Trust Center

Data is encrypted in transit (TLS) and at rest (AES-256 across the database, file storage, and backups). Access is governed by role-based permissions, server-enforced session and idle timeouts, and multi-factor authentication that is strongly recommended for privileged accounts. The platform runs on Amazon Web Services (US, us-east-1) using HIPAA-eligible services within isolated environments.

• Sub-processors

We collect only what is needed to operate the platform, never sell personal information, and support access, correction, and deletion requests. Our Privacy Policy, Cookie Policy, and sub-processor list describe exactly what data we process and who processes it on our behalf.

• Privacy Policy
• Cookie Policy
• Do Not Sell My Information

MedLegal101 operates under Business Associate Agreements (HIPAA) with its infrastructure and AI providers — including AWS and Google Cloud / Vertex AI (BAA signed March 16, 2026) — and signs BAAs with the law firms it serves. Customer data is not used to train AI models. We publish our sub-processors and notify firm administrators at least 30 days before adding a new one.

• Sub-processors & data handling

Live system status, uptime, and incident history are published on our status page, which stays reachable even during an outage when you may be unable to sign in.

• System status

The platform is operated by MEDLEGAL 101, S.A. Our Terms of Service and related policies govern use of the platform.

• Terms of Service
• Service Delivery Policy
• Refund Policy