Trust and security

How the desk uses language models

VerdeKai OS uses language models to draft, classify, and summarize. Models do not make funding decisions. People decide at promote, sign-off, and committee.

One gateway for every model call

Every model call in desk workflows goes through a single inference gateway. Application code asks for a type of job, not a model. Structured outputs must match a defined schema, or the call fails after one repair attempt. The gateway does not record decisions.

What a model receives. Prompt text built for the job, which can include matter document text, extracted facts, and docket details. Prompts do not include sign-in tokens or provider keys.

What the desk keeps. The model output and a receipt for each attempt. A receipt records the provider, model, usage, and outcome. It does not store the prompt text.

Provider keys are stored and used on the server, not in the browser.

Bring your own key (BYOK)

A firm can connect its own model provider key. Model calls for that firm’s matters then go to the provider the firm chooses instead of DeepInfra, under the firm’s own terms with that provider. If the firm also turns on fallback, a call that its provider cannot complete goes to DeepInfra.

Access

• Accounts are by invitation only. There is no public sign-up.
• Each firm’s data is scoped to that firm: Firestore and Storage rules and the API require membership in that tenant. VerdeKai operators with Google Cloud project-owner or equivalent admin access can read all data in that project. We have not published a staff-access or break-glass log statement.
• Sign-in is email and password. SSO and multi-factor authentication are not offered in the product today.

Encryption

Customer data on Google Cloud is encrypted at rest by Google’s default encryption (AES-256) and in transit with TLS. The public site is configured to send HSTS. We do not use customer-managed keys for Firestore or Storage.

Audit log

Desk actions such as matter creation, document adds, underwriting runs, and gate events are recorded in an audit log that signed-in members can read and that clients cannot write or delete through the app. This is not a complete security audit log and is not immutable against cloud-admin access.

Where the platform runs

The VerdeKai OS database and application services run on Google Cloud in United States regions. This statement covers the VerdeKai platform, not the third parties listed below.

Subprocessors

Third parties that process desk data for VerdeKai OS.