Built to carry privileged work.

In routine operations, staff work against a stable pseudonymous reference. Your name, email, sign-in tokens, IP address, billing identifiers and professional-registration details are not shown to staff in ordinary work. Revealing them requires a specific, logged reason through a restricted, audit-logged path.

Research goes to our AI model providers under contract. Standard research is held on the provider's systems for at most a provider-mandated 30-day window, then deleted. Brief and document analysis runs under zero-data-retention terms — nothing is stored once the response is returned — and a zero-data-retention research mode is available on every Pro plan. The zero-data-retention mode does not run on the provider's most capable model.

Nothing you research, upload or draft is used to train AI models — whether it is retained for 30 days or not retained at all. That is the standing arrangement with our model providers, and it applies to every request, on every tier.

Traffic between your browser and Barrister AI is encrypted in transit with TLS. Data is encrypted at rest at the infrastructure level, which guards against theft of physical media or backups.

Add a rotating six-digit authenticator code on top of your password — it works with any authenticator app and takes under a minute to set up in Settings. Opt-in, with single-use backup codes for when your phone isn't to hand. The authenticator secret is sealed under its own encryption key, so a database read alone cannot produce your codes.

Automated safeguards watch for abuse and probing across the product. The operational alerts they generate identify you only by a pseudonymous reference — never your name or your email.

A deletion request revokes access and billing immediately. After a short review window, a purge removes your identity and the data attached to it.