Establish the safeguards before the matter goes in.

1. Who can access the work?

   Confirm application admission, authorised users, matter membership and roles. Request evidence for the proposed access model.

2. Where does the data go?

   Review the hosting, identity and AI-provider configuration, the data-processing basis and relevant contractual terms.

3. What is retained, and how does it leave?

   Agree retention, deletion, export or handover expectations and the handling of information when the pilot ends.

4. What happens if the service is unavailable?

   Assess dependency risks, backup and restoration boundaries, support expectations and an exit process.

• No ISO 27001, SOC 2 or equivalent certification is claimed.
• Matter isolation is a designed and tested control, not an absolute guarantee against software defects.
• Production matter storage is encrypted at rest. Encrypted off-site backup is in place and a selected-file isolated restore has been verified; full-service recovery-objective evidence remains open.
• For OpenAI API processing, training use is disabled and governed Responses API calls use store=False. The current standard abuse-monitoring profile may retain customer content for up to 30 days. A Zero Data Retention request was submitted to OpenAI on 4 October 2026 and remains pending; no ZDR claim is made.
• Independent penetration testing remains a prerequisite before LegalRAG Pro is represented as cleared for controlled confidential or privileged client matters.

A controlled pilot can include security, confidentiality, data-processing and exit review before confidential client material is introduced.