Skip to content

What happens to my documents

Plain-English retention and deletion for evaluation files. Documents are accepted only through the authenticated secure portal after you accept the BAA and Evaluation Terms.

How a case file moves through EveryCaseA qualified firm verifies its work email and accepts the BAA before any upload. Files move through short-lived signed URLs into private quarantine storage, where extension, MIME type and file signature are validated and malware scanning runs. Only then are files promoted to processing. Results are tenant-isolated and evaluation files are deleted after 30 days with a confirmation email.No document moves before the paperwork does.GATE — BEFORE ANY BYTES ARRIVEQualifyVerify emailAccept BAAAUTHENTICATED PORTALShort-lived signed upload URLsFiles never stream through the web appQUARANTINEExtension allowlistMIME + signature checkMalware scanPROCESSINGUUID object namesNo PHI in paths or logsEvery access loggedDELIVERYTenant-isolated resultsExpiring download linksAttorney reviewDELETION30-day defaultOn-request earlierConfirmation emailNo model training on your cases, ever. Your data is your data.

The path a file takes

Every step below is intentional. Marketing forms never accept case packets. Email is for questions — not uploads.

  1. Upload: Files go to a private quarantine store via short-lived signed URLs. Object names are random UUIDs — no client names in paths.
  2. Validation: Extension allowlist, MIME type, and file-signature checks run before processing. Malware scanning occurs before promotion to the clean store.
  3. Processing: Authorized systems generate reviewable deliverables. Access is logged. Your team reviews output before anything is treated as work product.
  4. Retention: Evaluation files are kept for 30 days by default, then deleted automatically.
  5. Deletion: You may request earlier deletion by emailing privacy@everycase.ai. We send a deletion confirmation email to the verified work address.
  6. Derived output: Trial deliverables follow the same retention window. After deletion, limited security and audit logs may be retained as required by law.
  7. Training: No model training on your cases, ever. Your data is your data.

What you should never do

  • Paste PHI into the contact form, demo notes, or calendar invites.
  • Email medical records to a general inbox for "faster intake."
  • Upload open matters until your firm is ready for production use under the BAA.

Related agreements

Read the Privacy Policy, BAA, Evaluation Terms, and Security pages alongside this procedure. Deletion or privacy requests: privacy@everycase.ai.

When you are ready to upload

Your first demand letter is free. We'll build it from a real closed case of yours so you can judge the work, not the pitch. No credit card. Uploads open only after verification and BAA acceptance.

No credit card · No subscription · 24–48 hr turnaround · BAA available