Security and confidentiality
Where your work is held, how it is processed and who can access it. These are the commitments behind Alesis.
Your firm's work is kept apart from every other firm's. Nothing your firm uploads, asks or drafts can surface for anyone else, and nothing of theirs can surface for you.
Nothing you upload, ask or draft is used to train anything for anyone else. Your work helps Alesis answer you; it does not teach a model that answers anybody else.
Inside the firm, people see only the matters they are on. Seniority does not grant a view: even a firm owner sees a matter only once they are added to it.
Every account proves its email address before it can work, only a firm's own addresses are accepted, and every account can add two-factor authentication and passkeys.
Alesis treats every document you upload as material to be read and weighed, not as orders to be followed. The other side's paperwork is something it examines, not something it obeys.
Alesis cannot file, serve or email anything. It prepares the work; your people decide what goes out, and when.
Every answer keeps the sources it rested on and the steps it took to get there, so you can show afterwards what was relied on and where it came from.
Alesis reads official bodies and regulators. Your firm decides which other publishers it trusts and who may approve them. These are always identified as your firm’s own choices.
Delete a conversation, a document, a person’s access or the whole firm whenever you decide. You do not need to raise a support ticket.
Being audited against the standards careful firms ask for. A SOC 2 report and an ISO certificate are issued at the end of an audit period, not the start of one. Alesis is in that period now, and its UK GDPR compliance is in place.
Check the live statusThe audit period is under way. An independent auditor examines how we protect the information firms give us over a period of months, not on a single day, and the report issued at the end of it is the one your IT reviewers will ask to see.
Certification is under way against the international standard for managing information security: knowing what you hold, who can reach it, what could go wrong and what you would do about it, examined by an outside certification body.
Certification is under way against the standard written for organisations that build and run AI. It asks how a system is designed, watched, governed and corrected: the questions a COLP asks before trusting an assistant with client work.
Alesis is compliant with UK GDPR and the Data Protection Act 2018. The records, agreements and procedures behind that are in place, reviewed, and ready for a firm's due diligence.
Send the questions your COLP, insurers or IT reviewers need answered. You will receive a written response from the people responsible for Alesis.
Alesis is built and run by Alesis.ai Limited, registered in England and Wales. When you write to us, the people who answer are the people responsible for the product, and they are here in the UK.
The policies and live status of each standard are on the Trust Centre, open to anyone.
