Security & Privacy

Your case file is yours. We just protect it.

Prepared Parent stores some of the most sensitive material in your life — court filings, communications with the other party, private notes about your children. We designed the system from day one to treat that data the way a good attorney treats a privileged file.

This page is maintained by the Prepared Parent team to answer common security and privacy questions. It is not a certification.

Encryption

At rest
All documents, notes, and case data are encrypted at rest using AES-256 managed by our infrastructure provider.
In transit
Every request between your browser, our servers, and our AI models is protected with TLS 1.3.
Document storage
Uploaded files live in an access-controlled private bucket. URLs are short-lived and scoped to your account.

Access & isolation

Row-level security
Every table that stores your data enforces row-level policies at the database. You can only ever read your own case file. Even a broken server-side query cannot cross that line.
Authentication
Sign-in is handled by an authenticated identity provider with hashed credentials, session rotation, and optional social sign-in.
Break-glass access
A small group of admins can help with support, but sensitive data is gated behind an audited break-glass grant with a required reason, an expiry, and a full audit trail. Nothing quiet.

AI privacy

Your documents don't train public models
Prepared Parent uses AI providers under agreements that forbid using your content for model training. Your case is not a training example.
Grounded, not guessed
The AI answers from your uploaded documents with citations back to the source, so you can see exactly what it relied on.
Human oversight
Low-confidence extractions go into a review queue. You are always the final decision-maker about what enters your official record.

Your data, your control

Export anytime
You can export your case file — timeline, evidence, expenses, notes — at any time from your account settings.
Delete anytime
Delete individual items or your entire account. Deletion removes your data from active systems; short-lived backups are purged on our standard retention cycle.
No ad tracking, no data sales
We don't run advertising trackers, we don't sell your data, and we don't share your case with anyone you didn't invite.

Operations

Monitored infrastructure
Hosted on modern, SOC 2-audited cloud infrastructure with continuous security monitoring, dependency scanning, and automated vulnerability checks on every deploy.
Least-privilege engineering
Engineers access production only through audited, time-boxed sessions. Secrets are stored in a managed vault — not in code, not in email.
Report a vulnerability
Found something we should know about? Email security@preparedparent.ai. We respond within one business day.

Questions before you upload?

Email support@preparedparent.ai — a real human on our team will answer.