How we protect privileged material.

Where your files live

Files are stored encrypted on US-based cloud infrastructure. Transcription and review are performed by Verascribe's own specialists, who work remotely on US Eastern business hours, under written confidentiality agreements and the access rules below. If your engagement letter or a protective order restricts where files may be handled, tell us at the quote stage and we will say plainly whether we can comply.

Upload and storage

Files upload from your browser over an encrypted connection (TLS) directly to private storage. Storage is encrypted at rest. Files are not publicly listable or downloadable and cannot be retrieved with the website's public credentials, even by someone who knows the file name.

Who can open your files

Access is granted per order to three roles: the coordinator who confirms the quote and assigns the work; the transcriptionist assigned to the file; and the second specialist who reviews the transcript before delivery. No one else at Verascribe opens client material.

Our people

Every transcriptionist and reviewer signs a confidentiality agreement before receiving work, works on an encrypted device, keeps no local copy after delivery, and may not use consumer AI services or public transcription tools on client audio. Where speech-recognition software produces a first draft, it runs on a business service whose terms prohibit retaining or training on your audio.

Non-disclosure agreements and protective orders

A matter-specific NDA is signed on request before any file is uploaded. Tick the NDA box on the quote form, send your own form with the request, or ask for ours. Where a matter is under a protective order, the assigned specialists sign the acknowledgment the order requires before upload.

Delivery

Transcripts go to the ordering party at the email address on the order, or through another channel you specify in writing. We do not send transcripts to third parties without your instruction.

Retention and deletion

Recordings and transcripts are deleted 30 days after delivery unless you ask us to keep them longer or delete them sooner. You can request deletion at any time, and we confirm in writing when it is complete.

Subprocessors

These providers process data on our behalf.

• Website hosting and application: Vercel
• File storage and quote and application records: Supabase, on infrastructure in the United States
• Quote notification email: Resend

Website data

Quote requests and job applications submitted through this website are stored in a database the public website can write to but cannot read. Only Verascribe staff review these records.

Incidents

If we confirm an incident involving your files, we notify you within 72 hours with what happened, what was affected and what we are doing about it.

Reporting a concern

Concerns about the handling of a file or the security of this website go to hello@verascribelegal.com. We acknowledge reports promptly and investigate.

What we do not claim

We do not hold a SOC 2 report or ISO 27001 certification and do not say otherwise. We will tell you when that changes.