Privacy
What CORAX keeps about you and your matters, where, and for how long. Last updated 18 October 2026.
Where it is kept
On Amazon Web Services, in the United States (us-east-1). Each matter's documents are encrypted under a key of the matter's own, inside a key that belongs to your firm. Deleting the matter destroys its key first, and with it every copy of its documents.
What is kept, and for how long
| What | Why | How long |
|---|---|---|
| Your email address, firm and role | To sign you in and decide what you may open | Until you delete your account |
| Your matters' documents, and what CORAX read from them (text, citations, the matter's analyses) | To answer questions from them | Until the matter is deleted. Its key is destroyed at once; the encrypted files are erased 30 days later. |
| Who may open each matter, and any ethical wall | The firm's record that a wall existed | As long as the firm keeps the matter |
| The firm's audit log (who was added, removed, screened, who connected a model) | The firm's evidence of who could reach what | Kept by the firm. Deleting your account leaves its entries, naming an id no longer tied to your address. |
| Usage counts (questions asked, pages read) | Plan limits and billing | Counts only, never the question |
| Reports you send from under an answer | To fix and improve CORAX | 90 days, then deleted. Never your question or the answer's text; never published. |
| Service logs (errors, ids and counts; never document text, questions or answers) | To keep the service running | 90 days |
| Your notice setting, and a record that a source email was sent | So you are not emailed twice | Until you delete your account |
Your questions and the answers are not stored. A repeated question may be answered from a short-lived memory inside the running service, which is lost when it restarts.
Records are also in the database's point-in-time backups for up to 35 days after they are changed or deleted. Matter document keys have no backup, so a deleted matter cannot be restored.
Who processes it
- Answers are written by a model on Amazon Bedrock, in the same AWS region, from the pages the question needs. If your firm connected its own model provider (Firm → AI model), questions and those pages go to that provider under your firm's own account and terms instead.
- Email (sign-up codes, source notices) is sent through Amazon SES. Source notices never name the matter or its documents.
- Billing, when your firm subscribes, is handled by Stripe. CORAX keeps the customer reference, not card details.
Your documents are not used to train models, and are never part of any shared or evaluation set.
In your browser
- A sign-in cookie (
corax_rt): HttpOnly, sent only to the sign-in service, valid for 7 days. - Your current sign-in token, in this tab's session storage, gone when the tab closes.
- A flag (
corax_session) saying whether you were signed in, so the page knows whether to try. It holds no token.
No advertising or analytics cookies.
Your choices
- Source emails: turn them off under Settings.
- Delete your account: Settings → Delete your account. It removes your sign-in, profile, settings, matter memberships and reports. Your firm's matters stay with your firm. If deleting you would leave them without an admin or an owner, CORAX tells you what to do first.
- Delete a matter: a matter's owner can delete it from the matter.
For anything else, ask your firm's administrator, or write to us with "Report a problem or an idea" under any answer.