Security & privacy
Can you use AI on client files? Yes, when it runs in your office.
Most legal AI sends your documents to someone else's servers. CaseSage is built the other way around: the software and the AI come to your files.
On your hardware, inside your network
CaseSage is installed on a server you own or control. Your documents, the search index and every AI summary live there. We don't host your data, so it is never in our hands.
Local AI by default
Search, summaries and answers come from AI models running on your own machines. Cloud AI providers are strictly opt-in: off unless your administrator turns them on, and then used only as configured.
Read-only against your files
Your case share is mounted read-only. CaseSage itself cannot change your files. The few things it can write, such as searchable PDF copies or Mailroom filing, are opt-in, limited to folders you choose, and recorded.
No standing vendor access
We have no remote access to your server. If you want hands-on support, you grant access for that session, under confidentiality terms written for privileged material.
Works without the internet
CaseSage runs on networks with no internet connection. Licenses are signed files checked on the server itself, and both updates and AI models can be loaded from files.
Never held hostage
A lapsed subscription never switches CaseSage off. It keeps running and keeps receiving security updates, and your data is on your server the whole time.
Exactly what leaves the server
Everything that could cross your network boundary, listed.
Most vendors ask you to trust their audit report. We would rather you could check. This is the complete list.
| What | Leaves your network? | What is sent | Your control |
|---|---|---|---|
| Your documents, the search index, AI summaries and answers | Never | Nothing | Stored only on your server |
| AI processing | No, by default | Nothing. Models run on your own machines. | Cloud AI providers are off unless your firm turns them on, and then each case needs its own consent too |
| Update check | Only if the server is online | Nothing about your firm or your cases. It downloads a signed list of releases. | Switch it off, or apply updates offline from a file. Licenses are checked on the server itself, never online. |
| AI model downloads | Only when your administrator downloads a model | Nothing about your firm. The model is fetched, not uploaded to. | Load models from a file for machines without internet |
| Optional health ping | Off unless you turn it on | Version and counts only (documents, cases, queue). Never content or names. | Off by default |
| Notification email | Through your own mail system | The notifications you set up, sent by your mail server or Microsoft 365 | Off unless configured |
| Support access | Only when you grant it | What you choose to show us, for that session | No standing access, ever |
Why you won't find a SOC 2 badge here
SOC 2 reports exist to show how a vendor protects customer data that it holds on its own systems. CaseSage is built so that we never hold your data at all: it stays on your server, inside your security program, under your controls.
That means the questions that matter are about the software you run: what it can read, what it can write, and what it sends anywhere. This page answers all three, and we will answer your security questionnaire in writing.
Your professional obligations
Lawyers must make reasonable efforts to prevent unauthorized disclosure of client information (ABA Model Rule 1.6(c)) and must supervise the outside services they use (Rule 5.3). ABA Formal Opinion 512 (2024) applies both to generative AI and asks lawyers to understand how a tool handles client information before using it.
When the AI runs on your own hardware and nothing is sent out, that analysis gets much simpler. It does not go away: your firm's own policies and your state's rules still govern.
This is general information, not legal advice.
The website and the free tools
- The pre-flight app makes no network calls except the checks you ask it to run on your own network. Its report stays on your computer unless you choose to share it.
- This website has no trackers, ad pixels or third-party scripts. It records only what you submit in our forms, such as your work email and firm name.
The full details are in our privacy policy.
Questions your managing partner will ask
Does any of our data train an AI model?
No. The AI models run on your hardware and send nothing back to us or to their makers. If your administrator ever enables a cloud AI provider, that provider's own terms apply to what is sent to it, which is why it is off by default.
What happens to our data if we stop using CaseSage?
Nothing leaves. Your original files were never moved or changed, and the CaseSage server is yours to keep or wipe.
Who at CaseSage can see our documents?
Nobody, unless you grant a support session and share your screen or access with us.
What happens if we stop paying?
CaseSage keeps running on your server: search, answers, review and everything already processed. Security updates keep coming. Paid add-ons (Mailroom, hot folders, your case-management connector) and support pause until you renew. Your files, your index and your past work are never locked away.