Your firm's data,
kept to your firm.
This is the short version of our security brief, which is checked line by line against the running system. Everything here is true today, and the full brief is yours on request.
Separated by design,
not by promise.
Walled off from every other firm
Your firm's records are kept apart by the database itself, not only by the app. Every record is tagged with your firm, and the rule that keeps firms apart is switched on for every table, with no exceptions.
Private until you share it
A deal, a chat or a file is private to the person who made it and shared only with the colleagues they name. Nothing is shared with another firm.
No administrator bypass
Your firm's administrator cannot open a colleague's private deal, chat or file, and a firm export carries nobody's private content.
Private storage
Your documents are stored privately, in your firm's own space, with no public links: a document opens only for someone signed in who may see it.
Read to answer you.
Not kept to train on.
Your documents are read to answer you, never kept to train on. The services involved, and what each keeps, are named in our security brief.
Not used to train AI
The AI model that reads your documents and writes the chat's answers is barred by its provider's terms from training on your content, and Corbin trains no model on it either.
Scanned pages, kept by no one
When a scanned page has to be read as an image, the service that reads it keeps nothing it reads. Zero data retention on our account.
Retention, in writing
For the AI model's provider, the retention that applies to our account is being confirmed in writing, and we will send you that answer rather than guess at it.
Chat text, nothing kept
Drafting that sees only a conversation's text, never a deal, runs on your firm's own key and asks the provider to keep nothing and to collect no data.
Encrypted, recorded,
and yours to delete.
Encrypted
In transit on every connection and at rest. A credential you give us is encrypted by us before it is stored, and never appears in any response from our API.
Recorded
Every correction, write into your model, deletion and sharing change is recorded with who did it and when. The record cannot be edited or erased: the database refuses to change or delete an entry.
Yours to delete
Nothing you upload is deleted automatically. On request we set a window, from 7 days to 5 years. Deleting your firm removes every row, file and account seven days after your administrator asks, with a receipt that nothing remains.
Backed up, and yours to take
The database is backed up daily and seven backups are kept; files are copied daily to a separate account and kept thirty days after they are deleted. Download your records at any time.
Every line here corresponds to something specific in the system. For the long version, with the providers we use and the evidence behind any line your review turns on, ask for our security brief and we will send it.