Security and data
protection at AS Legal
For your review
These documents let you show that you selected AS Legal with the care that professional rules and data protection law require. You receive them before signing.
-
Data processing agreement
Subject matter, instructions, audit rights and deletion under Art. 28 (3) GDPR.
-
Confidentiality agreement
In text form, with notice of the criminal consequences.
-
Technical and organisational measures
Access control, transmission, separation, availability and deletion in detail.
-
List of sub-processors
With provider, service and location. We notify you of changes in advance.
Security questions
Where is our data processed?
Exclusively in data centres in Germany. This applies to the storage of your case files and to their processing by the AI models.
May we upload client files to AS Legal under § 203 StGB and § 43e BRAO?
§ 43e BRAO allows law firms to involve service providers who are bound to confidentiality. We are bound to confidentiality in text form, every employee has been informed of § 203 StGB, and each firm concludes a data processing agreement with us under Art. 28 GDPR. For firms in Austria, the agreement follows § 9 RAO and § 40 RL-BA 2015.
Is our data stored securely?
Your data is encrypted in transit and at rest. The data of each firm is kept separate from that of other firms.
Are our case files used to train AI?
No. AS Legal processes your case files only to answer the queries of your firm.
Who in our firm has access?
You decide which people in your firm receive access. You can restrict guests such as clients or external colleagues to individual case files and set an expiry date for their access.
What happens to our data if we cancel?
We delete all of your firm’s data after the end of the contract.