Trust Centre
Built for legal professionals who need to trust their tools
Molao handles attorney-client privileged information every day. This page documents how we protect it — technically, legally, and ethically.
Core commitment: Your matter data is never used to train AI models. It exists only to serve you.
Security
Every matter is cryptographically isolated. Your documents are never accessible to another user.
- JWT authentication on every API request
- Matter ownership enforced server-side — no exceptions
- TLS 1.3 in transit; at-rest encryption is on the roadmap
- Audit log of changes to a matter (create, edit, share, collaborator changes)
- Responsible disclosure programme
Privacy
Your matter data is never used to train AI models. Your client data stays yours.
- No matter data used for AI training — ever
- POPIA-compliant data processing
- Erasure requests handled manually on request to privacy@molao.ai
- No cross-user data correlation
- Data residency: EU (Contabo, France); SA region on the roadmap
POPIA Compliance
Molao is designed to comply with the Protection of Personal Information Act 4 of 2013.
- Responsible Party: Molao Research (Pty) Ltd
- Lawful basis for processing: contract and consent
- Information Officer contactable at privacy@molao.ai
- Data subject rights: access, correction, deletion
- Breach notification within 72 hours
Responsible AI
AI that knows its limits. Every output is grounded in real authority and discloses its confidence.
- Research citations are checked against the retrieved index before display
- Confidence scores disclosed on research answers
- Hallucination risk rated per engine
- AI does not give legal advice — it assists practitioners
- Human review required before reliance
Source Traceability
Every AI answer links to the real judgment, section, and paragraph that supports it.
- Research citations traceable to the source paragraph
- Confidence score per cited authority
- Contradicting authorities surfaced, not hidden
- Link to original SAFLII record on every citation
- No black-box reasoning — show your working
Attorney-Client Privilege
Your matter data is protected. Molao processes it only to serve you — never to expose it.
- Matter data processed under attorney's instruction only
- No third-party access to matter documents
- Matter isolation enforced at database level
- Audit trail available for privilege log purposes
- Enterprise: dedicated firm data isolation
AI Limitations
We say what AI cannot do as clearly as what it can. Transparency about limitations is trust.
- AI cannot give legal advice — practitioners are responsible
- Every output requires independent verification before you rely on it
- AI may miss recent unreported judgments
- Trial Science is a simulation — not a prediction
- Draft output requires practitioner review before filing
Data Retention
Clear, predictable retention periods. Your data deleted on request within 30 days.
- Matter data: retained for duration of subscription
- Audit logs: retained for the life of the account
- Deleted accounts: data purged on request
- Backups: 14-day retention
- No indefinite retention without consent
Botswana Data Protection
Molao complies with the Botswana Data Protection Act 2018 for Botswana-jurisdiction users.
- Botswana DPA 2018 compliance
- Data subject rights under BW law honoured
- Cross-border transfer disclosures provided
- Separate DPA contact for Botswana matters
Legal documents
Privacy Policy
How we collect, process, and protect personal information
Terms of Service
Your rights and obligations as a Molao user
POPIA Compliance
Protection of Personal Information Act disclosure
Responsible AI Policy
How we build, deploy, and limit AI in legal contexts
AI Transparency
What each AI engine does and does not do
Security Overview
Technical security measures and certifications
Questions about security or privacy?
Our security team responds within one business day. For responsible disclosure, use the dedicated channel below.