From the source
Legal teams handle some of the most sensitive data in the world, and Harvey’s architecture was built with that responsibility at its core.
We believe that customer data (e.g. customer inputs, outputs, and documents uploaded to Harvey) belongs only to the customer.
Our systems are designed to access only the information relevant to a request, and only for the time period needed to fulfill it.
This principle is embedded into every layer of our infrastructure, from access control to encryption.
Trust isn't something we apply after the fact — it's engineered into the system from the start.
Our internal mantra for security is "Provably Secure," and we bring that discipline into every design decision.
Throughout the rest of this post, I’ll walk through the core pillars that bring this mission to life.
Zero Data Access Harvey is built on the principle that customer data should never be within reach of anyone who doesn’t absolutely need it.
By design, the only entity that interacts directly with customer data is the Harvey architecture itself.
…
