Security built for confidential patent work.

Q: How do I request data deletion?

Contact us at security@boundly.ai. We process deletion requests within 30 days.

Redaction, encryption, and controlled access designed for teams handling sensitive IP.

Redaction Before Model Access

Sensitive information such as client names, matter details, and proprietary terms can be masked before any model sees them. Tokens are reversed only in your session.

No Training on Customer Data

Customer prompts, documents, and outputs are not used to train AI models. Your data stays yours.

No Prompt-Content Monitoring Tools

We do not deploy tools that read or analyze the content of your prompts for internal purposes. Your work stays private.

Encryption in Transit and at Rest

AES-256 encryption at rest for all stored data. TLS 1.3 for all data in transit. Keys managed with automatic rotation.

Controlled Access and Auditability

Role-based access controls, multi-factor authentication, SSO support. Complete audit logging of all user actions.

Industry-Leading Certification

Boundly holds an active SOC 2 Type 2 attestation. ISO 27001 is in audit, expected to complete by end of May 2026. Annual penetration testing by third-party firms. Continuous vulnerability scanning and monitoring.

Visit Our Trust Center

Security FAQ

Do you train AI models on my data?

No. Your prompts, documents, and generated content are never used to train any model, including third-party models we route to. This is enforced at the contract level with every model provider and documented in your DPA.

Where is my data stored?

Storage and processing details depend on your deployment and setup. If you need region-specific or infrastructure-specific details, contact us and we can walk you through them directly.

Can Boundly employees see my data?

Access to customer data is strictly controlled and limited to authorized personnel for support purposes only, with full audit logging.

How do I request data deletion?

Learn More About Security

Have questions about our security practices or how we handle confidential IP workflows? Get in touch.