How your case data is held
A case file holds your clients' most sensitive information. This notice says where it is kept, who can reach it, which outside services touch it, and what you can ask us to do with it.
In force from 18 September 2026
01
Your practice is yours alone
- Each advocate works in a separate workspace. No other advocate on LegalOS can open your cases, documents, notes, drafts or client list — the app checks this on every page and every action.
- Your clients see only the documents you mark as shared and the updates you post. Your notes, excerpts and research stay with you.
- We do not sell your data, show advertising, or train AI models on your case files.
02
Where it is kept
| Data | Service | Location |
|---|---|---|
| Cases, notes, hearings, clients | Supabase Postgres | Mumbai · AWS ap-south-1 |
| Documents, captures, court orders | Vercel Blob, private | Mumbai · bom1 |
| The application itself | Vercel Functions | Mumbai · bom1 |
| Reading scans, dictation, search | LegelpTech's own AI server | Mumbai |
Everything travels over encrypted connections and is encrypted at rest by those providers. A document is served only to a signed-in member of your workspace, or to your client when you have shared it.
03
Who processes it for us
Reading scanned pages, dictation and search indexing run on LegelpTech's own server in Mumbai. Three features use outside services:
- Anthropic (Claude)Outside India (United States)
- Answers to your questions, key facts from a document, drafting help, client-update wordingSent: Your question and the passages it needs; for key facts, the first six pages of a document
- ZeptoMail (Zoho)India
- Sign-in codes and noticesSent: Your email address and the message
- eCourtsIndiaIndia
- Court sync, only for cases where you add a CNRSent: The CNR number
Anthropic receives only what a feature needs, never your whole file, and its commercial terms do not permit training on it. WhatsApp updates open in your own WhatsApp; LegalOS does not message clients for you.
04
Who at LegelpTech can reach it
LegalOS is built and run by LegelpTech Outsourcing Private Limited (CIN U82990DL2025PTC446352), which operates an information security management system certified to ISO/IEC 27001:2022. Only our engineering team can reach the systems, and only to run and repair the service, or when you ask us to look at something.
05
Your rights under the DPDP Act
- Your clients' data. You decide what goes into a case file, so you are the data fiduciary for it and LegelpTech processes it on your instructions.
- Your own details. Name, email, mobile and enrolment number are held to run your account.
- Copies and deletion. Ask at any time. Deleted data leaves the live system at once, and backups within seven days.