Data Privacy Policy & Security Disclosures
AlphaLaw is engineered for Fortune 500 general counsel, AmLaw 100 partners, and litigation departments requiring zero-retention ephemeral compute, absolute work product privilege, and strict cloud security.
Summary: Absolute Client Work Product Privilege & Zero LLM Training
AlphaLaw operates under an institutional zero-training doctrine. Your confidential factual narratives, proprietary litigation strategies, trade secrets, and generated court pleadings are processed in isolated, ephemeral memory pipelines. We NEVER sell, monetize, or train public AI models on your privileged legal work product.
1. Zero-Retention Ephemeral Memory & LLM Processing
All adversarial litigation simulations, procedural sieve analyses, and court document generations are processed in isolated memory environments.
Enterprise API connections to foundation model inference providers enforce zero-data-retention (ZDR) agreements. Fact patterns submitted to Harrison Vance, J.D. or the Moot Court Triad are not logged for model training, reinforcement learning (RLHF), or commercial reuse.
2. Bank-Grade Encryption Architecture (TLS 1.3 & AES-256 GCM)
Data in transit is encrypted using modern TLS 1.3 protocols with forward secrecy. Data at rest (such as saved case versions and custom user journals) is encrypted using AES-256 GCM.
Our cloud infrastructure employs zero-trust multi-tenant isolation with hardened security rules, preventing cross-tenant data leakage or unauthorized IDOR access between law firms.
3. Preservation of Attorney-Client Privilege & Work Product Doctrine
AlphaLaw is architected to comply with American Bar Association (ABA) Formal Opinion 477R (Securing Communication of Protected Client Information) and Formal Opinion 498 (Virtual Practice).
Transmission of factual narratives to AlphaLaw's computational platform does not constitute third-party disclosure that waives attorney-client privilege or federal work product protection (FRCP Rule 26(b)(3)), provided reasonable access controls are maintained by the deploying practitioner.
4. Infrastructure, Authentication & Bot Mitigation
Authentication: Managed via Google Firebase Authentication with cryptographically verified JWT tokens, supporting Google OAuth and email credential security.
Bot & Scraping Defense: We utilize Google Cloud reCAPTCHA Enterprise to detect automated intrusions, brute-force credential stuffing, and unauthorized scraping without tracking user personal identities.
Transactional Notifications: Platform alert dispatches (e.g. waitlist confirmations and account verification) are securely delivered via Brevo SMTP relay with TLS encryption.
5. Multi-Jurisdictional Privacy Rights (CCPA / CPRA / GDPR / PIPEDA)
California Consumer Privacy Act (CCPA/CPRA): California residents possess the right to know what personal identifiers are held, request immediate deletion, and opt out of any data sharing (we do not sell personal data under any circumstances).
International Compliance: While active interactive litigation tools are currently restricted to United States federal and Delaware state law, our privacy governance aligns with GDPR (EU/UK) and PIPEDA (Canada) for all visiting practitioners and waitlist subscribers.
6. Data Retention, Account Deletion & Inquiries
Users maintain complete ownership over their account data and may request permanent deletion of their account profile, saved drafts, and simulation history at any time.
For privacy inquiries, audit reports, or enterprise Data Processing Agreements (DPAs), contact our dedicated compliance desk directly at counsel@alphalaw.io.
Confidentiality is the cornerstone of the legal profession.
AlphaLaw was engineered by aerospace and systems architects to uphold that standard without compromise.