How Vanguard Command OS collects, uses, retains, and protects the data a law firm entrusts to the platform.
This notice is maintained by Vanguard Command OS and is provided for evaluation. It is not legal advice, and the definitive terms for any engagement are those in the executed Master Services Agreement.
Vanguard Command OS is an AI-augmented operating system for law firms, provided by the entity identified in the applicable Master Services Agreement. Where a firm uses the platform to serve its own clients, the firm is the controller of client data and Vanguard acts as processor.
Firm-provided data: matter records, client identifiers, uploaded documents, communications, calendaring metadata, and financial entries.
Account data: name, work email, optional phone number, and authentication identifiers.
Usage data: page views, feature interactions, agent invocations, and request timing.
Derived data: AI-generated insights, risk scores, embeddings, and audit hashes.
To deliver the service, enforce access controls, generate insights through approved AI models, produce audit and compliance artifacts, and improve the product in aggregate.
Prompts and retrieved context are sent to model providers through a managed AI gateway. Only the minimum firm context required for a task is included. Third-party foundation models are not trained on your firm's data. Full detail is on the AI disclosure page.
Firm data is retained for the life of the engagement plus the period required by the firm's records-retention policy or applicable law, whichever is longer. Audit chain entries are append-only and are retained for the full retention window.
Requests for access, rectification, deletion, or export should be directed to your firm administrator, who can raise them with us through the contact below. Firm data can be exported in a machine-readable format on request.
Row-level security enforces per-firm isolation on every table. Documents are held in access-controlled storage. Audit events are hash-chained, and qualifying plans receive periodically signed roots. Secrets are held in managed secret storage and are never exposed to the browser.
Data may be processed in the regions where our hosting platform and approved model providers operate. A current list of processing regions and subprocessors is available on request.
Material changes to this notice are communicated in-app and by email to firm administrators at least 30 days before they take effect.
Data protection questions can be sent through the contact page, addressed to the data protection contact.
We answer diligence questionnaires directly and can walk your general counsel through the oversight and audit model line by line.
