Account
Supabase provides authentication and associates records with the signed-in account.
Security & data handling
Know where the transcript goes.
Deposition transcripts can contain confidential and personal information. This page describes LegalBrief's current controls and limitations so you can decide whether the service fits your matter.
Current safeguards
Practical controls, stated precisely.
- HTTPS encrypts information while it travels between the browser and the service.
- Authentication and row-level access controls restrict database records by account.
- Transcript storage is private rather than publicly addressable.
- Payment-card details are handled by Stripe.
- Optional Google Ads measurement loads only after consent.
Data path
What each service does.
Transcript
The uploaded PDF is held in access-controlled storage and sent through the application’s AI processing providers to create the requested summary.
Summary
The generated summary is stored in the account workspace until the user deletes it or retention is otherwise required.
Billing
Stripe handles payment details. LegalBrief receives subscription and customer status, not complete payment-card numbers.
Current providers include Vercel for application hosting, Supabase for authentication, database, and storage, Stripe for billing, third-party AI service providers for summary generation, and Google for optional advertising measurement. AI requests may also be routed through Vercel's AI Gateway when configured. Provider details can change as the service evolves.
Important limitations
No certification shorthand.
LegalBrief does not currently claim SOC 2 certification, HIPAA compliance, or guaranteed zero data retention. No online service can promise absolute security.
Before uploading a transcript, confirm that you have authority to process it and that use of the service is consistent with client instructions, protective orders, professional duties, and your organization's security requirements.
Retention & questions
Keep only what the workflow needs.
Source transcript deletion is attempted after processing, and a scheduled cleanup also targets uploaded files that reach the stated 30-day retention limit. Generated summaries remain in the workspace until deleted or otherwise required for service or legal purposes.
Read the Privacy Policy or email support@legalbrief.co with a security or data-handling question.