In plain English.
Your firm gets its own subdomain and its own isolated data scope. Tenant filtering is enforced on every read and write, so one firm's queries never reach another firm's records.
Documents and database are encrypted at rest. Connections from your browser to AureumCore use HTTPS.
Every soft-delete, restore, login, document download, and permission change writes a row to the audit log with user, IP, and timestamp. Org admins can search it.
Admin, manager, viewer, finance admin. Client portal users come in admin, member, or finance flavors. The bookkeeper sees billing without ever seeing matters.
Our legal-tuned model runs on our own GPU cluster. AI features don't send your matters to third-party AI providers such as OpenAI or Anthropic, and nothing about your work is used to train any model. The service providers we do use are listed in our privacy policy.
Our staff have no standing access to your workspace. To help with a support request, an authorized person signs in as one of your users for that session only, with a recorded reason, and the session is logged with who did it and when.
Two-factor authentication is available for every user. For password sign-in it is required by default for firm admins and finance admins, and a firm can require it for everyone.
Firm staff can also sign in with their Microsoft work or school account where Microsoft sign-in is enabled. Password sign-in stays available. A Microsoft sign-in is accepted in place of an AureumCore code, so whether a second factor is asked for then depends on your firm's Microsoft settings. Microsoft sign-in doesn't create accounts or change roles, and it is separate from SAML single sign-on.
We're a young company. We're not going to claim certifications we haven't earned. Here's where we are today:
Question we haven't answered? Ask us.