Security and privacy
Where firm data lives and who processes it.
Where your data lives
Casehand runs on Cloudflare. Records are kept in a Cloudflare D1 database, and notice files are kept in Cloudflare R2 object storage. AI reading of notices runs on Cloudflare Workers AI.
AI and your data
Casehand does not use firm or client data to train AI models.
Reading runs on Cloudflare Workers AI, which does not train on customer inputs. An AI model reads every field. A second model rereads the receipt number, A-number and dates without seeing the first answer, and a pattern reader with no AI reads them again. Each field shows its confidence and source text.
AI reads the notice and proposes values. It never sets a deadline. Dates come from a deterministic rules engine with the citation shown, and nothing is docketed until a person verifies and approves it. Hard deadlines get attorney sign-off, with two-person docketing on by default.
Encryption
- In transit: all traffic to Casehand uses TLS.
- At rest: documents and records are encrypted where Cloudflare stores them.
Audit log
Casehand keeps an append-only audit log of views, edits, approvals, overrides and exports, with CSV export, so the firm can show who reviewed what. Access is set by role: clerk, paralegal, attorney or admin.
Subprocessors
These are the companies that process customer data on our behalf. Current as of 5 October 2026. Planned subprocessors, which receive no data yet, are on the subprocessors page.
| Company | What it does for Casehand | Data it handles |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, file storage and AI inference | All customer data, including notice files and extracted fields |
| No others. | ||
Government requests
Many of our customers' clients are in removal proceedings, so this is our policy for government requests for their data:
- If a government agency asks us for customer data, we notify the firm unless we are legally prohibited from doing so.
- We challenge requests that are overbroad.
Reporting a vulnerability
If you find a security issue, report it on our contact page under "Report a security issue". Please give us a chance to fix the issue before you share it publicly.
What Casehand is not
Casehand is a tool your firm supervises. It is not a law firm and does not give legal advice, and final responsibility for deadlines stays with the supervising attorney.