Full Private Mode: work without second-guessing.
Justee is built for legal review and document comparison you can trust. On paid plans, your documents and chats are encrypted and sealed with a key only you hold, so you can send anything and ask anything, freely.
Two levels of protection
Standard protection
Encrypted in transit and at rest.
Your content is never used to train AI models.
Personal identifiers are automatically redacted before your document is analyzed (see below).
Delete your reviews, chats, and comparisons at any time.
Full Private Mode
Everything in standard protection, plus zero-access encryption.
Encrypted with a key only you hold, so only you can open it.
Justee stores only the encrypted version and cannot read your content.
A subpoena to Justee turns up nothing readable.
Private items auto-delete on a schedule you choose, up to a year, or stay until you delete them.
Justee is not a law firm. No attorney-client relationship is created here, and your documents and messages are not protected by attorney-client privilege. That is exactly why we protect them technologically instead: in Full Private Mode they are encrypted and sealed with a key only you hold, so confidentiality is enforced by encryption rather than by trust. A technical safeguard, not legal privilege.
How Full Private Mode works
Full Private Mode uses zero-access encryption: the key that unlocks your content stays with you, so we can hold your data without being able to read it back.
Your key is created on your device
When you turn on Full Private Mode, your key is generated in your browser and protected by your passphrase. It never reaches us in a form we can read.
We encrypt your results with your key
To produce your review, chat, or comparison, our system processes your content, then encrypts the result with your key. We store only the encrypted version, which we cannot open.
Only you can open it
Because we never hold your key, we cannot read your content, and neither can anyone we might be compelled to share it with.
What we send the AI, and what we do not
Minimized before it ever leaves
Before your document is analyzed, Justee automatically detects and replaces personal identifiers (names, government IDs, emails, phone numbers, addresses, and more) and business identifiers (company names, EINs, bank accounts, and routing numbers) with codes. The AI analyzes the redacted version, and your chats about that document reuse the same redaction. This automated detection is a best-effort safeguard and cannot guarantee identification of all sensitive data in every document format, so you remain responsible for reviewing what you upload. See what types of data are redacted.
Requests are sent to our AI providers from Justee's servers, not from your device, and without your name, email, or account attached.
So the content these providers process is redacted and is not tied to your identity.
Justee is approved for zero data retention with its AI model provider: request content is not retained, not logged for human review, and not used to train models.
Statute matching sends only PII-redacted text to an embeddings service and only a numeric vector to the law index; neither is used to train models.
Compared with using ChatGPT, Gemini, or Claude directly
General AI assistants are powerful, but they are not built to keep your material out of their own hands. Here is the practical difference.
| Justee Full Private Mode | Using a general AI tool directly | |
|---|---|---|
| Who can read your stored content | Only you. It is encrypted with a key we never hold. | The provider stores it on their systems and can read it. |
| What the AI receives | A PII-redacted version, sent from our servers with no name, email, or account attached. | Your text as typed, tied to your account. |
| Used to train AI models | No. | Often yes on consumer tiers, unless you find and change the setting. |
| After you delete it | You set a retention window and items auto-delete. Backup copies expire on a fixed schedule and stay unreadable for private items. | May be retained under the provider's own retention policies. |
| If a subpoena reaches the company | Because we never hold your key, we cannot read your content, and neither can anyone we might be compelled to share it with. | Readable conversations, under the provider's own policies. |
What we do not claim
We would rather be precise than impressive. A few honest limits:
To generate a result, our AI providers process your content briefly. We send it without your identity and in a PII-redacted form, but the providers do momentarily handle the content. They may also retain limited operational data under their own terms.
Deletion removes items from our live systems right away, but copies can persist for a limited period in encrypted backups until those backups expire. For Full Private Mode items, backups hold only ciphertext no one can read.
Automated PII detection is a strong, best-effort safeguard. It may not catch every identifier in every document format, so you remain responsible for reviewing what you upload.
Full Private Mode protects the content of your work. Like any online service, we keep some operational and security records, such as delivery and error logs, that are timestamped. It is not a claim that no record of your activity exists.
Because only you hold your key, if you lose both your passphrase and your recovery code, your private items cannot be recovered by anyone, including Justee.
What works differently in Full Private Mode
Sealing your content to a key only you hold means some features work differently or arrive later. This is the current list; we shorten it as we close each gap.
Sharing. Share links and email shares are not available, because a shared copy would need to be resealed to each recipient’s key, which we have not built yet; choose Standard for items you plan to share.
Chat search. You cannot search across private chat threads by their message text, because we hold that text only in sealed form and cannot read it to match a query; open a thread to read it, and its memory of your edits carries across sessions as normal.
In-document search in chat. When you chat about a private review, the assistant searches your document by keyword rather than by meaning, so on very long documents it may miss a relevant passage a meaning-based search would find. This is because the semantic index would have to be built on our servers from your content, which stays sealed to your key.
Account data export. Your account export includes private items as sealed ciphertext, because producing readable copies on our servers would require reading content sealed to your key; open a private item in the app and download it there to keep a readable copy.
Timestamps. Private items record the day, not the exact time, because we deliberately coarsen their timestamps to reduce what activity records reveal; this is by design and needs no workaround.
Support recovery. Justee support cannot open, repair, or restore private content, because it is sealed to your key; keep your passphrase and recovery code safe, since losing both means no one, including Justee, can recover those items.
Scanned PDFs. Scanned PDFs are not yet supported in Full Private Mode. Reviews of scanned documents run in Standard mode for now.
Frequently asked questions
What is Full Private Mode?
How is this different from using ChatGPT, Gemini, or Claude directly?
What types of personal and business data are redacted?
Personal: names, emails, and phone numbers; Social Security numbers and tax identifiers; addresses and dates of birth; bank and credit card numbers; driver's license and passport numbers; medical provider identifiers and case numbers.
Business: company and organization names; business addresses and locations; SWIFT and BIC codes, IBANs, and routing numbers; business license numbers and attorney bar IDs; corporate tax identifiers (EIN).
Is redaction automatic, or do I need to run a tool?
Can automated redaction catch everything?
Can I let the AI see real names when I need precise drafting?
Full Private Mode is included on every paid plan
Turn it on whenever you need it, per review or across everything.
See plans
