Skip to content

Your firm's work, contained. Agents inside.

Everything in Misolla is scoped to your firm, and a firm can run in its own dedicated environment. The agents that work on your documents use the same firm-scoped access as your people, and nothing consequential leaves the firm until someone there approves it.

How the privacy process works.

Misolla control planeprovisioning · identity · billing
Firm
Firm A
Data
Agents
Tools
✕no unapproved sends
Firm · expanded
Firm B
firm-scoped access · per-firm keys · audit log
D1
Data plane
Kept in the firm's own records
Document store
uploads · drafts · exports
Vector index
embeddings · clause memory
Audit ledger
hash-chained · per-firm
A1
Agent runtime
Agents work on this firm's data only
Copilot
orchestrator
Advisor
analysis
Drafter
documents
T1
Scoped tools
Called only for this firm's work
Retrieval
firm-scoped search
Template engine
per-firm clauses
Signature service
scoped envelope
✕no cross-firm reads
✕no unapproved filings
Firm
Firm C
Data
Agents
Tools
✕no unapproved sends
no cross-firm reads
1
Scoped to your firm
Every request is scoped to the signed-in person's firm. A dedicated environment — its own database, storage and keys — is available on request.
2
No cross-firm reads
Documents, search index and audit trail are read only within the firm, and automated tests check that one firm cannot reach another's.
3
Agents work within the firm
Agents read and act through the same firm-scoped access as the people at the firm.
4
Nothing leaves unapproved
Filings, signatures and anything sent outside the firm wait for a person at the firm to approve them, and each is written to the audit log.

Containment

Every request is scoped to the firm the signed-in person belongs to, and automated tests check that one firm cannot reach another firm's documents. A firm can also run in its own dedicated environment — its own database, file storage and encryption keys — set up with our team.

Data locality

In a dedicated environment, documents, the search index and the audit log sit in that firm's own database and storage, shared with no other firm. In the shared service, the same records are kept per firm and read only within it. Pinning that data to a chosen region is in progress.

Nothing leaves unapproved

Filings, signatures and anything sent outside the firm wait as proposals until someone at the firm approves them, and each one is written to the firm's audit log. Blocking all other outbound network traffic by default is in progress.

Want the security pack?

Architecture, key management and audit controls — available under NDA for prospective customers.

Request the security pack →