Confidentiality Addendum

1. Client information

“Client information” is everything about your clients, prospective clients, and their matters that reaches us through your employees: what callers say, texts and email, intake answers, documents, what is on an employee’s screen in your practice system, and the notes it keeps. It stays yours and your clients’.

2. What we do with it, and what we never do

We use client information only to do the work you hire your employees for, as you direct by your word to them. We do not train models on it, we do not sell it, and we do not use it for marketing or for any other customer. We send it only to the subcontractors that run the service, each bound in writing to confidentiality and forbidden to train on it; they are listed at sup.ai/subprocessors.

Our own people do not read your employee’s record. When you ask support for help that needs it, access is granted for that request, for a stated time, and is recorded where you can read it.

3. Privilege

Your employee works as your agent, under your direction, to help you give legal advice. Neither of us intends anything that reaches us this way to waive the attorney-client privilege, work-product protection, or any duty of confidentiality you owe, and we will assert none of those as our own. If anyone demands client information from us, we tell you first, unless the law forbids it, so you can object, and we disclose no more than the law compels.

4. Safeguards and incidents

Recordings, transcripts, screenshots, and files are kept in private storage, encrypted in transit and at rest, and every link to one is signed and short-lived. Each employee has a computer of its own, shared with no other business. Your employee keeps a record of who looked at what, which you can read under Account, Data.

If client information is used or disclosed in a way this addendum does not allow, we tell you without unreasonable delay and no later than 10 days after we discover it, with what happened, when, what was involved as far as we know, and what we have done about it.

5. Your part

You decide what your employees may be told and may do, and you remain responsible for supervising their work as you would a nonlawyer assistant’s. Where your rules of professional conduct call for a client’s informed consent to the use of an AI tool (ABA Formal Opinion 512), getting it is yours; your employee asks you on its first day how you want that handled, and follows what you say.

6. How long, and what happens after

This addendum lasts as long as you have an employee with us and until all client information is returned or destroyed. When it ends, or when you let an employee go, we keep your records read-only for thirty days with an export of transcripts, recordings, and notes, then destroy them, including the employee’s computer, or sooner when you say so. Backups age out within the window shown at sup.ai/subprocessors. Anything you ask us to hold for a legal matter is held until you lift the hold. Sections 2 to 4 survive for as long as we hold any client information.

Questions: support@sup.ai.