Data handling
The planned path from minimal intake to controlled evidence handling.
TODO(legal-review) · Draft for review. This policy is not approved for a live service.
At intake
Collect only what is necessary to understand the request. Do not send identity documents or sensitive attachments through the public form. Do not include passwords, passcodes or authentication secrets.
After assessment
Request necessary proof through a separately agreed secure channel. Limit access to staff assigned to the case, record access and use a defined retention schedule. The evidence provider and storage region remain to be selected.
AI assistance
For ordinary account inquiries only, the planned triage sends a minimized situation summary, not contact fields, to the model. Confidential matters are excluded entirely from this triage path. Outputs are advisory. Redaction, processor terms and model configuration must be verified before use.
Matter evidence
Evidence remains outside the website stack in a separately approved platform. Acceptance requires conflict clearance, lawful basis, written instruction, agreed recipients, access controls and a custody record. Website matter summaries and counterparties are restricted to authorized investigations staff; routine alerts contain only reference and matter type. The production access system and evidence platform remain launch gates.
Deletion and exceptions
Retention periods and any legal holds require counsel review. The operator must document deletion across the database, evidence storage and processors, including backup lifecycle limitations.
Something wrong now,
or planning ahead?
Tell us where you are. We’ll help you understand the route forward.