KlauvyYour client work stays with you.
Klauvy is built so that your documents never leave your device. This page explains where your data is kept, how it is protected and what you control.
- SOC 2 Type II infrastructure
- ISO 27001 infrastructure
- HTTPS everywhere
- AES-256 at rest
- Hosted in Mumbai
Last updated 20 October 2026
Klauvy cannot read your documents.
Drafts and imported documents are saved in your browser. They are never uploaded, so nobody at Klauvy can open them.
- Imported documents and working copies
- Drafts and the fields you fill in
- Playbook notes
- Your backups and Word exports
- Your email address and profile
- Your setup answers
- Learning progress, only if you turn sync on
- The text of your documents
- Client names or matter details you type into a draft
- Advertising or tracking scripts
- Data for training AI models
How your account is protected
- 01
Encrypted in transit
Every connection to Klauvy uses HTTPS. Data travelling between your browser and our servers is encrypted.
- 02
Encrypted at rest
Account data is stored with AES-256 encryption by our database provider, on servers in Mumbai, India.
- 03
Each account sees only its own records
Database rules check every request, so one account can never read another account's data.
- 04
Passwords are never stored in plain text
Passwords are hashed before they are saved. Nobody at Klauvy can see your password.
- 05
Least-privilege access
The website can only reach the database tables it needs, and only in the ways it needs.
- 06
Hardened pages
Pages cannot be framed by other sites, and the browser is told not to share the camera, microphone or location.
Certified infrastructure
Klauvy runs on providers that are independently audited every year. Each provider's own security page lists its certificates and how to request the audit reports.
| Provider | What it does for Klauvy | Where | Independent certifications |
|---|---|---|---|
| SupabaseSecurity and certificates | Stores accounts, setup answers and synced learning progress | Mumbai, India | SOC 2 Type IIISO 27001 |
| VercelSecurity and certificates | Hosts the website and keeps request logs | Global network | SOC 2 Type IIISO 27001 |
| ResendSecurity and certificates | Sends account emails, so it receives your email address | Outside India | SOC 2 Type II |
What you control
- Back up
Download your work at any time
Export a backup file or a Word copy of any document. Use a backup to move your work to another device.
- Sync
Turn sync on or off
Sync is off until you turn it on. When you turn it off, you can delete the cloud copy at the same time.
- Delete
Delete your account
Deleting your account removes your profile, setup answers and synced records straight away. Copies in provider backups are usually overwritten within 30 days.
- Clear
Remove documents from this device
Delete a document in Klauvy, or clear your browser's site data, and it is gone from the device.
Report a security issue
If you think you have found a security problem in Klauvy, please tell us before sharing it with anyone else.
Write to support@klauvy.com with the subject "Security report". Describe what you found and how to reproduce it. We will reply and keep you updated while we fix it.
If a breach affects your data, we will tell you and the authorities as the law requires, including under the Digital Personal Data Protection Act, 2023.