Your files
Where your client files go
Here is exactly what happens to your firm's files.
A server of your own
Each firm's Kolophi install runs on its own server in Google Cloud, in Iowa, with its own disk, keys and sign-in. No other firm's install can reach it.
Read-only access
Kolophi reads your document system, file shares and Microsoft 365 with read-only permissions. It never changes or deletes anything in them.
The AI model
Kolophi sends a document's text to Claude, made by Anthropic, through Google Cloud's Vertex AI. Neither Google nor Anthropic uses it to train their models.
Clients who restrict AI
Mark a client "no AI" and its files are never sent to any model. Your staff review them instead.
Kolophi's access
We don't read your files. Kolophi staff reach your server only for support you ask for, to keep it running, or where the law requires.
When you leave
Your server, disks, backups and keys are destroyed at once, each deletion is confirmed, and you receive a signed certificate of destruction.
The details are in our security overview, the list of subprocessors and our data processing agreement, written so your risk team can review them without a call.
Questions first?
We're glad to talk through the size of your backlog, where it's stored and how your records team would use Kolophi.