Security and confidentiality

Built around your duty of confidentiality.

Your website and dashboard handle information about people who need a lawyer. Here’s how we protect it, mapped to the ABA rules and opinions you already follow.

Two-step login, always

An authenticator app for every person, on every plan. No passwords to steal.

Your firm, walled off

Database rules keep each firm’s records separate, and we check them with nearly 300 automated tests.

A sealed vault

Logins you share are sealed, never shown again, and deleted 30 days after your site launches.

Never trains AI

Not your firm’s data, and not your visitors’ or callers’. Ours or anyone else’s models.

Alerts without the details

Emails and texts say who and what it’s about. The message stays behind your login.

Every change logged

Who changed what, and when, for your team and ours.

Kept in the US

Your data is stored in the United States, and every connection is encrypted.

Yours to take

Download your site and leads anytime. After you cancel, it’s deleted after 90 days.

Rule by rule

What the rules ask, and what we do.

  1. ABA Model Rule 1.6(c)

    Make reasonable efforts to keep client information from being disclosed or reached by anyone who shouldn’t.

    Read it on americanbar.org
    • Two-step login on every account, for every person, on every plan
    • Each firm’s records walled off from every other firm by the database itself
    • Logins you share with us go into a sealed vault and are deleted 30 days after launch
  2. ABA Formal Opinion 477R

    Protect client information when it’s sent electronically, with safeguards that fit the risk.

    Read it on americanbar.org
    • Every page and connection is encrypted (HTTPS, enforced)
    • Lead alerts say who it is and what it’s about. The person’s message itself stays behind your login
    • Card and bank numbers are entered on Stripe and never touch our systems
  3. ABA Formal Opinion 512

    Using generative AI: protect confidentiality, stay competent with the tool, and review what it produces.

    Read it on americanbar.org
    • No firm’s data, and no visitor’s or caller’s, is ever used to train AI
    • The website chat and phone assistant say up front that they’re automated
    • AI blog drafts wait for an attorney’s approval and are never published on their own
  4. ABA Model Rule 1.18

    Information from someone who hasn’t hired you yet is still protected.

    Read it on americanbar.org
    • Forms and chat ask only what you need to call back, and tell people not to send confidential details
    • Every new lead is checked against your private conflicts list (former clients, opposing parties) the moment it arrives
    • Only your own team sees your leads
  5. ABA Model Rule 5.3

    Make reasonable efforts to be sure outside providers handle client information properly.

    Read it on americanbar.org
    • Every company we use to run the service is listed in our privacy policy
    • Our own staff use two-step login too, and their actions are logged
    • You can download your site and lead history at any time

Your state’s rules may differ from the ABA Model Rules, and you decide what your duties require. This page describes how our service works. It isn’t legal advice. See also our privacy policy and terms.

Free with every plan

An AI-use policy for your firm.

Most small firms don’t have a written policy for how their team uses AI. Every AttorneyLogic firm gets a ready-to-adopt template in its dashboard, with your firm’s name already in it. Read it, change what you like, and print it for your team.

Get started

Your next client is searching.

Give them a site worth calling. See yours on a preview address minutes after you sign up.