Security & professional responsibility

Professional-Grade Security

Brady is built around the duties defense counsel already carry: confidentiality, competence with technology, and control over client material.

Delete means goneremoves it from the vault and the database immediately, with no retained versionsChain of custodySHA-256 fingerprint; full custody logNever used for trainingnever used to train AI modelsSigned links onlyNo file ever sits at a public addressEncryptedEncrypted in transit and at rest

Your evidence stays in a private, encrypted vault

Every video, recording, and document you add travels over an encrypted connection into private cloud storage reserved for your account, where it is encrypted at rest. Nothing in the vault is ever published at a public address. Each file is reached only through a signed link issued to your signed-in session, and every link expires within an hour. The Solo plan includes 200 GB, and the vault is the system of record, so your case file follows you to any device.

AI review happens inside the walls

When Brady reviews a recording or a document, our servers read it straight from your vault, prepare still frames and compressed audio in memory, and send them over encrypted connections to two providers: Anthropic, whose Claude models perform the review, and Deepgram, which transcribes the audio. Neither may use your material to train its models. Anthropic does not train on API content under its commercial terms, and every Brady request to Deepgram carries its training opt-out. Brady keeps nothing derived from your evidence outside your vault and your written results.

Access stays with you and the people you choose

Every database query and every vault operation is scoped to your account. A case becomes visible to colleagues only when you share it with your firm workspace, and only the lawyer who created a case can delete it.

Sign-in and payments are handled by specialists

Passwords, sign-in, and sessions are managed by Clerk, a dedicated authentication provider, so Brady never sees or stores your password. Payments run through Stripe, and card numbers never touch our systems.

Hosted on SOC 2 Type II audited providers

Every service that stores or processes your evidence holds a current SOC 2 Type II report from an independent auditor: Vercel for application hosting, Cloudflare for the evidence vault, Neon for the database, Clerk for sign-in, Anthropic for AI review, and Deepgram for transcription. Stripe, which processes payments, holds one as well.

Every finding points back to the source

Each AI finding carries a timestamp to the exact moment in the recording, so you can check it in seconds. Findings are a reviewing aid, not a conclusion, and counsel verifies each one against the record before relying on it.

Delete means gone

Delete a recording and Brady permanently removes the file from your vault along with its transcript, findings, notes, and exhibit clips. Delete a case and everything in it goes the same way, including its documents. Brady keeps only your billing records and a count of how many recordings you have processed. Deletion cannot be undone, so keep your original discovery in your own evidence storage as a matter of practice.

Completing a vendor review for your firm? Email info@courthousedigital.com and we will walk through any of this with you.