Four safeguards, built in.

Confidentiality, security, human oversight and responsible AI — and what each one means for your case.

Client record · Case-1048Restricted
Full name
Amara O.
Visa goal
O-1A
Passport no.
•••• •• 4821
Date of birth
••/••/19••
Nationality
•••••••
Financial records
3 files
Access logToday
  1. AMA. Morgan · Attorney — Reviewed exhibits
  2. AIAI analysis — Mapped evidence to criteria
  3. YouYou — Approved petition draft
  4. AMA. Morgan · Attorney — Signed and filed
  1. 01

    Attorney confidentiality

    Your case is handled by licensed attorneys, bound by professional confidentiality rules.

  2. 02

    Security

    Passports, financials and personal records are protected with encryption and access controls.

  3. 03

    Human oversight

    Every petition is reviewed and signed by a licensed immigration attorney.

  4. 04

    Responsible AI

    AI organizes evidence and drafts. It never gives legal advice or files anything on its own.

Security controls.

How your account, documents and payments are protected, from sign-in to storage.

Data encryption

End-to-end encryption for data in transit and at rest.

  • TLS 1.3 encryption for all data in transit
  • AES-256 encryption for data at rest
  • Encrypted database backups

Access controls

Account-scoped access with least-privilege staff permissions.

  • Authenticated access to all customer data
  • Data scoped to your account
  • Staff-only administrative access
  • SSO and multi-factor authentication for all staff

Authentication

Passwordless authentication with modern session security.

  • Passwordless magic-link sign-in — no stored passwords
  • Short-lived session tokens
  • Secure token refresh

Infrastructure

Enterprise-grade cloud infrastructure.

  • Hosted on SOC 2 Type II certified infrastructure
  • Automated backups
  • Rate limiting to prevent abuse

Document delivery

Formation documents and filings, delivered through your dashboard.

  • Documents generated per account
  • Delivered through your authenticated dashboard
  • Stored on enterprise cloud storage

Payment security

We never touch your card data.

  • PCI-compliant checkout via Stripe
  • No raw card data stored or processed by Cooperative
  • Stripe-hosted checkout sessions

How we handle your data.

Data isolation

Each customer's data is scoped to their own account. Every request is authenticated and authorized before any company, filing, or document data is returned.

Sensitive data protection

Regulated data such as SSNs/EINs and payment details is encrypted at rest and only reachable through authenticated, account-scoped API requests.

Identity documents (passports, visas)

Stored encrypted, visible only to your attorney and assigned case team.

AI model providers

Enterprise AI providers under zero-data-retention terms.

Model training

Client data is never used to train AI models.

Data retention & deletion

Kept for the life of your case plus seven years, then deleted. Deletion on request where the law allows.

Data export

Your data can be exported on request.

Incident response

Affected clients notified within 72 hours of a confirmed incident.

AI inside a controlled workflow.

AI is a tool our attorneys use, not an authority that answers on their behalf.

  1. 01AI output is an input to attorney work — never delivered to you as legal advice on its own.
  2. 02Every petition is reviewed, signed and filed by a licensed immigration attorney.
  3. 03Every criterion the AI maps links back to the exhibit it relies on, so your attorney can check it.
  4. 04Weak or unusual cases are escalated to an attorney, not pushed through a workflow.

Who else touches your data.

We work with a small, vetted set of infrastructure providers to run Cooperative — never anyone else, and never for anything unrelated to running the product.

Stripe

Payment processing

Neon

Database

SOC 2 Type II
Railway

Application hosting

SOC 2 Type II
Cloudflare R2

Document storage

Resend

Transactional email delivery

OpenRouter

AI chat, document drafting, and summarization (routes to Anthropic by default)

OpenAI

Knowledge-base search (chat message text only)

Questions about security?

Talk to us before you send anything. We'll walk you through how your information is handled.

Ask a question

Found a security issue? Email us directly at security@cooperative.io