Security

Architecture principles

• Matter isolation — client data scoped per matter and workspace
• Source-linked outputs — citations traceable to firm-grounded sources
• Audit-ready logging — access and retention controls for legal ops
• Enterprise identity — SSO-ready integration for firm directories

Data handling

Client matter content submitted to Nammu is not used to train general-purpose models. Retention policies are configurable to align with firm and regulatory requirements.

Reporting issues

To report a security concern, contact kristina@ur-nammu.ai. We will acknowledge receipt and follow up according to our responsible disclosure process.