Law firms trust Kero with their most sensitive work. Security is built into every layer of the platform, from infrastructure to the way our AI handles your documents.
Private by design
Every workspace is isolated and encrypted at rest (AES-256) and in transit (TLS 1.3). Your documents and prompts are never used to train public models.
Certifications
Kero is SOC 2 Type II audited and aligned with ISO 27001, ISO 27701 and ISO 42001. We support GDPR and CCPA obligations, including data processing agreements on request.
Access control
Single sign-on, role-based permissions and matter-level access keep documents visible only to the people who need them. Every action is logged for audit.
Data residency and retention
Choose where your data is stored and how long it is kept. Deleted data is removed from our systems within 30 days.
Report a vulnerability
Found a security issue? Email kero@support.com and our security team will respond within one business day.