Law firms trust Truly with their clients’ first, most personal conversations. This page explains how we protect them.
Hosted on Google Cloud, in the United States
Truly runs on Google Cloud in the United States. Application servers, file storage and our AI and speech processing all run there. Credentials and keys are kept in Google Secret Manager, not in code.
Your data stays in the United States
Interview recordings, transcripts, documents and our database are all stored in the United States. Your clients’ information is never used to train AI models, by Truly or by Google.
Deleted means deleted
When a firm closes its account, we delete all of its data within 30 days: users, cases, recordings, transcripts and documents.
No passwords to steal
Nobody uses a password in Truly.
- Firm staff sign in with Google or with a one-time code sent to their email or phone.
- Clients sign in with a secure link from their invitation or a one-time code by email, text or WhatsApp.
- Codes are six digits, work once and expire after 10 minutes. We store only a scrambled (hashed) version.
- Five wrong codes lock that email or phone for five minutes. Rate limits stop repeated attempts.
Sessions that close themselves
Sessions sign out after 15 minutes of inactivity, so an unattended phone or laptop doesn’t leave a client file open. Interview links expire seven days after the scheduled time, and as soon as the interview is complete.
The right people see the right things
Each firm’s data is kept separate from every other firm’s. Within a firm, admins assign roles (admin, manager, interviewer or viewer) that control who can schedule interviews, see cases, change settings or manage billing. Clients see only their own interviews and documents.
A record of activity
Every sign-in attempt, successful or not, is recorded. When firm staff correct a client’s answer, the change is marked as a staff edit, so it’s always clear who said what.
Clients confirm their own answers
When an interview ends, the client can review the transcript, correct their answers and approve it before the firm relies on it.
Payments handled by Stripe
Billing runs through Stripe. Truly never receives or stores full card or bank account numbers.
AI with guardrails
Each interview opens with a disclaimer the firm controls and closes with a script the firm writes. Truly gathers facts. It never gives legal advice, and attorneys review everything.
Report a concern
If you believe you’ve found a security issue, email info@truly.law. We’ll respond promptly.