ENCRYPTION AT REST & IN TRANSITNDPA ALIGNEDZERO AI TRAINING ON YOUR DATA

Security is not a feature.
It is the foundation.

Legal work involves the most sensitive professional information that exists. Hubtal is built from the ground up to meet, and exceed, the confidentiality and data protection expectations of modern law firms and in-house legal teams.

  • AES-256 ENCRYPTION
  • SOC 2 (IN PROGRESS)
  • NDPA ALIGNED
  • ZERO AI TRAINING
Professional at work in a modern office with laptop

Data Protection

NDPA-Aligned Data Protection

Hubtal is designed to align with NDPA data protection requirements and responsible data handling practices across all markets where your team operates.

End-to-End Encryption

Client data is encrypted with AES-256 at rest and in transit. Data is isolated per tenant and never shared across customers.

Role-Based Access Controls

Role-based permissions and matter-level access ensure sensitive information is only visible to authorized users. Granular controls let you manage access across practice groups and client matters.

Full Audit Trail

Every action within the platform is logged and traceable. A complete audit trail provides transparency, accountability, and oversight for compliance and governance requirements.

Responsible AI Use

01

No training on client data

Hubtal does not use client documents, contracts, or conversations to train or fine-tune shared AI models, and nothing sent for analysis is retained once the response returns. Your contracts, clauses, and institutional knowledge remain yours.

02

Transparent AI reasoning

All AI-generated outputs include traceable reasoning, so legal professionals can verify conclusions before acting.

LEGAL RESEARCH

Compliance and Governance

SOC 2

Independent SOC 2 audit currently in progress.

NDPA Alignment

Aligned with the Nigeria Data Protection Act, with core data protection principles applied across every market your team operates in.

Data Residency

Additional data residency options are planned for future releases across key markets.

Confidentiality by design

Your contracts, clauses, and institutional knowledge never train shared models. Client data is fully isolated, encrypted at rest and in transit, and never shared across tenants.

Every engagement is governed by a mutual NDA and data processing agreement before any data is shared. Our security practices are continuously reviewed and strengthened to meet the expectations of teams operating in high-trust environments.