At Spellbook, we know that privacy and security are our customers’ top priorities. So they are ours too. Spellbook is designed to deliver all the benefits of AI to law firms and in-house teams, with none of the downsides of AI applications designed for consumers. We have Zero Data Retention arrangements with our best-in-class AI infrastructure providers, both to ensure that your data stays private and isn’t used for training. We are compliant with major international regulations such as GDPR and CCPA. We take a “defense in depth” approach to security, implementing numerous best-in-class, redundant security controls. Please view our Trust Portal for more information.
Spellbook has negotiated agreements with both OpenAI and Anthropic for zero data retention (ZDR). This means customer data included in requests and responses with these LLMs is not persisted and exist only in memory in order to process a request.
Spellbook is provided as a Microsoft Word add-in and uses Microsoft accounts for SSO. This allows companies to enforce authentication controls, such as multi-factor authentication (MFA), within their Microsoft Entra tenant.
More information on how SSO works can be found here.
Spellbook uses Amazon Web Services (AWS) as the primary cloud provider. Other third party services are used that may store or process customer information. A complete list of third party providers can be found on a the subprocessor page.
Spellbook uses cloud providers with data centers in Canada and US for storing and processing customer data. A full list of subprocessors and locations can be found on the subprocessors page.
We serve law firms in over 50 countries. We comply with GDPR, CCPA, PIPEDA and numerous other privacy regulations.
Thank you for your interest!
Thank you for your interest! We are currently only onboarding legal professionals.