Security

Your client data is none of our business

We built Writford with one principle: solicitor-client privilege extends to your AI tools.

Encrypted in Transit & at Rest

All traffic is TLS 1.2+ end to end. Your matter files, filed emails and database are stored in the AWS London region and encrypted at rest with AES-256. The text of PDFs and images is read by an AWS text-recognition service in London that keeps nothing and learns nothing from your documents.

No AI Training

Your queries and documents are never used to train or improve AI models. Our sub-processor agreements with AWS prohibit use of your data for model training. See our Sub-Processors page for details. Your intellectual property and client data remain exclusively yours.

GDPR Compliant

Full compliance with UK GDPR and the Data Protection Act 2018. We maintain a complete audit trail and conduct regular data-protection impact assessments. We are not statutorily required to appoint a Data Protection Officer under Article 37 UK GDPR; our legal contact for privacy enquiries is published in our Privacy Policy.

Solicitor-Client Privilege Preserved

Your conversations, research queries, and uploaded documents are never shared with third parties beyond the contractually bound sub-processors listed on our Sub-Processors page. Conversation history is stored encrypted on UK servers and deleted on account closure.

Compliance Documentation

How we handle your data

Our contractual commitments

Sub-Processors

Third parties involved in data processing

Security you can trust

Start Free 14-Day Trial

Is it safe to use AI on confidential client files?

It depends on what the tool does with the material. Writford stores client data in the UK and encrypts it in transit and at rest. AI requests are processed by Amazon Web Services and may be processed outside the UK under the UK's approved data transfer safeguards, and client files, prompts and answers are never used to train AI models. Matter access rules still govern what any individual can see.

Is my client data used to train AI models?: No. Client files, prompts and answers are never used as training data, and your firm's material is never pooled with another firm's. Indexing your own documents so your own fee earners get better answers is a different thing from handing them over to improve a model.
Where is my data processed?: Documents and matters are stored in the UK, in the AWS London region. AI requests are processed by Amazon Web Services and may be processed outside the UK under the UK's approved data transfer safeguards. Client files, prompts and answers are never used to train AI models.
Does using AI put privilege at risk?: Writford is built on the principle that solicitor-client privilege extends to your AI tools. Client material is processed under the data processing agreement, is not training data, and is not shared with other firms.
Is data encrypted?: Yes, in transit and at rest.
Can I control who in the firm sees what?: Yes. Four roles set access once at firm level: a fee earner sees their own matters, a supervisor and an administrator see everything, and a cashier can see every matter and edit none. Those rules apply to what the AI will surface for a given person too.
Who are your sub-processors?: They are listed publicly on the sub-processors page, which names every third party involved in processing and what each one does.

GDPR Compliant

Is it safe to use AI on confidential client files?

Is my client data used to train AI models?

No. Client files, prompts and answers are never used as training data, and your firm's material is never pooled with another firm's. Indexing your own documents so your own fee earners get better answers is a different thing from handing them over to improve a model.

Where is my data processed?

Documents and matters are stored in the UK, in the AWS London region. AI requests are processed by Amazon Web Services and may be processed outside the UK under the UK's approved data transfer safeguards. Client files, prompts and answers are never used to train AI models.

Does using AI put privilege at risk?

Writford is built on the principle that solicitor-client privilege extends to your AI tools. Client material is processed under the data processing agreement, is not training data, and is not shared with other firms.

Is data encrypted?

Yes, in transit and at rest.

Can I control who in the firm sees what?

Yes. Four roles set access once at firm level: a fee earner sees their own matters, a supervisor and an administrator see everything, and a cashier can see every matter and edit none. Those rules apply to what the AI will surface for a given person too.

Who are your sub-processors?

They are listed publicly on the sub-processors page, which names every third party involved in processing and what each one does.