Security
The file stays on your machines.
Makebell never receives it. A model provider never receives it. There is no copy for us to keep, and nothing to train on.
Certified
Inside the firm
Who can open a matter
An administrator sets what each person can do. Work is separated by person, by matter, and by practice. Someone sees a file only if they need it for that work.
A record of every action
The firm can trace who opened a matter, what was asked, and what changed. The log is part of the system, not a report we send later.
No connection out
The deployment can be cut off from the internet. The system can still do the work, because the work does not have to leave the firm to be read.
Nothing is sent on its own
The system drafts and researches. It does not send, file, or change who has access unless a person tells it to. A lawyer reviews the result before anyone relies on it.
Questions a risk team still asks
- Is the PDPO the same as the GDPR?
- No. The PDPO is Hong Kong law. The GDPR applies when EU personal data is involved. A firm can be under one, the other, or both.
- Can we see the ISO 27001 scope?
- Yes. The badge is not the scope. Ask us and we will send the certificate and say what it covers.
- If we stop, what of our files do you still hold?
- None of the client work. It was processed on your machines. We never had a copy to delete.
Send this page to your risk team.
We can walk through the deployment, and send the ISO 27001 scope.