DemandWrite runs on Cloudflare Workers with a private D1 database and a private R2 bucket. Every record and file is scoped to your firm; files are served only through authenticated routes.
- Passwords are hashed with PBKDF2-SHA256 (100,000 iterations, per-user salt). Sessions are HttpOnly, signed cookies.
- Documents go to the model once, over TLS, to produce the extraction; they are not used to train anything.
- Case documents are deleted automatically 90 days after the letter is downloaded. Letters, extractions and your style sheet are kept.
- Every upload, view, extraction, letter and download is written to an audit log. Logs never contain document text, letter text or client names.
- Payments are handled by Stripe; card numbers never touch our servers.
Business Associate Agreement
A BAA is available on request for firms that need one. Write to the address on your billing page.
Back