Security

Where your documents go, and what never leaves your network.

The data path in plain English, as delivered to firms at launch. At launch, Chainlocker runs on an appliance in your office, behind your firewall, and the AI runs on a Chainlocker device delivered alongside it. Your documents never leave your network.

The data path

  1. Reviewers open Chainlocker in a browserOn your office network, or through your firm's own VPN. Nothing is installed on their computers.
  2. Documents go onto the applianceReviewers upload copies, or the appliance reads a shared folder read-only. Original files stay where your firm keeps them, untouched.
  3. Text is extracted on the applianceWord, Excel, email and text-based PDFs are read on the appliance itself.
  4. Scans are read and documents tagged on siteScanned PDFs and images go to the Chainlocker AI device in your office for OCR. The same device tags each document and returns the result to the appliance.
  5. A person confirms every verdictAccept, or correct with the right tag. Decisions stay on the appliance and are not used to train models anywhere else.
  6. You export the workAn Excel index and a self-contained package with an HTML viewer that opens with no network. It goes wherever you take it.

What stays, and what leaves

Never leaves your network

  • Original files
  • Uploaded copies
  • Extracted text and file names
  • Scanned PDFs and images
  • Your criteria: tags and instructions
  • Tags and confidence scores
  • Review decisions and corrections
  • The review database

Leaves your network, with no document content

  • Software updates, which we deliver
  • Support sessions, only to apply updates and check health
  • Health checks
  • Coordination for the encrypted connection those use

The application loads no scripts, fonts or other files from the public internet.

Who can reach the appliance

Your staff
From a browser on your office network or your firm's VPN. Your IT decides which machines can reach the appliance, and we confirm the arrangement with them at install.
Our support team
Only over an encrypted connection the appliance opens to us, and only to apply updates and check its health. That work never needs your documents. Your IT can disconnect it at any time; processing and review carry on.
Anyone else
No Chainlocker cloud holds your documents, and no third-party AI service ever receives them.

What we do not claim

Not air-gapped
The appliance needs outbound internet access for updates, support and health checks. If the internet drops, processing and review carry on, and those wait until it is back.
Your questionnaire
We are glad to answer your firm's security questionnaire and walk your IT through the setup.
Your terms, on request
We will review your firm's standard confidentiality or data-processing terms. End-of-service steps, including data return and erasure, are set out in your agreement with us.