Security — AES-256, 201 CMR 17.00 Compliance | Legience
Security & Compliance

Your Data Is Sacred.
We Treat It That Way.

Enterprise-grade security designed for attorney-client privilege. Built from the ground up to meet the most demanding security requirements in the legal industry.

Security Features

Defense in Depth

Multiple independent layers of security protect your firm's data at every level — from encryption to access control to audit logging.

AES-256 Encryption

All data encrypted at rest with AES-256 and in transit with TLS. Database-level encryption on AWS RDS. Sensitive fields use additional application-level encryption.

Security Monitoring

Intrusion detection, vulnerability scanning, and security patching on AWS infrastructure. Architecture designed to meet enterprise trust service criteria — security, availability, processing integrity, and confidentiality.

AI Data Protection

AI features powered by Claude through AWS Bedrock under our Business Associate Agreement (BAA). Your data is never used for model training, improvement, or any other purpose. Data stays within US AWS regions.

201 CMR 17.00

Security practices designed to meet Massachusetts Standards for the Protection of Personal Information. Including access controls, encryption, breach notification procedures, and regular security assessments.

Comprehensive Audit Logs

Every login, data access, modification, and export is recorded in detailed audit logs. Complete chain of custody for every action taken in your firm's Legience account.

Right to Delete

Request full data deletion at any time. All account data permanently removed within 90 days of request. You can also delete individual AI conversations at any time from within the platform.

Compliance Standards

Certifications & Standards We Meet

Attorney-Client Privilege Protected
201 CMR 17.00 Aligned
AES-256 Encryption at Rest
TLS Encryption in Transit
Zero AI Training Guarantee
US-Only Data Residency (AWS US-East)
Data Subject Rights Supported
Comprehensive Audit Logs