Who Are the Parties to This Data Processing Agreement?
The parties to this data processing agreement are you, the client law firm, and Liberate IT Consulting LLC d/b/a Aretech. This agreement uses "client data" to mean the data about your own clients that you share with Aretech.
What Client Data Does Aretech Process?
Aretech processes the client data that your workflows handle. Three groups cover it.
- Documents your clients upload or send, such as pay stubs and bank statements for bankruptcy firms or prior-plan documents for estate planning firms
- Intake information from questionnaires, forms, consult recordings, and scans
- Contact and matter records in your CRM or practice-management system
Your build also reads your firm's own templates and naming rules. Document names and drafts follow them. Your firm owns its client data and the workflows Aretech builds for it.
Aretech's document-naming pipeline names client documents to your convention. It takes only a client's first name, last name, and case title from your CRM records. Its acceptance criteria require that Social Security and driver's-license values never reach its database, logs, or ledger.
Where Does Your Build Run?
Your build lives in your firm's own cloud account. Hosted frontier models do the AI work.
- The system that Aretech builds for you sits in your firm's cloud account
- Your firm owns the code, data, workflows, and documentation
- Client content that an AI workflow processes reaches a hosted model provider, as the next section describes
- Your firm pays the model provider
How Does Client Data Reach the AI Models?
Client data reaches the AI models through a stateless AI service that Aretech hosts. Documents go to the service by signed URL, and the service then calls a hosted model provider.
In every build, client content that an AI workflow processes passes through that service and the provider's API.
Which Services Handle Client Data in Your Build?
Three services handle client data in the AI data path of your build. The table lists each service and its role.
| Service | What it does |
|---|---|
| Aretech's AI service | Receives documents by signed URL and calls the hosted model provider |
| OpenAI | Hosted model provider that does the AI work |
| OpenRouter | Fallback route to the same model, with one retry |
How Does Aretech Limit Access to Your Systems?
Aretech limits access to your systems through least-privilege access in three ways.
- A dedicated builder user that you invite and can remove
- OAuth permission that a user at your firm grants for document stores, preferred over a stored staff password
- No automation of a vendor's interface with a staff password
How Does Aretech Keep Your Data Separate From Other Firms' Data?
Aretech keeps your data and rules separate from other firms' data and rules as written policy. That policy has three parts.
- Aretech builds each firm's instructions only from that firm's own rules and files.
- Aretech never uses one firm's data or rules to test or tune another firm's prompt.
- Aretech uses no firm's data to train anything.
What Safeguards Apply While Aretech Builds?
Five safeguards apply while Aretech builds on your systems.
- A mutual non-disclosure agreement (NDA) before scoping
- Testing on test records
- Read-only access that stays read-only
- No deletion in your systems
- No change to a live system without your explicit approval
Aretech's project chat with your team carries a matter name or a link, never client information.
Who Reviews What the Workflows Produce?
Your attorney reviews what the workflows produce before anything leaves your firm. Nothing the system does signs, files, submits, or decides anything legal.
Aretech is not a law firm and gives no legal advice. Reading this page creates no attorney-client relationship.
Which Points Does This Page Leave to Your Signed Agreement?
This page sets no term for seven points. Your signed agreement governs each of them.
- The purposes for which Aretech processes client data
- Notice to you if client data is exposed
- Return or deletion of client data at the end of an engagement
- Audit of how Aretech processes client data
- Notice of changes to the services named on this page
- Transfers of client data across borders
- Liability between the parties
Which Law Governs This Agreement, and Whom Do You Contact?
Texas law governs the data processing terms on this page.
Send questions about this agreement to info@aretech.ai.
When Should Your Firm Raise Data-Handling Questions?
Your firm should raise its data-handling questions in the workflow mapping session, before any build starts. The session walks through your firm's process and reviews the software you already run.
To book the session, Get My Free Workflow Map. Free. The map is yours, even if you never hire us.