What happens to a filing.

Your browser uploads each document straight to temporary storage, private to this application. The run reads it into memory and deletes it in the same step, and no model is called until that delete has returned. The delete also runs when reading fails. A daily sweep removes any upload whose run never started, such as a tab closed mid-upload.

Analysis runs on Anthropic’s Claude models through Anthropic’s API. The text sent is your brief with the declarations filed behind it, the papers it answers, any earlier briefing or prior version you added, the pages of an exhibit your brief actually cites, any standing orders you uploaded, the court rules that apply, and, for each citation, the sentence that cites it with the text of the authority. Anthropic does not train on it and keeps it only under its standard commercial policy. Zero data retention is an Anthropic account setting and is not turned on for this account today.

CourtListener, the Free Law Project’s public case-law database, receives the case citations, and the party names and year when a citation does not match. California statutes are read from a copy of the Legislature’s published text kept with the application, so checking them sends nothing anywhere. Nothing else from your filing leaves the application.

Nothing. There is no database and there are no accounts. The report is assembled in your browser, and the PDF is rendered in memory and handed back. Close the tab and the report is gone, so download it first.

One cookie stays on your device. It records that you entered the access code, and holds a signed expiry date, not the code. It is HttpOnly and Secure.

For each run: which stages ran, the filing type, any error, how long it took, token counts and cost. Never the text of the filing, its file name or the parties’ names.

The hosting platform keeps ordinary request logs: the page address, the IP address and the browser. Page views on this site are counted with Vercel Analytics.

The application sits behind a single access code. Sign-in attempts are rate limited. If the code is not configured, everyone is refused.