Professional Services & Data Processing Agreement

1. Who this applies to

This agreement applies to accounts identifying as a legal professional or organization. Professional access is granted only after verification of your credentials, which is reviewed by a human (human-in-the-loop). Certain features remain curated and supervised initially.

2. Roles — controller and processor

For personal information about your clients and their matters, you (or your firm) act as the enterprise responsible (controller). Judge 9-11 acts as a service provider (processor) that processes that information solely on your documented instructions to provide the platform, except where law requires otherwise.

3. Solicitor-client privilege & professional secrecy

We design our systems to preserve solicitor-client privilege and professional secrecy. Storing privileged material on Judge 9-11 is not intended to, and does not, waive any privilege. We act as a custodian, not a recipient of a waiver, and we do not access matter contents except as necessary to operate the service, resolve a technical issue, comply with law, or at your instruction.

4. Data hosting & residency

Matter data and documents are hosted in American regions. Sub-processors that handle this data are bound by contract to equivalent confidentiality and security obligations and may use it only to provide their service to us. We assess adequate protection before any transfer outside your state.

5. Security & document protection

We protect your matters with encryption in transit and at rest, role-based and row-level access controls, least-privilege access, audit logging, and SHA-256 integrity hashing of evidence. Documents are version-controlled with a full chain of custody so the evidentiary record is preserved.

6. Confidentiality incidents

We maintain a register of confidentiality incidents and will notify you without undue delay of any incident affecting your matters, with the information you need to meet your own notification obligations under state privacy laws (incl. CCPA/CPRA) and your professional rules.

7. Your professional responsibility

You remain solely responsible for your professional obligations, for supervising any AI-assisted output (which is a draft, not advice), for conflicts checking, for client consent to cloud processing where required, and for compliance with the rules of your bar, chamber, or order. You must not use the platform to facilitate the unauthorized practice of law.

8. Sub-processing & audit

We will keep an up-to-date list of sub-processors available on request and impose data-protection terms on each. On reasonable request, we will provide the information needed for you to assess our processing, consistent with the security of other clients' data.

9. Return & deletion (onboarding / deboarding)

On termination or at your request (deboarding), you may export your matters and documents for a reasonable period, after which we delete or irreversibly anonymize them, subject to legal retention requirements. Onboarding and deboarding steps, and verification of identity, are designed to maintain a clear, auditable custody trail.

10. Relationship to other terms & governing law

This agreement supplements the Terms of Service, Privacy Policy, and Confidentiality & Non-Disclosure Undertaking; in case of conflict for professional accounts, the more protective provision for client data prevails. It is governed by the laws of your state and the applicable federal laws of the United States. Pursuant to Loi 96, the English version prevails.

• Terms of Service
• Privacy Policy
• Confidentiality & Non-Disclosure Undertaking