Privacy and data handling

Version of September 23, 2026. This page describes what the service does with the files you upload and the account information you give us. The full security policy is available to firms on request.

What we collect

Account information: firm name, user names, email addresses, and a password stored as a salted hash. Usage records: every login, file view, download, release, deletion, and invitation, with time and network address, kept as the firm's audit log. Uploaded files and everything produced from them.

Where it lives

Files, page images, outputs, and backups are stored in an Amazon Web Services account controlled by Terravo, in the US East (N. Virginia) region, encrypted at rest and in transit, in a bucket closed to public access. Structured data lives in a database on an encrypted volume in the same account. Nothing is stored with a third-party search or vector service.

Who processes it

Two vendors touch uploaded content, each under a signed Business Associate Agreement: Amazon Web Services (storage, compute, text recognition on scanned pages, and, when configured, the model itself through Amazon Bedrock), under the AWS Business Associate Addendum accepted September 15, 2026; and Anthropic (the model that reads and summarizes the pages), which receives page text and images for the duration of each request, under the Business Associate Agreement executed September 25, 2026. Anthropic retains request data for thirty days for safety purposes under that agreement; a zero-retention arrangement has been requested. No other vendor sees uploaded content. Emails are sent through Amazon Simple Email Service.

Who can see it

Users of the firm that uploaded it, by role. Terravo staff only on the firm's request for support, and every such access is logged. No one else. We do not sell, share, or use uploaded content to train models.

How long we keep it

While the case is active plus the firm's retention period (default one year after completion, adjustable per firm), after which a nightly process deletes it. A firm can delete any case at any time from its page; deletion removes files, database rows, and index data, and backups age out within thirty days.

Your controls

Delete a case; download your outputs; change your password; ask us at review@terravo.law to export or delete your firm's account and all of its data, which we do within thirty days.

Incidents

If we confirm an incident affecting your data we notify the firm in writing within seventy-two hours, and follow the notification duties that apply to health information and to personal information of residents of the states involved.

Contact

review@terravo.law.