Security & Sovereignty

Built for the profession that invented confidentiality.

Q: Is Squire POPIA compliant?

Yes. Squire is designed to meet South Africa's Protection of Personal Information Act (POPIA) as well as GDPR. Beyond in-region data-at-rest and per-firm encryption, Squire ships data-subject-access tooling (right-to-know), an erasure cascade that rewrites downstream artefacts when a token is forgotten, and an audit log of LLM requests - the operational evidence a responsible party needs to answer a data subject request or a query from the Information Regulator, not just a compliance claim in a privacy policy.

Your ethical obligations don't pause when you use technology. Squire's architecture was designed by people who understand that. Your queries, documents, and client information are never shared, never used to train our models, and never accessible to anyone but you.

100% Local

Local Cloud Infrastructure

No offshore processing. Your data stays in your jurisdiction.

Your Hardware

Self-Hosted Option

Runs on your own hardware for ultimate control.

Predictable

Fixed Professional Cost

No surprise token bills. Flat per-seat pricing.

Sovereign

Complete Data Sovereignty

AES-256-GCM with per-firm key isolation.

Per-Firm Encryption

Isolated key hierarchy

PII Protection

Auto-scrubbed before analysis

Passkey Auth

Phishing-resistant MFA

Role-Based Access

Organisation-scoped controls

Our security commitments

We've made these architectural and operational decisions deliberately. They aren't marketing claims - they're commitments we'd be willing to put in a contract.

Your queries are never used to train our models.

Full stop. We don't have a clause that says "except for...". We don't train on customer data.
Your data does not leave your jurisdiction.

Your data is processed and stored in infrastructure local to your jurisdiction.
PII is scrubbed before it touches the model.

Names, ID numbers, and identifying details are pseudonymised before any model call.
Per-firm encryption keys.

Each firm's data is encrypted with keys we cannot use to read another firm's data.

Sovereignty & POPIA, answered

The two questions we're asked most before a firm signs off on Squire.

What does "sovereign legal AI" mean, and why does it matter for South African law firms?

"Sovereign" means the AI respects your jurisdiction's laws and data. Squire^™'s intelligence is built on local law content, and your data is stored in-region and encrypted under a key unique to your firm. This supports data-sovereignty requirements: your data stays under your control. Fully in-country and on-premise inference is supported for Enterprise deployments. It also means Squire^™'s answers are grounded in your specific legal system. For a law firm this isn't just an infrastructure preference - it's an extension of attorney-client privilege and the duty of confidentiality: privileged matter data shouldn't leave the jurisdiction (or the firm's control) just to get an AI answer.

Is Squire^™ POPIA compliant?

Yes. Squire^™ is designed to meet South Africa's Protection of Personal Information Act (POPIA) as well as GDPR. Beyond in-region data-at-rest and per-firm encryption, Squire^™ ships data-subject-access tooling (right-to-know), an erasure cascade that rewrites downstream artefacts when a token is forgotten, and an audit log of LLM requests - the operational evidence a responsible party needs to answer a data subject request or a query from the Information Regulator, not just a compliance claim in a privacy policy.

See these controls in a real demo.

Bring your IT or security lead along and we'll walk through the architecture in detail.

Book a Demo Join the Waitlist