PKM LEGAL ARCHIVE
Security & Data Handling
How PKM Consulting Group protects access to the Legal Archive and handles information across the service.
Last updated:
Read-only legal content
Users can search and read legal archive content through the browser or MCP. These interfaces do not let users create, modify or delete archive records. Account administration and trial requests are separate from this read-only content boundary.
Controlled access
Signing in does not automatically grant archive access. Access depends on an approved account and permissions for each source. The owner and delegated access administrators manage permissions within their assigned scope. Database authorization checks enforce source access across search and document retrieval.
Transport and application protection
Production connections use HTTPS. The application uses security headers, restricted content policies, input validation, request limits and database timeouts. Archive responses are configured to prevent shared caching. These measures reduce risk; they do not eliminate every security threat.
Traceability and integrity
Archive records include source links, retrieval information and stored version context where available. SHA-256 checksums help verify stored copies. A checksum does not establish legal validity, completeness or currency: verify the official source before relying on a document.
Security logs and recovery
Application security events use request references and pseudonymous account identifiers. The structured security logger excludes raw tokens, search text and document content. Hosting and authentication providers maintain separate operational logs. Automated security checks run periodically. The service has documented incident and recovery procedures; local snapshot recovery has been rehearsed, while a cloud backup restore rehearsal remains outstanding.
External AI platforms
The archive application does not run an AI model or train models on your requests. Connecting an external AI client through MCP lets that client receive the requested archive information. Its processing, storage and use for model training depend on your settings and agreement with that platform. Choose a connection appropriate for your organization and avoid including confidential client information in search requests.
Infrastructure and assurance
Vercel provides application hosting and Supabase provides database and authentication services. Their security controls operate alongside our application controls. Provider certifications apply to the providers' respective scope; they do not certify PKM or this application. We do not claim an independent SOC 2 attestation or ISO certification for the Legal Archive.
Provider information
Contact PKM
For service, privacy or security questions, use PKM's existing contact channels. Do not send passwords or tokens.
info@pkmconsultinggroup.com