Security & confidentiality
Client material deserves plain answers
What happens to your documents, who can see them, how long they are kept and how they are deleted — set out precisely, so you can judge it on the facts rather than on reassurance.
The short answers
The three questions every advocate asks first
What happens to my material?
It is stored encrypted and sent to our AI provider only so that it can be read and the analysis produced. It goes nowhere else — not sold, not published, not shared with any other party. The provider’s own terms, linked from the privacy policy, govern what it does with what it receives.
Does anyone at Litora read my matters?
Not as a matter of routine. Access happens only when you ask us to investigate a specific problem, when it is strictly necessary to keep the platform running, or when the law compels it — and every such access is written to the audit log.
Can I have it deleted?
Yes, at any time. Delete a matter and its documents from the workspace: they are removed from live systems immediately and purged from backups within 30 days, subject only to retention the law requires.
Storage & transmission
Where documents actually sit
There is no URL that serves a document without passing authentication and a permission check first.
In transit — TLS on every connection
Between your browser and the platform, and between the platform and the AI provider. HTTPS only; session cookies are marked Secure.
At rest — encrypted before it is stored
Every upload is encrypted with AES-256-GCM in your own browser, with a key made for that one file, and sent straight to private object storage — which only ever holds the encrypted file. The file is decrypted only for the moment it is read or opened. There are no public links: every file is opened through Litora after a permission check.
Secrets — never in plain text
Passwords are bcrypt hashes. Two-factor secrets, recovery codes and API credentials are encrypted with AES-256 and authenticated with HMAC.
Access control
Who can see a matter
Scoped to the organisation
A matter is visible only inside the organisation that created it. There is no cross-organisation index, search or aggregation of any kind.
Scoped to the seat
Within a chambers, each person sees only the matters assigned to them. Permissions are set by your account holder, not by us.
Two-factor authentication
Time-based one-time codes on every account. On an account holding client material, we treat it as expected rather than optional.
Sessions and lockout
Sessions expire when idle, repeated failed sign-ins lock the account, and changing a password signs out every other session.
Everything is logged
Sign-ins, uploads, runs, exports, permission changes and deletions are recorded with user and time, so the handling of any matter can be reconstructed.
Support access is exceptional
We do not browse customer matters. When you ask us to look at a specific problem, that access is logged like any other.
Subprocessors
Who else touches the data
Each for one purpose. No advertising networks, no analytics profiling, no data brokers.
| Party | What it sees |
|---|---|
| AI provider performs the analysis | The relevant parts of the matter, transiently, to produce the response — under its own terms. |
| Hosting provider runs the application | The application and database. No application-level access. |
| Object storage keeps original files | Original files, already encrypted by us. It cannot read them. |
| Email provider delivers email | Your email address and the messages and reports you ask to be emailed to you. |
Top-ups are paid by UPI from your own app; your card and bank details never reach our servers. Each current provider and its data policy is listed in the data processing agreement, available on request.
Retention
How long anything is kept
On closing an account you have 30 days to export your matters first.
| Data | Kept for |
|---|---|
| Case documents and matters | Until you delete them; purged from backups within 30 days |
| Original files beyond your storage | If a storage renewal stays unpaid past the grace period, the oldest originals are deleted (text and analysis kept), after email notice |
| Account data | While the account is open, then 90 days |
| Billing records and wallet ledger | 8 years, as Indian tax and company law require |
| Audit and security logs | 12 months |
| Server and error logs | 90 days |
| Support correspondence | 24 months |
If we suffer a breach
Where a breach is likely to put affected people at risk, we notify the relevant authority within the period the law requires and tell affected customers without undue delay — what happened, what data was involved, what we have done and what you should do.
If you find a vulnerability
Report it to security@litoraai.com. We do not pursue researchers acting in good faith. If you want to test actively, ask first — we will usually say yes.
What we do not claim
No system is perfectly secure. We hold no security certification at present and would rather say so than imply one. If your chambers needs a formal assurance, tell us the standard and we will answer honestly.