Trust Centre
Built for legal professionals who need to trust their tools
Molao handles attorney-client privileged information every day. This page documents how we protect it — technically, legally, and ethically.
Core commitment: Your matter data is never used to train AI models. It exists only to serve you.
Security
Every matter is cryptographically isolated. Your documents are never accessible to another user.
- JWT authentication on every API request
- Matter ownership enforced server-side — no exceptions
- TLS 1.3 in transit, AES-256 at rest
- Full audit log of every matter access
- Responsible disclosure programme
Privacy
Your matter data is never used to train AI models. Your client data stays yours.
- No matter data used for AI training — ever
- POPIA-compliant data processing
- Right to erasure honoured within 30 days
- No cross-user data correlation
- Data residency: South Africa
POPIA Compliance
Molao is designed to comply with the Protection of Personal Information Act 4 of 2013.
- Responsible Party: MOLAO (Pty) Ltd
- Lawful basis for processing: contract and consent
- Information Officer appointed
- Data subject rights: access, correction, deletion
- Breach notification within 72 hours
Responsible AI
AI that knows its limits. Every output is grounded in real authority and discloses its confidence.
- No hallucinated citations — all sources verified against index
- Confidence scores disclosed on every output
- Hallucination risk rated per engine
- AI does not give legal advice — it assists practitioners
- Human review required before reliance
Source Traceability
Every AI answer links to the real judgment, section, and paragraph that supports it.
- Every citation traceable to SAFLII paragraph
- Confidence score per cited authority
- Contradicting authorities surfaced, not hidden
- Link to original SAFLII record on every citation
- No black-box reasoning — show your working
Attorney-Client Privilege
Your matter data is protected. Molao processes it only to serve you — never to expose it.
- Matter data processed under attorney's instruction only
- No third-party access to matter documents
- Matter isolation enforced at database level
- Audit trail available for privilege log purposes
- Enterprise: dedicated firm data isolation
AI Limitations
We say what AI cannot do as clearly as what it can. Transparency about limitations is trust.
- AI cannot give legal advice — practitioners are responsible
- Confidence scores below 70% require independent verification
- AI may miss recent unreported judgments
- Trial Science is a simulation — not a prediction
- Draft output requires practitioner review before filing
Data Retention
Clear, predictable retention periods. Your data deleted on request within 30 days.
- Matter data: retained for duration of subscription
- Audit logs: 12 months rolling
- Deleted accounts: all data purged within 30 days
- Backups: 90-day retention, encrypted
- No indefinite retention without consent
Botswana Data Protection
Molao complies with the Botswana Data Protection Act 2018 for Botswana-jurisdiction users.
- Botswana DPA 2018 compliance
- Data subject rights under BW law honoured
- Cross-border transfer disclosures provided
- Separate DPA contact for Botswana matters
Legal documents
Privacy Policy
How we collect, process, and protect personal information
Terms of Service
Your rights and obligations as a Molao user
POPIA Compliance
Protection of Personal Information Act disclosure
Responsible AI Policy
How we build, deploy, and limit AI in legal contexts
AI Transparency
What each AI engine does and does not do
Security Overview
Technical security measures and certifications
Questions about security or privacy?
Our security team responds within one business day. For responsible disclosure, use the dedicated channel below.