Pricing and plans / Confidentiality and security
Legal AI and client confidentiality:
what happens to your documents in RuleX
A lawyer who puts a client file into an AI tool needs a clear account of where it goes. This page gives that account for RuleX in plain facts, then turns the duties of ABA Formal Opinion 512 into ten questions you can put to any vendor, RuleX included.
RuleX handles client documents under published, checkable commitments. Documents are not used to train AI models. The copy an AI processes is uploaded with a requested expiry of one hour. Matter content is never sold or shared with advertisers or data brokers. Traffic is encrypted in transit, original files are served through short-lived signed URLs, and one click deletes conversations, messages and document context. The twelve PDF tools run in your browser and upload nothing. A checklist of ten questions for any legal AI provider follows, built on ABA Formal Opinion 512.
RuleX answers each confidentiality question with a published commitment, so the vendor review fits in the matter file.
Training, retention of the AI copy, sale or sharing, encryption in transit, file access and deletion each have a stated answer on rulex.org. The ten questions below are the ones a careful lawyer asks anyone; the answers for RuleX are short, specific and written down where a client, a partner or a regulator can read them.
How to document an AI-vendor review for the matter file
The review takes the form of a short note a lawyer keeps with the engagement.
- Read what the vendor publishesOpen the privacy policy, the terms and the security documentation. Note the date you read them, because commitments change.
- Put the ten questions to the vendorWrite the answers next to each question. A commitment you can quote beats a general assurance.
- Match the answers to the dutiesPlace each answer under the duty it serves: competence, confidentiality, communication, fees, supervision.
- Tell the client what the engagement needsUse the vendor note to describe the tool to the client and decide whether informed consent is required in your jurisdiction.
- Verify output before it leaves the officeOpen each source behind an answer, edit the draft and sign only what you checked. In RuleX each answer carries links to its sources.
Ten questions to ask any legal AI provider
Each question comes with the answer RuleX publishes.
- Are my documents used to train models? RuleX: documents are not used to train AI models, and the privacy policy states that AI providers are selected and configured under enterprise conditions that do not use API inputs for training, in line with each provider's applicable terms.
- How long does the AI-side copy of a document live? RuleX: the copy the AI processes is uploaded with a requested expiry of one hour, and the original stays in your account.
- Is matter content sold or shared? RuleX: matter content is never sold or rented, and it is never shared with advertisers or data brokers. Service providers process it only to operate the service.
- Is data encrypted in transit? RuleX: traffic is encrypted in transit.
- How are original files served? RuleX: through signed URLs of short duration, and never as permanent public links.
- Can I delete what I uploaded? RuleX: one click permanently deletes your conversations, your messages and the document context tied to them, and an account deletion page exists at rulex.org/account-deletion.
- Who is responsible for the data, and how do I reach them? RuleX: besimpler S.A.S., Bogotá D.C., Colombia, reachable at soporte@rulex.org.
- Does the mobile app ask before sending my content to an AI provider? RuleX: the app asks for the user's express authorization before content is sent to an AI provider for the first time.
- Who can see a matter? RuleX: access is organized by account, and Enterprise adds roles and permissions inside the organization.
- Can I check the sources behind an answer? RuleX: each answer carries links to its sources, so the lawyer opens the original before signing.
A litigation partner writes the vendor note for a new engagement
Illustration. A partner onboarding a new client wants a record of how the firm will use AI on the file. She reads the RuleX privacy policy and published commitments, puts the ten questions to them and writes the answers in one page. She notes that documents are not used for training, that the AI copy carries a requested expiry of one hour, and that deletion takes one click. She files the note with the engagement letter and tells the client how the tool is used.
A vendor note for the matter file
- A one-page vendor note, dated, with the ten questions answered from RuleX's published texts.
- A short paragraph for the engagement letter describing how AI is used on the file.
- A record of the decision on informed consent, taken under the partner's own jurisdiction.
- A practice rule: every citation is opened before a document is filed.
Six commitments about the documents you upload
Training: your documents and conversations are not used to train AI models. RuleX works through paid enterprise API access, and its privacy policy says the AI providers are selected and configured under enterprise conditions that do not use API inputs to train their models, in line with the provider's applicable terms.
Retention of the AI copy: when a document goes to the AI, the copy is uploaded with a requested expiry of one hour. The original stays in your account's storage.
Sale and sharing: matter content is never sold or rented, and it is not shared with advertisers or data brokers. The providers that run the service, such as hosting, authentication, storage, email, payments, security and AI, process it only to operate RuleX.
Encryption in transit: RuleX encrypts traffic in transit.
File access: original files are served through signed URLs of short duration, and never as permanent public links.
Deletion: one click permanently deletes your conversations, your messages and the document context tied to them. The privacy policy sets out retention and the rest of the details.
Files that stay on your computer
The twelve PDF tools, merge PDF, Split PDF, Remove pages, Extract pages, Organize PDF, Compress PDF, Image to PDF, PDF to image, Rotate PDF, Add page numbers, Watermark and Crop PDF, run entirely in your browser. The file stays on your device, takes no AI allowance and reaches no server. They are the right tool for the bundle that needs only a merge, a page number or a watermark.
Who is responsible and how to reach them
RuleX is operated by besimpler S.A.S., Bogotá D.C., Colombia. Questions about data go to soporte@rulex.org, the privacy policy is at rulex.org/privacy, and account deletion is at rulex.org/account-deletion.
On mobile, the app asks for the user's express authorization before content is sent to an AI provider for the first time. Access to a matter is organized by account and, in Enterprise, by the roles and permissions of the organization.
What ABA Formal Opinion 512 asks of a lawyer
ABA Formal Opinion 512, issued on 29 July 2024, applies the existing Model Rules of Professional Conduct to generative AI. Competence under Rule 1.1 requires a reasonable understanding of the tool and a review of what it produces, and it does not require the lawyer to become an expert. Confidentiality under Rule 1.6 may call for the client's informed consent, and boilerplate in an engagement letter is not enough. Communication with the client (Rule 1.4), reasonable fees (Rule 1.5, which allows billing the time actually spent) and supervision of lawyers and staff (Rules 5.1 and 5.3) complete the picture.
The table below places the published RuleX facts next to each duty. It is a working aid for the lawyer's own judgment, and each jurisdiction's rules decide what the lawyer must do.
Official guidance, with links
Open each document, since wording and status change. Primary documents and reports:
ABA Formal Opinion 512, "Generative Artificial Intelligence Tools", 29 July 2024: https://www.americanbar.org/content/dam/aba/administrative/professional_responsibility/ethics-opinions/aba-formal-opinion-512.pdf
Law Society of England and Wales, "Generative AI: the essentials": https://www.lawsociety.org.uk/topics/ai-and-lawtech/generative-ai-the-essentials
Law Society of New South Wales, "A solicitor's guide to responsible use of artificial intelligence", updated January 2026: https://www.lawsociety.com.au/sites/default/files/2026-01/20260109%20LS4816_PSU_GuidetoAI_2026-01-08a%20FINALv2.pdf
Law Society of Ireland, generative AI guidelines, December 2025: https://lawsociety.ie/globalassets/documents/cybersecurity/2025-12-generative-ai-guidelines-v4.pdf
Law Society of Scotland, guide on AI challenges for Scottish solicitors: https://www.lawscot.org.uk/news-and-events/law-society-news/new-guide-navigates-ai-challenges-for-scottish-solicitors
Law Society of Ontario, white paper for licensees on generative AI (April 2024), summarized by Osler: https://www.osler.com/en/insights/updates/law-society-of-ontario-publishes-guidance-for-licensees-with-respect-to-the-use-of-generative-ai/
Canadian Bar Association, "Ethics of Artificial Intelligence for the Legal Practitioner" toolkit (November 2024), reported by the University of Ottawa: https://www.uottawa.ca/faculty-law/civil-law/news/canadian-bar-association-releases-ai-ethics-toolkit-led-karen-eltis
The duties in Opinion 512 and what RuleX publishes beside them
Each row pairs a duty with the question a lawyer asks and the published RuleX fact that answers it.
| Duty | The question a lawyer asks | What RuleX publishes |
|---|---|---|
| Competence (Rule 1.1) | Do I understand the tool, and can I review what it produces? | Each answer carries links to its sources; Direct, Balanced and In depth modes are described in the product. |
| Confidentiality (Rule 1.6) | Where does the client's information go, and does it train a model? | Documents are not used to train AI models; the AI copy has a requested expiry of one hour; matter content is never sold. |
| Communication (Rule 1.4) | Can I describe the tool to the client in plain terms? | The commitments are written in plain language on rulex.org and in the privacy policy. |
| Fees (Rule 1.5) | Can I bill the time I actually spend? | Billable hours are recorded on the matter in Pro, Ultra and Enterprise. |
| Supervision (Rules 5.1 and 5.3) | Can the people I supervise use the tool under my rules? | Drafts stay editable in the Canvas before export; Enterprise assigns roles and permissions. |
A working aid. Each jurisdiction's rules decide what a lawyer must do.
What a lawyer can put in the file after this review
- A dated vendor note with the ten questions answered
- A paragraph for the engagement letter describing how AI is used
- A record of the decision on informed consent
- A practice rule: open every source before filing
- The contact and deletion routes for the client's data
What you want to know.
01Does RuleX use my documents to train AI models?
Documents are not used to train AI models. The privacy policy states that RuleX's AI providers are selected and configured under enterprise conditions that do not use API inputs for training, in line with each provider's applicable terms.
02How long does the AI keep a copy of my document?
The copy the AI processes is uploaded with a requested expiry of one hour. The original stays in your account's storage, served through signed URLs of short duration.
03Is my clients' information sold or shared?
Matter content is never sold or rented, and it is not shared with advertisers or data brokers. The providers that run the service process it only to operate RuleX.
04Can I delete my documents and conversations?
Yes. One click permanently deletes your conversations, your messages and the document context tied to them. Account deletion is available at rulex.org/account-deletion.
05Do the PDF tools upload my files?
The twelve PDF tools run entirely in your browser. The file stays on your device and reaches no server.
06Is it ethical for lawyers to use AI?
ABA Formal Opinion 512 (29 July 2024) applies the existing Model Rules to generative AI: competence (Rule 1.1), confidentiality (1.6), communication (1.4), reasonable fees (1.5) and supervision (5.1 and 5.3). A lawyer who understands the tool, protects client information, tells the client what the engagement needs and checks every output is working within those duties.
07Do I need my client's consent to use RuleX?
Opinion 512 says informed consent may be required before client information goes into an AI tool, and that boilerplate in an engagement letter is not enough. Your jurisdiction's rules decide, and RuleX publishes the facts you need to describe the tool to your client.
08Who is responsible for my data at RuleX?
RuleX is operated by besimpler S.A.S., Bogotá D.C., Colombia. Write to soporte@rulex.org with any question about data, and read the privacy policy at rulex.org/privacy.
From the first document to the final draft
Start the 7-day free trial
Open an account with your email address, read the commitments on rulex.org and test RuleX on a matter of your own.