Trust is your call.
Security is our responsibility.
Judicio is built for the confidentiality and compliance requirements of modern legal teams. This is exactly how we protect your matters - what we encrypt, where we host, who can access your data, and the assurance evidence available for review, with live status on our Trust Centre.
Certifications & compliance
Review assurance evidence and applicable data-protection arrangements with our team. The Trust Centre is the starting point for your due diligence.
SOC 2
Ask for the report type, audit period, scope, and any exceptions relevant to your procurement review.
ISO/IEC 27001
Confirm the certificate, covered entity, scope, expiry, and issuing certification body.
GDPR
Review the DPA, subprocessors, transfer arrangements, retention, and your controller obligations.
UK GDPR
Confirm the UK processing and international-transfer arrangements that apply to your organisation.
DPDPA 2023
Discuss the applicable Indian data-protection requirements and contractual arrangements with our team.
One pipeline, five stops - and a branch that stays shut
Every hop below is a control stated on this page. And the branch model training would need is blocked by posture: your documents and prompts are never used to train AI models.
- No.
Your documents and prompts are never used to train AI models. Your data stays yours and is used only to serve your own work.
Upload to cited answer: your data stays yours and is used only to serve your own work.
How we protect your data
Security is built into every layer of the platform, not bolted on. Each of these is a capability you can use today.
Platform controls
Encryption at rest and in transit
Your documents are encrypted at rest and protected in transit with TLS, using industry-standard protocols at every layer of the platform.
Role-based access control
Granular RBAC with project-level permissions and organization-wide management, so the right people see the right matters, and no one else.
Full audit trail
Every document and action is logged, giving you a complete, reviewable activity history across your workspace.
Google Cloud hosting
Judicio runs on Google Cloud Platform with production-grade reliability, isolation, and uptime.
AI & data posture
No training on your data
Your documents and prompts are never used to train AI models. Your data stays yours and is used only to serve your own work.
Human-in-the-loop
AI output is built for lawyer review - you stay in control of every result.
Retention and deletion
Our Privacy Policy describes deletion or anonymisation within 90 days after account termination, with exceptions where retention is required for legal purposes.
Hybrid cost model
A subscription with usage-based credits, stated up front.
Privacy & compliance posture
Judicio is designed around the GDPR and India’s Digital Personal Data Protection (DPDP) Act. That means encryption, role-based access, audit logging, no training on your data, and regional data residency - the controls a legal team needs to handle confidential and personal data responsibly. For the specifics of a particular matter or jurisdiction, our team can confirm the arrangements that apply to you.
Data residency, your choice
Keep your data in the region your firm or clients require. Residency options are available on enterprise plans.
United States
US-based storage and processing for North American teams.
European Union
EU residency to support GDPR data-handling requirements.
India
India residency for DPDP-aligned, in-country data handling.
§05.1Does Judicio train its AI models on my data?
No. Your documents and prompts are never used to train AI models. Your data is processed only to deliver your own results and remains yours.
§05.2Where is my data stored?
Judicio is hosted on Google Cloud Platform. Data-residency options in the United States, European Union, and India are available on enterprise plans, so you can keep storage and processing in your preferred region.
§05.3Is Judicio SOC 2 or ISO 27001 certified?
Visit trust.judicio.ai or contact our team for available SOC 2 reports and ISO/IEC 27001 evidence. Confirm the entity, scope, dates, and exceptions before relying on an assurance claim. GDPR, UK GDPR, and DPDPA are legal frameworks; a badge alone does not establish compliance.
§05.4Where can I see Judicio's full security posture?
Our Trust Centre at trust.judicio.ai, powered by Sprinto, is the single place to review our security controls, subprocessors, AI posture, and compliance statuses. It stays current as our posture evolves.
§05.5How does Judicio handle GDPR and India's DPDPA?
Your obligations depend on the processing, applicable law, and contractual arrangements. Review Judicio's DPA, subprocessors, retention, and transfer safeguards with our team before uploading client data. Encryption and access controls support that review; they do not replace your legal assessment.
Found a vulnerability or have a security concern? Email support@judicio.ai and our team will investigate promptly.
Security questions before you start?
Talk to our team about encryption, residency, access control, and your compliance requirements - or review our full posture any time on the live Trust Centre.