Data Privacy

Your firm’s data stays your firm’s data

Client confidentiality is the foundation of legal practice, so we built Superpractice around it. This page explains exactly how, in plain language, backed by our terms.

Your clients trust you with their most sensitive problems. Any system your firm runs on has to earn that same trust.

0AI models trained on data that identifies your firm, your clients, or your matters
ZEROdata retention with third-party AI providers across our core pipeline
48 hrceiling on vendor copies of meeting recordings before deletion
30 daysmaximum processing time for full-workspace deletion requests
How your data is handled

AI without trading away confidentiality

Superpractice runs on frontier AI models. That only works for a law firm if the data rules are stricter than the tools are powerful. Here they are.

Zero data retention

Providers process your prompts, then delete them

Our core AI pipeline calls third-party model providers through enterprise and API configurations with zero data retention. Providers process prompts and outputs only to return your result, then delete their copies. AI assistant conversations are stored separately in your firm’s secure Superpractice workspace, where the assistant can use conversation history and other workspace data to answer your requests. Requests are pseudonymized before they leave our systems, so providers never see who inside a firm asked.

Read the privacy policy
model request · every call
providerai gatewayendpointenterprise apizeroDataRetentiontruepromptTrainingdisallowedidentitypseudonymized
Model training

No third-party provider model trains on your data

Third-party model providers are never permitted to train their models on your firm’s data. Superpractice does not train models on identifying data either. Our terms limit any improvement work to de-identified data that cannot reasonably be traced back to a firm, a client, or a matter, and we never knowingly re-identify it.

model training inputs
firm namenever trained on
client namesnever trained on
matter detailsnever trained on
contact recordsnever trained on
de-identified data onlyper our terms
Client confidentiality

Treated like privileged material, because it is

Under our terms, identifiable client and matter data is your Confidential Information. It is never published, and never shared for a third party’s own use, without your express authorization. That obligation survives for as long as we hold the data.

Read the terms of service
terms of service · section 9
Client and matter data is your Confidential Information

Held with no less than reasonable care. Never published or shared for third-party use without your express authorization.

ConfidentialSurvives termination
Meetings and calls

Recordings live in your workspace, not a vendor's

Meeting recordings are exported to your workspace, and the capture vendor’s copy is deleted once yours is verified, with a 48 hour ceiling either way. Transcription runs with the provider’s model improvement program switched off on every request, so your meeting audio never trains their models.

meeting recording lifecycle
Meeting recorded
capture vendor, timed retention
Your copy verified
stored in your workspace
Vendor copy deleted
48 hour ceiling
Retention and deletion

Your workspace data is deleted on request

Your workspace data is stored while your account is active. You can request deletion at any time, and full-workspace deletion requests are processed within 30 days. Deleted records are removed from active systems, though encrypted backups may retain them briefly before they expire.

retention schedule
Recordings and transcriptswhile account is active
Full-workspace deletionwithin 30 days
Encrypted backupsrolling expiration

The plain-language version ends here. The binding version is one click away.

Everything on this page is backed by our published terms. Questions about a specific requirement, or need something in writing for your firm? Write to support@superpractice.com.