SECURITY, PRIVACY & PROFESSIONAL SECRECY
Security designed around professional responsibility.
A law firm is accountable for every client file it holds. Lars turns that responsibility into access controls, evidence and human review.
01 · RESPONSIBILITY
Who is responsible for what
The processing agreement and supporting privacy documentation are being prepared. Request the current documentation before onboarding client data. The privacy policy for this marketing website is separate from the product agreement.
DOCUMENTATION IN PREPARATION · ASK ABOUT ITS STATUS
02 · ISOLATION
The file stays where it belongs
Each firm is isolated from every other firm. One controlled gateway governs access, with permissions at matter, folder and document level. Personal workspaces stay private, including from administrators. Ethical walls enforce conflict boundaries, backed by isolation tests protected in continuous integration.
CONTROL EVIDENCE · TENANT ISOLATION · PERMISSION MATRIX · ETHICAL-WALL TESTS
03 · AUDIT TRAIL
Every access leaves a receipt
The audit trail records who accessed what and when, including denied attempts. Crossing an ethical wall requires a written reason, triggers an immediate notice and creates a record that cannot be silently removed.
“A brake with a witness, not a wall.”
CONTROL EVIDENCE · ACCESS LOG · DENIED ATTEMPTS · REASONED OVERRIDE
04 · SUBPROCESSORS
Who we work with—and who we do not
Provider selection must address processing location, retention and use for model training. The product subprocessor register and contractual review are being prepared; we do not present them as completed or certified.
PROVIDER
PURPOSE
REGION
TRAINING USE
DOCUMENTATION IN PREPARATION · ASK ABOUT ITS STATUS
Register entries and named providers will be published here before launch.
05 · RETENTION & EXIT
How long data is kept—and how you leave
Retention reminders are part of the product work. Automated deletion and complete export workflows still require validation before client onboarding. Agree the handling of your firm’s records with us before use.
IN DEVELOPMENT · OPEN-FORMAT FIRM EXPORT AND PERSON-LEVEL EXTRACTION
06 · HUMAN JUDGMENT
AI does not practise law
Lars is designed to organise operational work, not practise law. Deadline calculations belong to deterministic code, not a language model. The lawyer provides legal judgment. The applicable AI obligations depend on the final features and use; this page is not a certification or a completed risk assessment.
DOCUMENTATION IN PREPARATION · ASK ABOUT ITS STATUS
07 · ENGINEERING
How Lars is built
The product code includes access controls, audit records and log minimisation measures. Deployment configuration, provider guarantees and operational testing must also be verified before client onboarding. No security measure removes all risk.
ENGINEERING EVIDENCE · CONFIGURATION · ISOLATED-FILE · LOG-REDACTION TESTS
08 · INCIDENT RESPONSE
If something goes wrong
Report a suspected vulnerability or personal-data incident to contact@uselars.com without including client documents. Incident response procedures and recovery tests are being prepared. Notifications must follow the roles, risks and deadlines required by applicable law.
DOCUMENTATION IN PREPARATION · ASK ABOUT ITS STATUS
LAST UPDATED · 7 SEPTEMBER 2026
Changelog · Added responsibility model, isolation evidence, audit trails, subprocessors, retention, AI Act transparency, engineering controls and incident response.
GDPR
Ask us about the processing agreement and privacy documentation before onboarding your firm.
DOCUMENTATION IN PREPARATION · ASK ABOUT ITS STATUS
Professional secrecy
The lawyer’s duty of confidentiality is written into access control.
DOCUMENTATION IN PREPARATION · ASK ABOUT ITS STATUS
Data location
Processing locations depend on the service and provider. Confirm them with us before sharing client information.
DOCUMENTATION IN PREPARATION · ASK ABOUT ITS STATUS
EU AI Act
Lars prepares and proposes. A lawyer reviews and decides.
DOCUMENTATION IN PREPARATION · ASK ABOUT ITS STATUS