Jambits, the provider of Cerebra, is committed to the highest standards of data sovereignty. We built Cerebra with a fundamental premise: legal data is privileged, and it belongs solely to you.
This Privacy Policy outlines our specific technical and legal commitments regarding how we handle your Case Files, User Data, and generated Work Product.
2. Data We Collect
We collect only what is necessary to provide our legal intelligence services:
- Account Information: Name, email address, and firm affiliation for authentication.
- Case Files (User Content): Documents you explicitly upload (PDFs, Word documents, emails) for analysis.
- Usage Data: Operational logs required for system performance and security auditing.
Cerebra runs on a dedicated, isolated infrastructure. We do not use shared public models for your private data.
3. Infrastructure & Security
We leverage Amazon Web Services (AWS) US-East regions to ensure enterprise-grade security and availability.
- Encryption at Rest: All Case Files are stored in dedicated S3 buckets encrypted with AES-256 (GCM).
- Encryption in Transit: All data moving between your client and our servers is protected via TLS 1.3.
- Tenant Isolation: We utilize strict logical separation. Data from one workspace (Matter A) is technically inaccessible to another workspace (Matter B), ensuring zero bleed-over between clients or cases.
4. Zero-Retention Policy
Cerebra operates on a "Zero-Retention" philosophy regarding your substantive legal work.
- No Model Training: We do not use your Case Files or Inputs to train our foundational models. Your data never leaves the Cerebra ecosystem to benefit other clients or third parties.
- Immediate Deletion: When you delete a file or close a workspace, the underlying data is cryptographically erased from our AWS storage immediately.
- Ephemeral Processing: Data sent to our inference engine exists in volatile memory only for the duration of the request and is not logged.
5. How We Use Your Data
Your data is used exclusively to:
- Provide the specific analysis or drafting tasks you request.
- Authenticate your access to the platform.
- Comply with legal obligations (e.g., court orders).
We never sell your data, and we do not share your data with third parties for marketing purposes.
6. Your Rights
You maintain full ownership of your data. You have the right to:
- Access: Request a complete export of your workspace data.
- Rectification: Correct any account information.
- Erasure: Request the permanent deletion of your account and all associated data.
7. Contact Us
For questions regarding our security architecture or privacy practices, please contact our Data Protection Officer.