Quantica Legal
Security and confidentiality
Last updated: 27 October 2026
Research with clear boundaries around your firm’s information.
Where data lives
Our database and sign-in service run on Supabase in Singapore. The application uses Vercel’s Singapore region (sin1), with global content delivery. Resend delivers email.
Protection
- HTTPS, HSTS and standard security headers protect connections to the application.
- Supabase encrypts customer data at rest and in transit. Provider details
- Database row-level security and account access controls keep each firm’s users and saved research separate.
Accounts
Supabase Auth handles passwords. New passwords must contain at least 12 characters. Two-step sign-in with an authenticator app is available in account settings; once enabled, your code is required to access the application.
Your data
- No third-party trackers and no advertising cookies.
- Search history is kept for 12 months, then deleted automatically.
- Searches are never used to train AI.
- Your searches never go to a public AI service.
- Data export or deletion is available on request.
Subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Primary database and sign-in | Singapore; support may operate elsewhere |
| Vercel | Application hosting and content delivery | Singapore (sin1); global delivery and operations |
| Resend | Service and enquiry email | Tokyo sending region; United States and provider locations |
For procurement teams
A security questionnaire and a data processing agreement are available on request.
Security reports and requests
Report a security concern or request an export or deletion at hello@quanticalegal.com.
Keep client names out of searches. Use the injury, occupation and relevant facts instead.