Security & trust

Built for confidentiality

Basalix AI tells every caller it is an automated assistant, never gives legal advice, keeps each firm's data separate, and lets the firm decide who sees records and how long they are kept.

01

Ethics & confidentiality posture

The agent says what it is, stays inside the lines the attorney draws, and records consent.

Discloses it's an AI on every call

The agent identifies itself as an automated assistant and says the call may be recorded, in its opening line.

Never gives legal advice

No advice, no fee quotes, no opinion on case merit — locked guardrails the attorney reviews.

Attorney stays in control

The firm writes and locks the screening criteria and forbidden topics; the platform's guardrails can't be switched off.

Consent captured

Consent to follow-up is recorded with the client's phone number at intake, and every email carries a one-click unsubscribe that is honored automatically.

“Thank you for calling. I'm an automated assistant for the firm. I can't give legal advice, and this call may be recorded. How can I help you today?”

Default greeting. The firm can edit the wording; the AI disclosure and recording notice stay.

02

Client data protection

Firm data stays with the firm, and AI providers never train on it.

Tenant isolation

Each firm's data is partitioned by tenant, and every query is scoped to that firm.

Domain-locked widget

The chat widget only loads on the domains the firm allows.

Encrypted credentials

Calendar and CRM connection tokens and AI model keys are encrypted at rest.

No model training on your data

AI providers process data under business API terms and signed data processing agreements. Client data is never used to train AI models.

Sensitive details redacted

Turn on PII redaction and recordings leave out details such as dates of birth and account numbers.

03

Access control

The firm decides who sees what, and idle sessions close on their own.

Roles for your team

Admins, members and support agents each see only what their role allows.

Access per agent

Assign members to specific agents; support agents see only their own chat inbox.

Automatic sign-out

Sessions end after 30 minutes idle, and signing out in one tab signs you out of all of them.

Firm-owned records

Recordings, transcripts and intake records live in the firm's dashboard, and go only where the firm sends them: its CRM, calendar and attorneys.

04

Data lifecycle & control

Every conversation is recorded for the firm, kept as long as the firm decides, and erasable from the dashboard.

Full records for the firm

Every call has a recording, transcript and summary; every chat is logged, all in the firm's dashboard.

Retention controls

Set how long conversations and records are kept, with automated purge.

Legal hold

Flag an individual intake record to exclude it from purges.

Export and erase

Export or permanently erase a conversation, or erase an entire agent, from the dashboard.

Delete your account

Deleting your account removes it at once and permanently purges its data after a 7-day grace period.

05

Reliability and consistency

One configuration for phone and chat, and a backup AI provider for web chat.

Published together

Chat and voice go live from one configuration, so the phone agent and the web agent never disagree.

Backup AI provider

Web chat switches to a second AI provider automatically if the first has an outage. The phone agent can be moved to a backup model by our team.

Common questions

Yes. The agent identifies itself as an automated assistant and says the call may be recorded in its opening line, as part of the default greeting.

No. The guardrails are locked: the agent never gives legal advice, quotes fees, or comments on case merit, and that can't be switched off.

Recordings, transcripts and summaries live in the firm's dashboard. Your admins decide which members and support agents can see them, by role and by agent.

Yes. Turn on PII redaction and recordings omit personal details such as dates of birth and account numbers. Transcripts, summaries and intake records stay in the firm's dashboard.

Each agent has its own retention period. Records are purged automatically once it passes, unless an intake record is placed on legal hold.

Yes. You can erase individual conversations or an entire agent from the dashboard, or delete your account. Account deletion takes effect immediately, and the data is permanently purged after a 7-day grace period.

No. AI providers process data under business API terms and signed data processing agreements, and client data is never used to train AI models.

Questions about security?

Talk to us about how Basalix handles your firm's data, or try it yourself on a free trial.

14-day free trial. No credit card, nothing auto-charges.