How FirmRabbit keeps client files private

Your own private system

Each firm runs on its own system, with its own database, storage and sign-in. Nothing is shared between firms. That keeps an ethical wall between every firm we serve.

Encrypted at every step

• Data at rest is encrypted with AES-256, backups included.
• Data in transit uses TLS 1.2 or higher.
• Keys to your systems are stored encrypted, apart from your data.

You stay in control

FirmRabbit shows each change in plain words: what will happen and why. At first, nothing is written to your case software, calendar or email until a person you chose approves it.

You decide when an automation may run on its own, and you can move it back at any time. Some work always stays with people: filing with the court, moving trust money, sending bills and giving legal advice.

Messages stay private

Your assistant writes to you in the FirmRabbit app, inside your firm's private system. Its messages are not sent as text messages or email. Phone alerts only say that a message is waiting. They never show client names, case details or documents.

Sending bills and other steps that reach your clients need a fresh Face ID or Touch ID check, even when you are already signed in.

A full record

Every action is recorded: who approved it, what changed and when. Your team can see the history in the app at any time.

Sign-in and access

Everyone signs in with two-step sign-in. You choose who can see and approve each kind of work. Our staff get access only when your support request needs it, and that access is recorded.

Your data is used for your work only

Your data is never sold, never shared with another firm and never used to train models. When an automation needs to read a document, it uses services that keep no copy and do not train on it.

Hosted in the United States

FirmRabbit runs on Amazon Web Services (AWS), in U.S. data centers. AWS holds SOC 2 Type II and ISO/IEC 27001 certifications. FirmRabbit does not hold its own SOC 2 report.

The free Checkup is read-only

After your demo, the Checkup only reads your case software. It changes nothing. You see what we found before you decide anything.

Yours to keep

You own your data. Export it at any time. If you leave, you get a full copy, and we delete ours within 90 days.

Built around your duties

FirmRabbit is built to support the duties lawyers already carry: ABA Model Rules 1.1 (competence, including technology), 1.6 (confidentiality) and 5.3 (supervising non-lawyer help), and ABA Formal Opinions 477R (securing client information), 498 (virtual practice) and 512 (generative AI tools). Each firm makes its own judgment under its state's rules.

We sign a confidentiality and data agreement with every firm. FirmRabbit is not a law firm and does not give legal advice.

Questions, or a security problem to report?

Ask us anything about security before you sign. To report a problem, write to us on our contact page. Our security.txt has the details.