CaseBuilderAI, LLC ("CaseBuilder") reads case files that contain medical records, accident reports and other confidential client information. This page describes how that information is handled today. We update it when the platform changes.
1. Where your data lives
- CaseBuilder runs on Google Cloud in the United States (Cloud Run and Cloud SQL, region us-central1).
- Case files, their readings and the work prepared from them are stored in a managed Cloud SQL database. Google Cloud encrypts this data at rest.
- All traffic between your browser and CaseBuilder uses HTTPS (TLS).
- Credentials and keys are kept in Google Cloud Secret Manager, never in application code.
2. Who can see a case
- You sign in with your Google account; CaseBuilder does not store passwords. Access is by invitation.
- Each case belongs to a firm. Only the people that firm invites can open it; a case of another firm is refused.
- A firm's owners and admins decide who is in the firm. When someone leaves, they lose access to the firm's cases.
- Sessions use secure, HttpOnly cookies. Changes are accepted only from the CaseBuilder application itself.
- Access to production systems is limited to authorized CaseBuilder personnel.
3. How documents are read
- CaseBuilder reads documents with Anthropic's Claude models through Anthropic's commercial API. Under Anthropic's commercial terms, data sent through the API is not used to train its models.
- Every conclusion CaseBuilder draws cites the page it comes from, so counsel can check it against the original.
- CaseBuilder's logs record usage, such as the number of pages and model tokens. They never record the text of your documents, the questions you ask or the answers.
4. Repositories you connect
- When you connect a document repository such as Google Drive, CaseBuilder asks only for read access, and reads only the files you choose.
- The access token the provider gives us is stored encrypted, and you can disconnect at any time.
5. How long data is kept
- A case is kept while your firm works on it. A case marked closed is deleted 60 days after closing, and any case is deleted after 12 months without activity. We email a notice 30 days before either deletion.
- A firm can delete a case permanently at any time. Deletion removes its versions, readings and stored documents from the database.
- Automated database backups are kept for 7 days, after which deleted data no longer exists in them.
6. Payments
Plans are billed through Stripe. CaseBuilder never receives or stores card numbers.
7. Service providers
CaseBuilder relies on these providers to run the platform:
- Google Cloud: hosting, database, backups and secrets.
- Anthropic: the AI models that read documents and draft work product.
- Stripe: subscriptions and payments.
- Zoho Mail: account and case notices by email.
8. Reporting a concern
If you believe your data or account has been exposed, or you find a security issue, write to us right away. If we confirm an incident that affects your firm's data, we will notify your firm without undue delay.
Contact Information
- Email: contact@casebuilder.ai
- Phone: +1 (973) 665-4394
- Address: 131 Continental Drive, Suite 305, Newark, Delaware 19713