Your data stays yours. Your lawyers stay in charge.
Every control on this page is built into the software and the database, so protection never depends on someone remembering a policy.
A record nobody can edit
Every decision is written to a chained audit trail. Change or remove an earlier entry and verification fails, and the database refuses the edit in the first place.
Read more- Each entry is linked to the one before it
- Verification can be run at any time
- Edits and deletes are refused by the database
Documents that stay as filed
Originals are stored exactly as received, with a cryptographic fingerprint. Stored content cannot be edited or deleted, and every download is logged and checked.
- SHA-256 fingerprint on every file
- New versions sit beside the old
- A log of who opened what, and when
Client money, kept apart
Each matter has its own double-entry ledger. An unbalanced entry, or any mixing of trust and operating money, is rejected outright. Payments need a second person to approve.
- The requester cannot approve
- The approver cannot release
- Reconciliation against the bank statement
Rules you can trace
Every legal rule is versioned with its source, provision and a named reviewer. Matters keep the version that applied at the time, and AI cannot change a rule.
Read more- Effective-dated to the day
- Approved by a legal administrator
- Earlier versions are never overwritten
Access by role
Staff, finance, compliance and legal administration each have their own permissions. Clients see only their own matters, and only documents approved for them or uploaded by them.
- Every practice in its own separate workspace
- Concern reports limited to named roles
- Sign-in throttling and one-time codes for signing
What AI is never allowed to do
Every agent is blocked from these acts, whatever it is asked. An agent can suggest. Only a professional or an institution can act.
Read more- Execute deed
- Approve legal finding
- Approve credit
- Alter bank instruction
- Release trust funds
- Approve own financial action
- Submit to registry
- Send registry response
- Issue approval certificate
- Alter statutory rule
- Grant permission
- Alter executed instrument
Your data, your control
Information is hosted in Ireland, isolated per practice, and never used to train AI models.
- Encryption in transit between your devices and THEMIS
- Export your content at any time, and for 30 days after you leave
- A named list of sub-processors on request, with notice before any change
- Written data processing terms with every practice
Scope and certification
THEMIS supports licensed professionals and does not give legal advice. It has not yet completed an independent certification such as SOC 2 or ISO 27001. Registry, revenue authority, Land Board and lender steps are managed in THEMIS as tracked tasks with their evidence attached. To discuss your own security requirements, contact us, or report a vulnerability under our disclosure policy.
Controls you can check, not promises.
Row-level isolation, an append-only audit trail and human approval are enforced in the software and the database.
Security questions
Is our data used to train AI models?+
No. Your content is never used to train AI models. Only the text needed for a request is sent to an AI provider to produce the answer, and every request is logged.
Where is our data hosted?+
In Ireland, in your practice's own isolated workspace. Other practices cannot see it.
Is data encrypted?+
Yes, in transit between your devices and THEMIS. Stored originals are fingerprinted so any change is detected.
Can we take our data with us?+
Yes. You can export your content at any time and for 30 days after your subscription ends.
Can the AI act without us?+
No. Agents return suggestions only, and a fixed list of acts is reserved to authorised people.
Does THEMIS hold a security certification?+
Not yet. An independent certification such as SOC 2 or ISO 27001 is on our roadmap, and we will say so plainly when one is held.
Want to see the controls working?
We will show you the audit trail, the approvals and the access model on a live matter.