AES-256 Encryption
Documents are encrypted with AES-256-GCM before storage.
Each file uses a unique IV and authentication tag. Encryption keys are never stored beside ciphertext.
SeraCase Trust Center
Trust built for confidential legal work
SeraCase is a secure AI case management platform designed to help you organize and understand your legal information — for individuals, families, lawyers, and mediators.
Explore by topic
Security
How your documents stay protected
Privacy
Your data, your ownership, your choices
Compliance
Our path toward enterprise assurance
AI Transparency
What Sera reviews — and what she never does
Data Protection
Isolation, deletion, and export rights
Infrastructure
Secure cloud foundations
Backups
Resilience you can rely on
Incident Response
How we prepare and respond
Contact Security
Talk with our security team
Enterprise trust highlights
AES-256 Encryption
Files encrypted before storage with per-file keys.
Private Storage
No public buckets — signed access only.
AI Privacy
Case-scoped AI context. No cross-user learning.
Audit Logging
Security actions recorded for transparency.
Enterprise Security
MFA, RLS, malware scanning, and session controls.
Canadian Privacy Focus
Built for confidential legal case materials.
Core security controls
TLS Encryption
Traffic between your browser and SeraCase uses HTTPS/TLS.
Sessions and API calls travel over encrypted connections to protect credentials and case materials in transit.
Private Storage
Uploads live in private cloud buckets — not public links.
Objects are not publicly listable. Access uses short-lived signed URLs or authenticated decrypt proxies.
Row-Level Security
Database policies restrict each account to its own records.
Supabase RLS and ownership checks help ensure users cannot read another user’s cases, files, or chats.
Malware Scanning
Uploads are scanned before processing continues.
Heuristic checks and optional remote scanning run before OCR/AI. Suspicious files are quarantined.
Virus Detection
Executable payloads and known test signatures are blocked.
Dangerous extensions, magic-byte executables, and EICAR-style signatures are rejected with clear user messages.
See the full list on the Security page.