USA | Your email address and the one-time link. |
| A paid plan | Stripe | Your email address and payment details. We never see the card. |
The deep check is chosen per check; it is never on by default. For a text under professional secrecy (for instance Art. 321 of the Swiss Criminal Code), use the default check, remove names before a deep check, or ask for a dedicated instance.
| Data | Kept | Deleted |
|---|---|---|
| Checked text and uploaded files | no | when the report is returned |
| Result numbers per check (no text, names or pages) | to see when the checker gets something wrong | with your account, and after 365 days |
| Account: email address, plan, monthly counts, hashed API keys | while the account exists | at once when you delete the account |
| Briefs you save (opt-in) | encrypted with a key per account (AES-256-GCM) | at once when you delete the brief or the account |
| Web server logs: the request path (never your text or search terms) and the requesting address | for operations | rotated automatically |
| Backups of the account database | encrypted, 30 days, on the server's storage and on one machine we operate | after 30 days |
We do not use your text to train any model, and we do not sell or share data.
No passwords: you sign in with a one-time link by email. API keys are stored only as hashes and can be revoked on the account page. Server access is limited to the operator, with SSH keys. Single sign-on with your firm's identity provider (Microsoft Entra ID, Okta, Google Workspace, any OpenID Connect provider) is set up on request. On the Firm plan, the account owner adds colleagues by email and removes them at any time; each person's checks and saved briefs stay in their own account.
Data Alchemy Labs is the controller for account data and processes the text you check on your behalf. A data processing agreement (DPA, Auftragsverarbeitungsvertrag under the Swiss nDSG and Art. 28 GDPR) is available on request. The server is in the EU. The providers in the table above that sit in the United States receive data only in the cases listed there.
For firms that need it, we run the same checker as a dedicated instance: hosted in Switzerland or inside your own network, with the deep check switched off or pointed at a model provider you choose. Ask at hello@proofread.law.
Questions, a DPA, or a security report: privacy@proofread.law. The full privacy notice is at /privacy.