← Back to home
Legal

Security

Last updated June 2026
This is a preliminary overview of our security approach during our early-access period. Detailed documentation and third-party attestations will be published as our compliance program matures. Questions? Email info@nustudio.ai.

Security is foundational to Sarvos. We are building the platform with the controls law firms expect for privileged and confidential information.

Privilege and confidentiality

Public, consumer AI tools retain what you type and may share it with third parties. Courts have begun ruling that confidential information entered into those tools loses its protection, which puts privilege at risk the moment client matter is pasted into a public chatbot.

Sarvos is built the opposite way. Your firm's data is processed only inside your own isolated tenant, under enterprise terms where your content is never retained or used to train any third-party model. AI runs under your attorneys' direction, every input and output is logged, and privileged material stays within your firm's control. The model can change (Claude or ChatGPT); the confidentiality boundary does not. Sarvos provides the architecture to keep confidential client information within your firm's control; whether privilege attaches in any given matter remains a legal determination for your attorneys.

Tenant isolation

Each firm's data is processed within an isolated tenant. Your data is not commingled with other firms' data and is not used to train third-party foundation models.

Encryption

Data is encrypted in transit (TLS) and at rest using industry-standard algorithms.

Access controls

Access to firm data is restricted on a least-privilege basis. We use authentication, role-based permissions, and audit logging to govern access.

Model choice and data handling

You choose your AI model (Claude or ChatGPT). Requests are processed under enterprise data terms designed so that your firm's content is not retained for model training by the provider.

Infrastructure

Sarvos runs on reputable cloud infrastructure with managed network security, monitoring, and regular backups.

Compliance

Our compliance program is in progress. We are working toward recognized industry standards and will publish attestations as they are completed.

Incident response

We maintain procedures to detect, respond to, and notify affected customers of security incidents in line with applicable law and contractual commitments.

Responsible disclosure

If you believe you have found a security vulnerability, please contact us at info@nustudio.ai so we can investigate and address it promptly.

© 2026 Sarvos. All rights reserved. Privacy · Terms · Security