Justee is built for legal review and document comparison you can trust. With Full Private Mode on (paid plans), your reviews, chats and comparisons are sealed with a key only you hold, so Justee stores only encrypted content it cannot read back.
Encrypted in transit and at rest.
Your content is never used to train AI models.
Personal identifiers are automatically redacted before your document is analyzed (see below).
Delete your reviews, chats, and comparisons at any time.
Everything in standard protection, plus zero-access encryption.
Encrypted with a key only you hold, so only you can open it.
Justee stores only the encrypted version and cannot read your content.
Even under subpoena, Justee can hand over only encrypted copies of your Vault files and of the chats, reviews and comparisons you make in Full Private Mode.
Private items auto-delete on a schedule you choose, up to a year, or stay until you delete them.
Justee is not a law firm. No attorney-client relationship is created here, and your documents and messages are not protected by attorney-client privilege. That is exactly why we protect them technologically instead: in Full Private Mode they are encrypted and sealed with a key only you hold, so confidentiality is enforced by encryption rather than by trust. A technical safeguard, not legal privilege.
Full Private Mode uses zero-access encryption: the key that unlocks your content stays with you, so we can hold your data without being able to read it back.
When you turn on Full Private Mode, your key is generated in your browser and protected by your passphrase. It never reaches us in a form we can read.
To produce your review, chat, or comparison, our system processes your content, then encrypts the result with your key. We store only the encrypted version, which we cannot open.
Because we never hold your key, we cannot read your content, and neither can anyone we might be compelled to share it with.
When Justee checks current law on the internet, it sends search requests written from the redacted text of your question, from our servers and without your name, email, or account. The third-party search providers we use may keep logs of these search requests. The logs carry no identifiers from us, and the text in them is redacted with the same best-effort detection described below. We plan to improve this in the future, for example with search services that do not retain search requests.
Before your document is analyzed, Justee automatically detects and replaces personal identifiers (names, government IDs, emails, phone numbers, addresses, and more) and business identifiers (company names, EINs, bank accounts, and routing numbers) with codes. The AI analyzes the redacted version, and your chats about that document reuse the same redaction. This automated detection is a best-effort safeguard and cannot guarantee identification of all sensitive data in every document format, so you remain responsible for reviewing what you upload. See what types of data are redacted.
Requests are sent to our AI providers from Justee's servers, not from your device, and without your name, email, or account attached.
So the content these providers process is redacted and is not tied to your identity.
Justee is approved for zero data retention with its AI model provider: request content is not retained, not logged for human review, and not used to train models. Internet search requests are the exception: search providers may log them.
Statute matching sends only PII-redacted text to an embeddings service and only a numeric vector to the law index; neither is used to train models.
You can dictate a message, or talk with the assistant and hear its replies. Voice is optional. Here is what happens to your audio.
Your audio is encrypted in transit (TLS 1.2 or higher) from your device to our servers and on to our speech provider, Amazon Web Services.
Speech is converted to text in real time. Justee does not store recordings of your voice.
Under the AI services opt-out on our AWS account, AWS does not store your audio for, or use it to, develop or improve its services.
Requests to the speech service carry no name, email, or account id.
What you say becomes an ordinary message, kept and deleted like the messages you type. For plan limits we record only how many seconds you spoke.
We do not use voice to identify you and we do not create voiceprints.
Voice works in Full Private Mode too. In a private chat, what you dictate is sealed to your key like anything you type.
To transcribe your speech and read replies aloud, AWS processes the audio and the reply text in real time, with the same protections as in Standard. Justee does not store the audio.
You decide when the microphone is on and whether replies are read aloud.
General AI assistants are useful, and how they handle your material depends on the provider, the plan, and your settings. Here is how Full Private Mode compares with a typical consumer plan; check your provider's current terms.
| Justee Full Private Mode | A typical consumer AI chat plan | |
|---|---|---|
| Who can read your stored content | Only you. It is encrypted with a key we never hold. | Usually stored on the provider's systems in a form it can read. |
| What the AI receives | A PII-redacted version, sent from our servers with no name, email, or account attached. | Usually your text as typed, linked to your account. |
| Used to train AI models | No. | On some consumer plans, yes by default, unless you turn it off in settings. |
| After you delete it | You set a retention window and items auto-delete. Backup copies expire on a fixed schedule and stay unreadable for private items. | May be retained under the provider's own retention policies. |
| If a subpoena reaches the company | Because we never hold your key, we cannot read your content, and neither can anyone we might be compelled to share it with. | Stored conversations the provider can read, handled under its own policies. |
We would rather be precise than impressive. A few honest limits:
To generate a result, our AI providers process your content briefly. We send it without your identity and in a PII-redacted form, but the providers do momentarily handle the content. They may also retain limited operational data under their own terms.
Deletion removes items from our live systems right away, but copies can persist for a limited period in encrypted backups until those backups expire. For Full Private Mode items, backups hold only ciphertext no one can read.
Voice audio reaches our speech provider as you speak it, so it is not redacted before it is transcribed, and replies you choose to hear aloud are sent to the provider as text, with any personal details they contain, since a spoken placeholder would be meaningless. Both are encrypted in transit and not stored by Justee.
Automated PII detection is a strong, best-effort safeguard. It may not catch every identifier in every document format, so you remain responsible for reviewing what you upload.
Full Private Mode protects the content of your work. Like any online service, we keep some operational and security records, such as delivery and error logs, that are timestamped. It is not a claim that no record of your activity exists.
Because only you hold your key, if you lose both your passphrase and your recovery code, your private items cannot be recovered by anyone, including Justee.
Sealing your content to a key only you hold means some features work differently or arrive later. This is the current list; we shorten it as we close each gap.
Sharing. Share links and email shares are not available, because a shared copy would need to be resealed to each recipient’s key, which we have not built yet; choose Standard for items you plan to share.
Chat search. You cannot search across private chat threads by their message text, because we hold that text only in sealed form and cannot read it to match a query; open a thread to read it, and its memory of your edits carries across sessions as normal.
In-document search in chat. When you chat about a private review, the assistant searches your document by keyword rather than by meaning, so on very long documents it may miss a relevant passage a meaning-based search would find. This is because the semantic index would have to be built on our servers from your content, which stays sealed to your key.
Account data export. Your account export includes private items as sealed ciphertext, because producing readable copies on our servers would require reading content sealed to your key; open a private item in the app and download it there to keep a readable copy.
Timestamps. Private items record the day, not the exact time, because we deliberately coarsen their timestamps to reduce what activity records reveal; this is by design and needs no workaround.
Support recovery. Justee support cannot open, repair, or restore private content, because it is sealed to your key; keep your passphrase and recovery code safe, since losing both means no one, including Justee, can recover those items.
Turn it on whenever you need it, per review or across everything.
See plansPrivacy
Full Private Mode© 2026 Justee. All rights reserved.
Justee is not a law firm. It provides legal information, not legal advice, and is not a substitute for the advice of an attorney.