Security & Compliance
Private by design. Your client data never trains public models—ever.
Complete Control
Deploy on‑prem or private cloud. Data residency honored.
End‑to‑End Encryption
TLS in transit, AES‑256 at rest. KMS/externally managed keys supported.
Zero Data Sharing
No training on your data. Strict tenant isolation.
How Sapphire Legal AI Protects Your Data
Supported deployments: on‑prem, private cloud (AWS/GCP/Azure), or hybrid. No cross‑tenant mixing.
Standards & Controls
Enterprise-grade security controls and compliance standards to protect your sensitive legal data.
Access Control
Role‑based access, SSO (SAML/OIDC), SCIM provisioning.
Data Protection
PII/PHI detection, masking & redaction in drafting workflows.
Key Management
Customer‑managed keys (KMS/HSM) or provider‑managed.
Logging & Audit
Comprehensive logs; SIEM export and alerting.
Secure SDLC
SAST/DAST, dependency scanning, signed builds.
Backups & DR
Configurable RPO/RTO; customer‑controlled retention.
Vendor Review
Minimal third‑party reliance; security reviews available.
Compliance & Standards
Sapphire Legal AI is aligned with global security and privacy frameworks. Some standards are currently aligned with our controls, while others are on our certification roadmap.
SOC 2 Type II
RoadmapControls aligned, certification in progress.
ISO 27001
RoadmapGlobal standard for information security, planned certification.
GDPR
AlignedDesigned with data privacy principles for EU clients.
CCPA
AlignedSupports California privacy rights and consumer data protection.
HIPAA
AlignedSafeguards PHI for firms handling healthcare matters.
Want a copy of our detailed Security Whitepaper or SIG-Lite?
Compliance & Standards
Our security controls align with industry standards. We're committed to achieving full certification while maintaining transparency about our current status.
SOC 2 Type II
RoadmapControls aligned, certification in progress.
ISO 27001
RoadmapGlobal standard for information security, planned certification.
GDPR
AlignedDesigned with data privacy principles for EU clients.
CCPA
AlignedSupports California privacy rights and consumer data protection.
HIPAA
AlignedSafeguards PHI for firms handling healthcare matters.
Frequently Asked Questions
Common questions about our security architecture and data protection practices.
Want a deeper review with your security team?
Schedule a comprehensive security review with our team. We'll walk through our architecture, answer your specific questions, and provide detailed documentation for your security team.