Microsoft identity and SSO
Authentication is handled through Microsoft Azure AD. Staff sign in with their existing Microsoft 365 credentials — no separate password infrastructure, no credential management overhead.
Security & Infrastructure
Security built for legal practice —not bolted on after
Law firms operate under strict confidentiality obligations. CoreCounsel is built from the ground up with security, data sovereignty, and auditability as core requirements — not optional features.
How CoreCounsel protects your firm's data
Security defaults that meet legal industry expectations without IT overhead.
Encryption at rest and in transit
All data stored in CoreCounsel is encrypted at rest using AES-256. All data in transit uses TLS 1.3. Encryption is applied by default — not as an optional add-on.
We do not train on your data
CoreCounsel does not use your matter records, documents, or client information to train AI models. Your data is used to deliver the service to you, and nothing else.
Hosted infrastructure
CoreCounsel is hosted on enterprise cloud infrastructure with availability, redundancy, and disaster recovery appropriate for legal workloads. Infrastructure details are available on request.
Audit logging
All platform activity is logged — who accessed what, when, and from where. Audit logs are available to firm administrators and are maintained for regulatory compliance purposes.
Role-based access control
Granular access controls let firm administrators define who can see and do what within CoreCounsel. Principle of least privilege is applied throughout the platform.
Data sovereignty
You control your data. Full stop.
CoreCounsel does not monetise your data, share it with third parties, or use it to train AI models. Your client information and matter records are yours — we store and process them to deliver the service to you, and that is the extent of it.
Enterprise customers can configure data residency to specific Australian regions, set custom retention policies, and access audit logs through administrative tooling.
AES-256
Encryption
TLS 1.3
In transit
Azure AD
Identity
SOC 2 aligned
Compliance
Request a full security and infrastructure briefing
We are happy to walk your IT and compliance teams through CoreCounsel's security posture in detail.