# How Firmhorse keeps client files private

Law firms hold their clients' most private facts. Here is how Firmhorse protects them, in plain words.

## Your own private system

Each firm runs on its own system, with its own database, storage and sign-in. Nothing is shared between firms. That keeps an ethical wall between every firm we serve.

## Encrypted at every step

- Data at rest is encrypted with AES-256, backups included.

- Data in transit uses TLS 1.2 or higher.

- Keys to your systems are stored encrypted, apart from your data.

## You stay in control

Firmhorse shows each change in plain words: what will happen and why. At first, nothing is written to Clio, your calendar or your email until a person you chose approves it.

You decide when a job may run on its own, and you can move it back at any time. Some work always stays with people: filing with the court, moving trust money, sending bills and giving legal advice.

## A full record

Every action is recorded: who approved it, what changed and when. Your team can see the history in the app at any time.

## Sign-in and access

Everyone signs in with two-step sign-in. You choose who can see and approve each kind of work. Our staff get access only when your support request needs it, and that access is recorded.

## Your data is used for your work only

Your data is never sold, never shared with another firm and never used to train models. When a job needs to read a document, it uses services that keep no copy and do not train on it.

## Hosted in the United States

Firmhorse runs on Amazon Web Services and Google Cloud, in U.S. data centers. Both providers hold SOC 2 Type II and ISO/IEC 27001 certifications. Firmhorse does not hold its own SOC 2 report.

## The free Checkup is read-only

The Checkup only reads your Clio data. It changes nothing. You see what we found before you decide anything.

## Yours to keep

You own your data. Export it at any time. If you leave, you get a full copy, and we delete ours within 90 days.

## Built around your duties

Firmhorse is built to support the duties lawyers already carry: ABA Model Rules 1.1 (competence, including technology), 1.6 (confidentiality) and 5.3 (supervising non-lawyer help), ABA Formal Opinions 477R (securing client information), 498 (virtual practice) and 512 (generative AI tools), and Illinois Rule 1.6(e). Each firm makes its own judgment.

We sign a confidentiality and data agreement with every firm. Firmhorse is not a law firm and does not give legal advice.

## Report a security problem

Use the contact page at https://firmhorse.com/contact. See https://firmhorse.com/.well-known/security.txt.