Your files are encrypted on your computer before upload and are only ever opened in memory during your review.
Security
Built so that we hold none of your clients' files.
Encrypted on your computer, opened only in memory, deleted when the review ends.
What happens to a file
As the app says before every review.
They are deleted when the review ends and cannot be recovered.
Names, passport numbers, and other identifiers are removed or replaced before AI analysis.
AI analysis of the remaining text is processed in AWS data centres in the United States or Canada and is not retained or used for training.
Saved reports are encrypted so that only your firm can read them.
Nothing in a document can steer the review. Hidden text is reported as a finding.
What we keep, and what we cannot read
| What | Kept? | Who can read it |
|---|---|---|
| Client documents | No, deleted when the review ends | Nobody |
| Report, letter, notes, and labels | If you save, encrypted with your firm's key | Your firm only |
| Your firm's account | Members, roles, licence numbers | Us, to run the service |
| Billing | Plan, billing contact, review counts | Us and our payment provider |
| Logs and usage | Counts, durations, codes | Us. Never a document's text, a name, or an identifier |
How the encryption works
The browser's own Web Crypto API, and no cryptography of our own.
Files for a review
- A new AES-256-GCM key for each review seals the files before upload
- The key goes to the review service over TLS, for that review only
- Opened in memory by a process for that review alone, never written to disk
Saved reports
- Each report has its own AES-256-GCM key, wrapped with your firm's key
- The firm's key is wrapped for each member's RSA-OAEP (3072-bit) key, made on their computer
- Members unlock with a passkey, a passphrase (PBKDF2-SHA256, 600,000 rounds), or a recovery code. Our servers never see an unwrapped key
If everyone in a firm loses every way to unlock, nobody can open its saved reports, not even us. Keep your recovery code.
Where it runs, and who gets in
Where it runs
On Amazon Web Services: the service and its storage in Canada, the AI step on Amazon Bedrock in the United States or Canada, on text alone.
Signing in
A passkey, or a password and an authenticator code. A session stays in one tab and locks after a time your firm sets.
Our own access
Our support screens show accounts, plans, and counts, never a report, document, letter, or label. Every action is logged.
What has and has not been checked
Independent review
An outside review of the encryption and a penetration test are not done yet. Their summaries will be here.
Report a vulnerability
Write to security@final-ink.com , with no client's information. We answer within one business day.
Give your next file one more careful read.
The first 10 licensed firms get 20 free reviews a month, then half price for a year.
Rather talk first? Call +1 437 972 1052 or WhatsApp us.