Skip to content
OnTrial
Security & Compliance

Security is foundational, not optional.

Enterprise-grade protection for case data, from day one. SOC 2 aligned. Zero data retention on AI processing. No model training. Encrypted at rest and in transit.

Security Posture

How we protect client data.

  • Zero data retention on AI processing

    Inputs sent to AI processing are ephemeral and never stored. Operational processing logs auto-delete within 24 hours.

  • The Secure Sandbox

    OnTrial operates within a segregated enterprise environment rather than consumer-grade tools — serving as a technical fiduciary for client data.

  • No model training

    Your case data is never used to train, tune, or improve foundation models.

  • Encryption at rest and in transit

    All data uses industry-standard encryption protocols across transit, storage, and processing stages.

Data Architecture

How data flows — and where it doesn't stay.

  • Defined sub-processor ecosystem

    Every authorized platform handling client data is documented and governed by enterprise agreements with explicit security standards.

  • 24-hour log deletion

    Operational processing logs auto-delete within 24 hours.

  • Dual-layer storage

    Permanent case files remain in secure, access-controlled infrastructure separate from temporary processing environments.

Access & Governance
  • Audit-ready infrastructure with full activity logging
  • Role-based access control with granular permissions
  • Client data lifecycle management and deletion control
Investigative Compliance

  • FCRA & GLBA

  • Licensed investigators & insured agents

  • CCPA & SB 1454

  • Human Review on every case

For OnTrial's AI use posture specifically — training disclaimers, human-in-the-loop guarantees, and outside counsel guideline defensibility — see AI Governance.