Trust centre
Your record stays your record.
How Mary protects matter data, what connected AI tools can and can’t do, and the documents your security team will ask for.
Ex. 1Controls
The controls your risk team asks about.
ISO/IEC 27001:2022 certified
Independently audited information security management.
Request the certificateNever used to train AI
Documents, matter content, prompts and outputs are never used to train models.
Isolated by matter
Separate access and data boundaries for each matter.
Encrypted
Data protected in transit and at rest.
Your firm’s data region
Hosted in your firm’s region: Australia, the United States or Europe.
SSO and firm permissions
Access follows your firm’s identity provider and matter permissions.
Ex. 2Connected AI
What an AI connection can and can’t do.
The same rules apply to Copilot, Claude, ChatGPT, Harvey and your own AI.
A connected AI can
- Read matters the signed-in lawyer can see
- Read facts, sources, flags and review history
- Ask Mary to start a chronology, analysis or draft
It can’t
- Mark any fact verified
- Edit or delete entries
- See matters outside the lawyer’s permissions
Walk through Mary with your security team.
30-minute product walkthrough. No obligations.Ex. 3Audit
Every action, on the record.
Each entry keeps its own audit trail, with who acted, when, review notes and before-and-after values.
- ChangesEntries created, modified, restored or deleted
- ReviewVerified, rejected, review requested, commented
- AccessWho opened what, and when
- ExportEvery workspace exported
- SystemLifecycle events Mary records itself
- A. ChenverifiedOrder signed Sep 28just now
- M. PatelcommentedDon’t adopt either time yet1 hr ago
- MarygeneratedChronology, 1,642 entriesyesterday
- J. RossexportedStatement of facts to Wordyesterday
Ex. 4Security pack
Everything your security team will ask for.
- Security overview
- ISO/IEC 27001:2022 certificate
- Data processing agreement
- Subprocessor list
- Penetration test summary