Confidential matters, handled like they're confidential.
Your documents are encrypted at rest and in transit, stored in Singapore by default, and reachable by BriefTech staff only at your written request. You decide who sees a matter — and the controls behind that are written into our Security Addendum, not just the marketing.
Encrypted, contained, and yours
- 01
Encrypted end to end
Documents are encrypted at rest with AES-256 and in transit with TLS, on cloud infrastructure independently audited to SOC 2 Type II, ISO 27001 or equivalent frameworks.
- 02
Stored where you need it
Your data is held in Singapore by default. Other regions are available on request, where our cloud provider supports them and the law allows.
- 03
Access on least privilege
BriefTech staff reach your data only to support the Service at your written authorisation, or to comply with the law — through SSO, two-factor authentication and endpoint-protected devices, on the principle of least privilege.
What backs the promise
- Serverless by design
The platform runs on fully-managed, serverless services — no virtual machines to patch — inheriting the cloud provider's hardening, anti-malware and patch management.
- Secure development
OWASP Top 10 mitigations, every change reviewed before it merges, and third-party dependencies continuously monitored for known vulnerabilities.
- You control the matter
You decide who has access to each matter, and can change or remove a colleague's access at any time. Some agents can only be switched on by the matter's owner.
- Audit logging
System activity is logged, protected against tampering, and traceable to the individual user — retained for at least a year.
- 72-hour breach notice
If a security incident affects your data, BriefTech notifies you without undue delay — and in any case within 72 hours of becoming aware.
The full detail lives in our Security Addendum — the binding document these controls are drawn from, not a summary written for this page.
Confidentiality isn't a badge on a page here. It's the contract.
Two fears decide whether a legal team will trust software with a live matter — whether the AI is accurate, and whether the data is safe — and BriefTech answers the second the way it answers the first: by being specific. Encryption at rest and in transit, documents stored in Singapore by default, least-privilege access that only opens at your written request, audit logs that trace every action to a person, and a 72-hour breach-notice commitment are all set out in a Security Addendum that forms part of the terms you sign.
Put Security & trust to work
Encrypted, Singapore-resident, least-privilege — your matters stay yours.