Security

Legal AI, crafted for security.

You get object-level security without compromise. Whether you’re meeting regulatory or ethical obligations, Evatt AI keeps your information safeguarded at all times.

Complete data isolation SOC 2 Type II standards Zero data retention No model training

Trusted by 2.5k+ lawyers around the globe

ShielsSmartFinderZoomerrArtHexanKanttaant
Why it matters

Security isn't a choice, it's a requirement

Evatt AI — security architecture

As a lawyer, you handle your clients’ most delicate and private details. AI can make legal work faster — but popular AI tools lack the safeguards required for legal confidence. So it’s fair to ask:

  • ?Who has access to your data?
  • ?Could a disclosure to Evatt waive attorney-client privilege?
  • ?What if a data breach compromises your legal work?

You’re right to be concerned. That’s why we built Evatt AI with security as the priority — in complete alignment with the highest legal-ethical standards.

How we protect you

Four pillars. One architecture.

Not security bolted on — an architecture designed for privileged legal work from the ground up.

End-to-end encryption

Every query and document is encrypted in transit and at rest with AES-256-GCM. Nothing moves or sits in the clear.

Data isolation per firm

Each firm's data lives in its own isolated environment — no shared indices, no cross-tenant leakage.

Zero data retention

Queries and documents aren't retained after your session. No logs kept beyond your control.

No model training on client data

Not your prompts, your documents, or your outputs. Evatt never trains on client data — full stop.

Certifications & standards

Independently verified. Honestly reported.

We report our security posture the way lawyers work: verifiable, and clear about what's certified versus in progress.

SOC 2 Type IISecurity, availability, and confidentiality controls, independently audited.
AES-256-GCMMilitary-grade encryption in transit and at rest.
GDPR compliantData-subject rights and lawful processing, by design.
ISO/IEC 27001Information-security management aligned to the standard.
Request security documentation
Jurisdiction-aware compliance

Your jurisdiction. Your compliance framework. Covered.

Data-protection law varies across our six jurisdictions. Evatt is built to meet each one — not a single, watered-down global standard.

JurisdictionFrameworkWhat it covers
🇦🇺 AustraliaPrivacy Act 1988 (reformed)Australian Privacy Principles, mandatory breach notification, and serious-invasion-of-privacy provisions.
🇺🇸 United StatesCCPA / CPRA + state AI rulesConsumer rights and emerging state-level AI regulation handled per jurisdiction.
🇬🇧 United KingdomUK GDPR + Data ActLawful-basis processing, data-subject rights, and transfer safeguards.
🇮🇳 IndiaDPDP Act 2023Consent, purpose limitation, and data-fiduciary obligations.
🇨🇦 CanadaPIPEDA + Bill C-27Meaningful consent and forthcoming CPPA-aligned requirements.
🇳🇿 New ZealandPrivacy Act 2020Information Privacy Principles and mandatory breach notification.
Zoomerr
“The security posture is the reason we could adopt AI at all — per-firm isolation and zero retention meant our risk team said yes.”
Author NameRole, Firm
Our security promise

Security built for legal work. Not general SaaS.

What we protect

  • Your queries and documents
  • Your client identities
  • Your privileged material

How we protect it

  • AES-256-GCM encryption
  • Per-firm data isolation
  • Zero data retention
  • Independent audits

What we never do

  • Train on your data
  • Share across firms
  • Retain beyond your session
  • Sell or expose your data
FAQ's

Frequently Asked Questions

Find answers to common questions about our platform. If you need further assistance, feel free to reach out to our team.

Evatt AI doesn’t "make stuff up" like generic AI tools. Its training is restricted to a verified database of 45 million+ cases and statutes. Every response Evatt AI provides is anchored in primary legal sources, and includes clickable citations for quick verification.

Generic AI tools like ChatGPT are trained on vast amounts of data on the open internet, including a ton of misinformation. They are designed to produce fluent answers to your prompts, and not much else. Evatt AI is legal AI, i.e. it is designed for legal work. It uses a reliable database of 45 million cases, produces duly cited responses, flags its citations, and is cross-checked by 3 AI models.

No, Evatt AI cannot replace lawyers. However, it can assist them in several ways, especially with legal research, contract drafting, and document review.

Evatt AI maintains attorney-client privilege by erasing your data as soon as you log out, never using your data to train its models, and complying with SOC2 Type 2 data encryption.

Evatt AI covers six jurisdictions: the US, Canada, the UK, India, Australia, and New Zealand.

Evatt AI offers a free trial, where you can enter 15 prompts for free. The professional plan costs 159 USD/month.

Still have questions? Contact our support