Encrypted connections.
HTTPS protects data travelling between your browser and our service.
Security and privacyYour evidence.
Your evidence.
Handled with care.
Understand how LegallyHeard stores, protects and processes your information, who may have access and the choices available to you.
Your private workspace
Case hosting Germany · EUEncrypted connection HTTPS / TLS
How we handle your informationKnow what happens
Know what happens
to your information.
Your files are kept in a private case workspace, with access checked against your signed in account. Authorised staff may access relevant information to operate the service or prepare and check agreed work.
Private workspace
Account access checks
Case information is stored outside the public website directory on our Hetzner server in Germany. The standard rules based message overview runs on that server.
Access and providers
Access for specific purposes
Authorised staff may operate the service or prepare and check agreed work. Supporting providers process information for services such as payments, email and separately authorised AI processing.
Your choices
Review, download and manage
Manage case items, download your records and request account deletion through Account settings. Legal obligations, recovery copies and previously shared documents can affect what can be removed and when.
Your evidence and model training.
We do not use customer evidence to train our own models, sell it or share it for advertising. Optional external processing has its own provider terms, explained before you authorise it. Read our processing information and retention information.
In place today
Protection you can understand.
Access tied to your account.
Case ownership checks, password hashing and login rate limits protect account access. New accounts must verify their email.
SHA-256 integrity checks.
Accepted message imports and evidence vault files receive a digital fingerprint for comparison with the file we received. It does not certify earlier history or authorship.
When other processing is used
Clear about when your information goes elsewhere.
The standard message overview runs on our server without sending chat content to an AI provider. Optional processing needs a separate decision.
Deep Fact Finding Review
A separately scoped, supervised service. We explain the question, evidence, provider, data involved, price and privacy terms before asking for explicit authorisation. Requesting a quote does not send messages to an AI provider or incur a charge.
Recording transcription
Uploading a recording does not send it for external transcription. You authorise each recording separately after seeing the provider and processing information. The current service uses OpenAI to create draft text that you check against the original recording.
Public website assistant
The optional help assistant may send the question you type to OpenAI to select reviewed guidance. It does not automatically read your case. Do not enter confidential information into the public assistant.
Security & privacy FAQYour questions.
Your questions.
Answered.
How your information is protected, processed and handled in plain English.
Who can access my case information?
Access is checked against your signed in account. Authorised staff may access relevant information to operate the service or prepare and check agreed work. Supporting providers process information for specific services, as explained in our processing information.
Where is my case information stored?
LegallyHeard is operated by Legally Heard Limited, registered in England and Wales. Our case workspace is hosted by Hetzner in Germany, within the European Union. Case files are stored outside the public website directory, with account access checks. Supporting providers handle payments, email and AI processing. Explore how your information is handled.
How is my account and information protected?
Password hashing, login attempt limits and case ownership checks protect account access. New accounts verify their email before private access. Authorised staff have access where needed to operate the service or prepare and check agreed work.
What assurance covers the hosting provider?
Hetzner holds ISO/IEC 27001:2022 certification for its hosting services and data centres, valid until 26 September 2028. View the provider certificate.
Hetzner also publishes a BSI C5:2020 Type 2 attestation summary. Its listed services and report scope define the coverage. View Hetzner’s C5 summary.
These credentials cover the hosting provider. They do not certify the LegallyHeard application.
What do evidence fingerprints do?
SHA-256 creates a digital fingerprint of an accepted message import or evidence vault file. Comparing it with a later copy helps establish whether the file’s contents match the file received. This does not prove who wrote it, whether it was altered before upload, or whether a court will accept it.
How does AI processing work?
The standard message overview runs on our server. Optional deep review uses the provider and scope you agree with us.
AI transcription converts recordings into draft text for you to check. Upload alone does not send a recording for external transcription. You authorise each recording separately after seeing the provider and processing information. Our processing information identifies the current arrangements and explains how information is shared.
Can my case information ever be disclosed to someone else?
Case files are private, but lawful court orders and other legal obligations can require disclosure. We assess the authority and scope of a request before sharing information. Read about requests for information.
How long is my information kept, and can I delete it?
You can manage case items, download your records and request account deletion through Account settings. Some information may need to be retained for legal or accounting obligations. Account deletion does not remove copies you have already downloaded or shared. Our privacy policy explains your data rights, retention and how to contact us about a specific request.
What privacy choices do I have?
You can manage case items, download your records and request account deletion through Account settings. You choose whether to authorise optional AI processing. Optional public website analytics are controlled through Privacy choices. Our Privacy Policy explains your data rights, retention and how to contact us about a specific request.
Read the commitments
The detail, in one place.
01Privacy policyData, access and retention02Terms of serviceUsing LegallyHeard03Cookie policyBrowser storage explained
Questions before you share?
Tell us what you need to know.