Trust Center

Before you put client information in any tool, you need to understand how it is handled and whether the service fits your firm's obligations. This page explains DocketDrafter in plain terms. The technical details give specifics for IT reviewers and AI assistants. Both pages cover DocketDrafter for Claude and ChatGPT.

The short version

• Your work is confidential. Our Terms of Service restrict how we use and disclose your content, including during support and after cancellation.
• We don't train AI on it, and don't permit our AI providers to do so. DocketDrafter doesn't call AI models while your assistant uses it; our AI processing happens through the founders' setup and support tools. Your own assistant's terms and settings remain your firm's responsibility.
• Primary workspace repositories and stored files are encrypted at rest in a US AWS region, and kept private from other firms. Working copies and provider processing are described in the technical details.
• Version history helps recover changes. Ordinary file deletion does not erase history; permanent deletion requires a written request.
• The two founders run the service. They and their AI tools can access your entire workspace for the service purposes described below. Disclosed service providers also process data.
• You can export your documents on request, as Word and PDF files, along with the files you uploaded and your firm's saved instructions. Cancellation does not automatically export or delete your data. Permanent firm or matter deletion is completed within 30 days of an authorized request, subject to legal retention requirements.
• We notify your administrator within 72 hours of confirming a security incident affecting your data, or sooner if applicable law requires.
• Every workspace member can access every matter. We don't offer private matters or ethical walls within a workspace.

Is my client information kept confidential?

Yes. Section 7 of our Terms of Service treats drafts, uploads, instructions, outputs, and client and matter details as your confidential information. That includes client information in feedback reports. We use it for defined service purposes: providing, configuring, maintaining, supporting, testing, operating, and securing your service, fulfilling your order, enforcing the agreement, and complying with law.

This is not permission to use identifiable client documents for unrelated research, general-purpose test datasets, demonstrations, or marketing. Confidentiality continues while we retain your content, including after cancellation. Necessary provider processing, confidential professional advice, and legally required disclosure are addressed in the Terms.

DocketDrafter is built and operated by Tommy Eberle and Grant Willard, its two founders (Avize LLC d/b/a DocketDrafter).

Who can see it?

Workspace members: everyone with access to a workspace can access every matter in it. If information must be withheld from some members, arrange separate workspaces with appropriately separated memberships or keep that work outside DocketDrafter.

The founders: both have technical access to the entire workspace, including client documents and version history. There are no employees or individual support contractors with access. If that changes, we'll notify you at least 30 days before anyone else gets access, and you can cancel, export, and delete before it takes effect (ToS §18). We proactively review workspace activity, including commands, results, errors, and the documents involved, to find problems and improve your firm's setup, especially early on. We don't review client documents for purposes outside the service purposes above. While actively supporting your firm, the founders may keep working copies of your workspace on their encrypted work laptops; these are removed within 30 days after active support ends or you cancel, and in any event when you request deletion.

Our AI tools and providers: we use AI tools to configure, maintain, and support workspaces. These tools can explore the entire workspace; they are not limited to particular files or matters. Confidentiality, purpose restrictions, and no-training obligations still apply. Our Subprocessors page describes the companies involved.

See ToS §2: workspace visibility and §9: founder, AI, and provider access. Separate workspaces do not restrict founder access. Version history records changes, not every document read; we do not provide comprehensive document-read logs.

Is DocketDrafter suitable for my work?

DocketDrafter supports confidential legal work, including Social Security numbers, A-numbers, identity documents, dates of birth, immigration status, sensitive personal narratives, and information about minor clients. Sensitivity alone does not require special approval.

Your firm must ensure that our disclosed processing is authorized by applicable law, court orders, client instructions, and contracts. Restricted information is not automatically prohibited, but any restrictions must be compatible with the service. If your work requires additional safeguards or agreements, contact support@docketdrafter.com before submitting it. We do not accept classified information or information whose requirements we cannot meet. We don't offer HIPAA business associate agreements, so work that requires one isn't supported.

See ToS §6: Customer Content for permitted information and your firm's responsibilities. These disclosures help your firm evaluate the workflow; they do not constitute ethics clearance or guarantee attorney-client privilege. Your firm remains responsible for professional judgment, reviewing outputs, and deciding what may be submitted.

Is my work used to train AI?

No. We don't train models on customer content and use our AI providers only under terms and configurations that do not permit training on it. See ToS §8: No Training on Customer Data.

Your own assistant is governed by your firm's agreement and settings with its provider. We do not receive its conversation history as a separate chat feed, but tool submissions can contain conversation excerpts, document text, commands, and results.

Where is it stored, and how is it protected?

Your workspace and stored files are encrypted at rest in a US AWS region (us-east-2, Ohio). Other firms can't see or reach them. Traffic to and from DocketDrafter is encrypted. The technical details and provider list describe working copies and storage and processing locations.

Team members sign in with individual accounts and can turn on two-step verification. Firm admins can also require two-step verification for all members via the Team settings page. Connecting an assistant gives it a revocable access token, not your password.

What if an edit goes wrong?

Workspace changes are committed automatically to version history when an assistant command finishes. You can ask your assistant to compare versions, produce a Word redline where supported, or restore a saved version. Ordinary deletion leaves a file in history so it can be recovered.

Version history is a recovery tool, not a guarantee against every loss or an audit of every read. Permanent deletion requests remove the requested history as well.

What does feedback reporting send?

Your assistant can send product feedback on its own or when you ask. Reports focus on actionable issues and requests, but can include relevant document excerpts or matter context. They are stored with your firm's records and sent to a private founders-only Slack channel. Client information in a report remains confidential.

The feedback tool is optional. You can turn it off in your assistant's connector settings, or set it to ask for your approval before each report is sent. Turning it off doesn't stop ordinary service activity records or founder access.

Do you transcribe calls?

Yes. Before each call, we tell participants that we transcribe calls for our internal notes, in the booking confirmation and the reminder email. Anyone can tell us they'd prefer we don't, and we'll take notes by hand.

We use Granola for internal notes, organization, follow-up, and product feedback. Model training is disabled in our Granola account. We do not retain audio or video recordings unless asked. Only the founders access retained transcripts apart from the providers used to process and store them. They are not marketing content or public testimonials. We keep transcripts as business records; if you ask at support@docketdrafter.com, we remove client and matter details from them.

Who else handles our data?

The Subprocessors page lists providers, their roles, and data locations. They process information for authorized functions under confidentiality and data-use obligations. We add a provider to that page before it handles customer content. To also receive an email notice, write to support@docketdrafter.com.

What happens if there's a security incident?

We notify your firm's account administrator within 72 hours of confirming an incident affecting your data, or sooner if applicable law requires. We describe what happened, affected data, and our response to the extent then known, and provide updates. See ToS §17: Privacy and Security. Report concerns to support@docketdrafter.com.

How long do you keep things, and can we leave?

Cancellation does not automatically delete your workspace or history. We retain them until your firm requests permanent deletion so work can resume if you return. Some records expire sooner; see the retention schedule.

Export: during your subscription or after cancellation or termination, email support@docketdrafter.com to request an export. We'll send the latest version of every document as Word and PDF (court forms as fillable PDFs), the files you uploaded that we still have, and the instructions and conventions saved for your firm. Exports are not automatic and include current versions only, not version history. See ToS §13: retention, export, and deletion.

Permanent deletion: an authorized representative can request deletion of the whole workspace or an individual matter in writing at support@docketdrafter.com. This is a manual process. Single-matter deletion includes associated history, uploads, reports, and working copies. We may ask your firm to help identify matter information in shared files or mixed records; our deletion commitment still applies. Within 30 days we delete the requested content, history, and associated copies from our systems, founders' devices, and the providers that store it, and confirm in writing. Email correspondence with us and call transcripts are business records rather than workspace content; they stay confidential and are kept, and on written request we remove client and matter details from them. If law requires retaining particular information, we limit retention to that requirement and explain the exception where legally permitted.

A few things run out on their own schedule instead: our system logs (which never contain your documents), short-lived backups of your account records, and what our AI coding tools sent their providers while we maintained your workspace. The technical details page lists each one.

How should we set up Claude or ChatGPT?

Your firm's AI assistant is where you and your staff work with client information, so its settings matter as much as ours. We recommend:

In Claude or ChatGPT

• Use a business plan. These plans don't use your conversations to train AI models.
• If using a personal plan, turn off the setting that lets the provider train on your chats before adding any client information.
• Give each person their own account, with two-step verification on.
• Turn off connector actions your work doesn't need, such as sending email or deleting files.
• If your assistant can run code or browse the web, limit the websites it can reach to the ones your work needs. On business plans, an admin usually sets this for the whole team.
• Don't rate responses or send bug reports from chats with client information, and turn these off where your plan allows. They send the whole conversation to the provider, which can keep it much longer than an ordinary chat.

In DocketDrafter and your firm

• Review final documents before relying on or filing them, and keep your own copies of client records.
• Require two-step verification for every member, from your Team settings page.
• Remove people from the workspace as soon as they leave the firm or no longer need access. Removing them also ends their assistant's access right away.
• Give workspace access only to people who should see every matter in it.

These are recommendations, not conditions for using DocketDrafter. Your firm still decides client authorization and its own review process.

Limitations to understand

• We do not have a SOC 2 report or a third-party penetration test of DocketDrafter itself, and cannot offer a HIPAA Business Associate Agreement.
• The Terms define contractual commitments and limits on remedies; this page describes our practices. See §14: disclaimers and §16: limitation of liability.