Data Management Policy

Effective Date: January 1, 2026

This document outlines how Legalitize handles, stores, and processes client data, specifically regarding discovery files and evidence.

1. Zero-Retention Training

Legalitize adheres to a strict "Zero-Retention" policy regarding AI training. We do not use your client data to train our foundational models. Your data remains isolated within your firm's encrypted instance.

2. Data Residency

All data is stored on servers located within the United States. We utilize AWS GovCloud for specific enterprise contracts requiring federal compliance.

3. Information Sharing

We do not share, sell, or rent your data to third parties. Data is only accessible to:

• Authorized users within your organization.
• Our technical infrastructure providers (strictly for storage/compute purposes).

4. Data Deletion

Upon termination of your license, all client data is permanently wiped from our servers within 30 days, in accordance with NIST 800-88 guidelines.