Security & Confidentiality
- Encrypted before it leaves your device, unreadable to us.
- We hold it only until delivery is confirmed, then it's gone from our side.
- Our AI assistant works under a contract that forbids storing or reusing what you send.
- Using this channel doesn't itself waive privilege (the usual rules still govern what's privileged); it supports your reasonable-efforts duty under ABA Formal Opinion 477R.
- Your files are always yours to take with you, even if you stop paying.
- At case close, there's nothing to migrate: the record is already on your computers.
Encryption
Claim. Your case content is encrypted before it leaves your device, and unreadable to us.
Mechanism. Messages and files are encrypted on your device before they're sent. We can't read them in transit, and we don't hold the key. The lasting record lives in your case folder and your client's own folder, on your computers, not ours.
Scope. We hold the encrypted data only until delivery is confirmed, then it's gone from our side. If a client hasn't come online yet, an undelivered message sits encrypted in the queue until they do, so the claim of not keeping it is true after delivery, not before it.
What we do hold: your account records, and the minimum routing metadata needed to deliver a message, who it's from, who it's for, and when it was sent, kept for as long as your account exists. We never hold readable case content.
AI processing
Claim. Our AI assistant works under a contract that forbids storing or reusing what you send.
Mechanism. Delivery needs no trust: we never hold a readable copy. The AI assistant is different. A document reaches our AI provider, Mistral AI, as plaintext only when you give it to the AI, so it can do its two jobs: label the file for what it is, and read scanned pages and photos so their text becomes searchable. That is the AI's whole part; it has no role in sending, delivering, or filing, and search runs on your own computer.
Scope. Mistral AI processes the document under a zero-data-retention contract that forbids storing what you send and using it to train models. This applies to the AI only, and only to the documents you choose. You select the files each time, one document or a group, and nothing you don't select is ever sent. It doesn't change the encryption claim above, which covers every message and file whether or not the AI is involved.
Privilege and security
These are two different questions. Is it safe is an encryption and access question, covered above. Did sending it this way waive privilege is a professional-responsibility question, and the answer is no: routing case communication through Kacti doesn't waive privilege any more than routing it through email does.
ABA Formal Opinion 477R sets the standard: lawyers must take reasonable efforts to protect client confidentiality when using technology, calibrated to the sensitivity of the information and the technology involved. A case-scoped channel with encrypted delivery is built to support that standard, not to test it.
The AI assistant is a separate question: there, case content does reach a vendor in readable form, at your direction, under the zero-retention contract described above. That is the same footing as a copy service or an e-discovery vendor, not a disclosure outside the representation.
Whether a specific communication is privileged still depends on the usual rules, who's included, what was said; the channel doesn't create or waive privilege on its own.
Data ownership
Claim. Your files are always yours to take with you, even if you stop paying.
Your case folder is ordinary files on your own computer. You can open, copy, or move them at any time, with or without the app. If a bill goes unpaid, your access is never held hostage: reading the record never runs through us.
Matter lifecycle. At case close, or if you remove the app, your local case folder stays exactly where it's always been: on your computer. Closing a matter doesn't force a migration or a re-download. If you close your account entirely, the account and routing records described under Encryption are deleted, except records we're legally required to keep for tax and accounting; case content was never ours to hold.
What we don't claim
- We don't claim this channel's encryption makes a communication privileged, or that privilege can't be waived some other way; that still depends on the usual rules.
- We don't claim SOC 2 or ISO certification. We don't have it yet, and we won't claim it before we do.
- We don't claim the AI assistant never sees plaintext: it does, for the moment it takes to do its work, under the contract described above.
- We don't promise a breach never happens; we've built the delivery path so a breach on our side would find ciphertext and routing records, not case content.
- We don't claim to protect the record after delivery: your case folder is as secure as your own devices and accounts, and if you point it at a drive like Google Drive or Dropbox, what lands there is governed by that service, outside these claims.
- And we don't ask you to trust us with delivery: encryption makes that unnecessary, because we can't read what we carry. The AI assistant is the one place trust comes in; that trust rests on the contract described above, and we say so plainly.
Have more questions?
If you have questions about anything on this page, we're glad to answer them. Talk to us and we'll walk you through the details.