Last updated: March 2026
Causio (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered legal case management platform. We are fully compliant with the General Data Protection Regulation (GDPR) and other applicable European data protection laws.
We collect the following categories of personal data:
Your case data is processed by AI models (Anthropic Claude API) solely for the purpose of providing AI-powered features such as intake analysis, evidence scoring, and case chat. We do not use your data to train AI models. All AI processing is subject to our data processing agreements with sub-processors.
Data is stored on servers within the European Union. We implement field-level encryption for sensitive data, use AWS KMS for key management, and maintain comprehensive audit trails. Access is controlled through role-based permissions with organization-level data isolation.
Under the GDPR, you have the following rights:
We retain your data for as long as your account is active or as needed to provide services. Case data is retained according to legal requirements applicable to your jurisdiction. You may request deletion at any time via Settings or by contacting us.
We use the following sub-processors: Convex (database), Clerk (authentication), Stripe (payments), Anthropic (AI processing), OpenAI (voice transcription and embeddings), Composio (integrations), and Resend (email notifications). Each sub-processor is bound by data processing agreements ensuring GDPR compliance.
For privacy-related inquiries, data access requests, or to exercise your GDPR rights, contact our Data Protection Officer at privacy@causio.eu.