Real support, right when you need it

Attorney-client privilege is foundational to justice, and we've built 8am IQ with multiple layers of protection. Your data is encrypted both in transit (using TLS 1.2 or greater) and at rest (using AES-256). We work with SOC2-compliant infrastructure, and your confidential information is never shared with other customers or used to train AI models. Most importantly, you control what data is sent to 8am IQ. Nothing is processed unless you explicitly click the 8am IQ button for each task.

No. Your data will never be used to train third-party AI models like OpenAI. Based on our agreement with OpenAI, customer data is not used to train their models.

We may use inputs and outputs to improve 8am IQ features (for example, to make document summaries more accurate or text editing more helpful), but we do this in accordance with our Privacy Policy and always within the same strict security standards that protect all your data. Your confidential case information stays confidential, and you maintain control over what data you choose to process with 8am IQ.

Absolutely. We built 8am IQ around a core principle: AI doesn't hit send. Every output generated by 8am IQ is provided for your review, editing, and approval before any action is taken. Whether it's a document summary, edited text, or insights from the Case Assistant, you always have the final say on what gets used, modified, or discarded.

This approach directly supports your ethical obligations as a legal professional. You remain responsible for all work products, client communications, and professional decisions. 8am IQ serves as your assistant by streamlining routine tasks and surfacing insights, but your judgment, discretion, and accountability stay exactly where they belong: with you. The AI provides recommendations; you make the decisions.

Law firms should ask AI vendors these critical questions:

1. Model training: Will our client data be used to train AI models?

2. Data retention: How long is our data stored, and when is it permanently deleted?

3. Encryption: Is data encrypted both in transit and at rest?

4. Compliance: Does the provider maintain SOC2, ISO 27001, or similar certifications?

5. Data control: Do we control what information gets processed by AI?

6. Breach notification: What happens if there's a security incident?

Look for vendors that provide contractual guarantees (not just verbal assurances), maintain recognized security certifications, and give you complete control over what data is processed.

8am IQ meets these standards with SOC2-compliant infrastructure, encryption in transit (TLS 1.2+) and at rest (AES-256), contractual guarantees that your data won't train AI models, 30-day maximum data retention, and user-controlled data processing. Learn more in our Privacy Policy.

"Human in the loop" means a legal professional reviews and approves all AI-generated content before it's used. The AI assists, but humans make the final decisions.

This is critical for legal practice because you're ethically responsible for all work product, AI can make mistakes, and legal work requires professional judgment that AI cannot replicate. This contrasts with fully automated systems that send emails or file documents without human approval.

At 8am, we follow the "done for review" principle. Our AI provides summaries, suggestions, and insights, but you always decide whether to use, edit, or discard the output. This ensures AI enhances your work without compromising your professional judgment or ethical responsibilities.

Yes. 8am IQ is built on SOC2-compliant infrastructure through our partnership with OpenAI. SOC2 is an auditing standard that verifies a service provider has appropriate controls to protect customer data, covering security, availability, confidentiality, and privacy.

The 8am platform also maintains PCI compliance for payment processing and follows strict security protocols, including encryption (TLS 1.2+ in transit, AES-256 at rest), access controls, and continuous monitoring.

These certifications represent ongoing commitments to independent security audits and vulnerability assessments. Combined with our contractual guarantees around data usage and retention, they ensure 8am IQ meets the security requirements that legal professionals need to protect client confidentiality and attorney-client privilege.

For detailed information, review our Privacy Policy.