Security & Trust

Supreme Mind is built for privileged legal work. Matter content is handled as confidential material end to end: where the model runs, where data is stored, and what is ever written to a log. This page summarizes our security posture in plain terms; it is consistent with, and governed by, our Privacy Policy and Terms of Service.

Accounts & access

• Passwordless sign-in. Access uses a magic link sent to your work email and is tied to a named individual, so there is no password to phish, reuse, or manage. An optional per-user access code is available as a fallback.
• Firm accounts and administration. Firms get a firm-admin role with self-service team management to add, remove, and manage users. Sessions work across multiple devices.
• Per-matter access. A matter can be open to the whole firm or restricted to named people, and each document carries a confidentiality designation that is enforced on every path that reads it.
• Single sign-on. SSO through your firm’s identity provider is available by agreement with your firm.

How the model runs

• Server-side only. The super intelligence (SI) model runs server-side. The browser never holds an API key.
• US-pinned inference, with no retention. Model calls go to Anthropic’s API under a zero data retention agreement, with inference pinned to the US. Prompts and completions are not stored after the response is returned and are not used to train any model. Amazon Bedrock, in our own Amazon Web Services account in US regions, is held as a backup route on the same no-retention terms, with model-invocation logging off. This is how the service is configured, not a setting a user can turn off.
• No model training, ours or anyone else’s. Your matter content is not used to train any model, including foundation models and our own.

Where your data lives

• Per-firm isolation, US region. Firm matter content (matters, generated briefs, and grounding results) is stored in a US-region PostgreSQL database with per-firm isolation.
• US-region document store. Uploaded documents are stored in a US-region file store, and serverless compute is pinned to a US region.
• Encrypted in transit and at rest. Every connection to the application and to the model runs over TLS. The database and the document store encrypt at rest under our infrastructure providers’ managed keys; we do not operate our own key management, and we do not offer customer-managed keys.

Who else touches it

Ten subprocessors, named individually rather than described as a category, in section 4 of the Privacy Policy. Five can touch matter content: Anthropic for model processing, Amazon Web Services as the backup model route through Amazon Bedrock, Vercel for hosting and serverless compute, Neon for the database, and Resend for sign-in emails and replies to feedback or requests you send us. One carries only what you choose to write to us: Slack, which delivers our internal alerts (a new signup, and the text of feedback or a product request you send from the application) and messages from this marketing site, but never documents or case facts. Four cannot: Stripe, which takes card details directly so they never reach our servers; Formspree, which delivers demo requests from this marketing site; Cloudflare, which delivers and protects this marketing site, while the application does not run through it; and Google Analytics, which counts visits on this marketing site and, inside the application, records three events with no content in them (a signup, a new matter, a purchase) and no page views. We will give you at least 30 days’ notice before adding a subprocessor that would process matter content. Under a pilot or annual agreement you can object, and if we cannot resolve the objection you can end the agreement with a pro-rata refund.

This website runs no advertising pixels and no session recording. It counts visits with Google Analytics, with advertising features off; visitors in a European time zone are asked first, and browsers with Do Not Track or Global Privacy Control switched on are not counted. Searches in the expert library are recorded with the IP address and a visitor ID kept in the browser, after asking visitors in a European time zone; the detail is in the Privacy Policy.

Certifications

SOC 2 Type II is in progress. It is not finished, and we would rather say so here than let you discover it in a questionnaire. We are not ISO 27001 certified and have not commissioned a third-party penetration test. If your firm requires either before a pilot, tell us and we will give you a date rather than an assurance.

What exists today is architectural rather than certified: the model runs under a zero data retention agreement with Anthropic, so nothing is retained and nothing is trained on, matter content never enters a log, storage is per-firm, and a deletion is a real deletion. Those are checkable now, and the model posture is checkable against Anthropic’s own published terms rather than against ours. A certification is somebody else checking them, and that is underway.

If something goes wrong

We will notify affected firms without undue delay, and within 72 hours of confirming a breach of security leading to unauthorised access to matter content, with what we know, what we do not yet know, and what we are doing. Supreme Mind is one person today, so that notice comes from a named individual rather than a status page.

Logging & audit

• Metadata-only audit records. Each model call writes a metadata-only audit record (who, when, which task, which model and region). Privileged content is never written to these logs.
• Document access log. Every read of a stored document is recorded, including attempts that were refused: who, which document, which action, and when. The log is append-only, and a firm can export it as a CSV for a matter or for the whole firm.

Retention & deletion

• 30-day deletion. Deleting a matter hides it immediately and permanently deletes it (database rows and stored documents) after a 30-day recovery window. Individual documents delete immediately.
• Demo sessions stay local. Demo-session data lives only in your browser and is not stored on our servers.

If Supreme Mind stops operating

Supreme Mind is a young company with one founder, so a firm is right to ask what happens to its matters if the company stops. Our commitment:

• 60 days’ notice. We will tell every account holder by email at least 60 days before the service shuts down.
• Your work comes back to you. During those 60 days every brief stays downloadable as a Word document, and on request we send each firm an export of its matters, generated briefs and uploaded documents.
• Then it is deleted. Within 30 days after shutdown we delete all matter content, including stored documents, and confirm the deletion in writing to any firm that asks.
• A sale does not change the terms. If the company or the service is acquired, the confidentiality, no-training and deletion commitments on this page continue to apply to matters already in the service, or you receive the same notice and export first.

Pilots & enterprise

A pilot or annual agreement comes with a signed data processing addendum (DPA). It records the commitments on this page as contract terms: zero data retention with Anthropic and the Bedrock backup route, no training, metadata-only logs, US regions, the named subprocessors and 30 days’ notice of any new one, breach notice within 72 hours, notice of any subpoena for your content so that you can assert privilege, deletion and export at the end, and the continuity commitment above. It also includes the service-provider terms California privacy law requires, and security questionnaires and audit rights. Single sign-on is available by agreement with your firm. The agreements themselves are described on the pilot page.

Contact

Security questions: richard@suprememind.ai. For how we handle personal information and matter content, see the Privacy Policy. If you are evaluating a pilot, that page sets out how an engagement is structured, including the data processing and zero-retention addenda available with one.

This page is provided for general information and does not constitute legal advice. Where this summary and the Privacy Policy differ, the Privacy Policy controls.