You grant the access.
Only the matters and accounts you authorize. Read-only by default; permitted writes require the access you allow. Consequential actions require your approval.
Terms §2.4Your data.
Your boundaries.
Your Second Brain holds the practice context that makes your twin useful. AI providers process requests under zero-retention, no-training agreements. Those are different responsibilities, with different retention rules.
Context stays with you.
Practice data is stored to provide the service. Each matter has an isolated sandbox. Authorized firm templates and playbooks are separate from confidential matter facts.
Terms §§6.2, 7, 8.2No model training.
AI providers process the request without retaining it or training on your data. That does not mean TwinCounsel deletes the practice information you asked it to retain.
Provider safeguards →The boundaries worth understanding.
Matter isolation.
Client communications stay in their matter. Sharing within a grouped Client Engagement is a defined, authorized exception. Firm knowledge contains only designated reference material, templates and approved methods.
Your access, across systems.
A PMS connection does not grant access to every matter or authorize every action. Scope, supported fields and permitted updates are confirmed during setup.
Learning you can inspect.
Explicit corrections and approved playbook changes shape future behavior. Approving a draft and approving a new rule are separate decisions. Your client content does not train the AI model.
Portability you can use.
You can export data and readable playbooks, with the right to keep using exported playbooks. Your Second Brain is separate from the model provider, so changing models need not mean starting over.
Storage, access and retention.
| Question | Commitment | Source |
|---|---|---|
| Where is User Content processed? | In the United States. | Terms §13.3 |
| How is it protected? | AES-256 at rest and TLS 1.2+ in transit under the Terms. | Terms §11.1 |
| Can staff access it? | No routine human access. Written-consent or legal exceptions are scoped, logged and reported within 2 business days. | Terms §10.2 |
| What happens after a matter closes? | Raw files remain exportable for 90 days after closure, with notice before permanent deletion. Structured audit records are retained for at least five years under Terms §7.3. | Terms §7.4 |
| Can I request deletion? | Request deletion through support. Raw content, structured audit records and evaluation data follow their applicable retention rules, notice requirements and legal holds. | Trust & Safety; Terms §7.4 |
| What about provider changes? | Material subprocessor changes carry 30 days’ advance notice. | Terms §7.5 |
Read the complete Terms and Privacy Policy for the governing language.
Data Processing Agreement
Request the current DPA.
Where applicable, the DPA supplements the Terms. It covers processor and controller roles, international transfers, assistance with data-subject requests and audit rights.
Request the current agreement at legal@twincounsel.com, as provided in Terms §13.4. This overview explains the service; the signed agreement governs the relationship.
Security supports your judgment.
The design supports confidentiality, review and professional supervision. Privilege and professional obligations still depend on the facts, jurisdiction and use involved.
Read the Professional Responsibility Guide →