Built for the Confidential Nature of Legal Intake
Legal intake can involve highly sensitive personal and case information. Meet Gabbi is designed with security, privacy, and data separation as core considerations throughout the intake process.
We use established cloud infrastructure and security controls to help law firms protect the information entrusted to them, while giving firms greater control over the information retained within Meet Gabbi.
1 Encryption
Protection for data in transit and at rest
Meet Gabbi’s AWS-hosted database environment uses AES-256 encryption for data at rest. Data in transit within our application environment is protected using TLS
These safeguards help protect information against unauthorized access while it is transmitted and stored.
2 Client Data Separation
Your firm’s information stays separated from other firms
Meet Gabbi is designed to maintain separation between client environments so one firm’s information is not exposed to another firm’s users.
Each firm accesses its own Meet Gabbi environment, intake information, transcripts, and configuration based on its authorized access.
3 HIPAA-Supporting Infrastructure
Built to support firms handling sensitive information
Personal injury, medical malpractice, family law, mass tort, and other law firms routinely handle sensitive client information, including protected health information (PHI). Meet Gabbi is designed with security and privacy safeguards to help firms protect sensitive information throughout the AI-powered intake and client communications process and support workflows involving HIPAA-regulated data.
Meet Gabbi maintains Business Associate Agreements where applicable for services used in workflows involving protected health information.
Our infrastructure and security controls are designed to support HIPAA-conscious workflows, including encryption and access controls.
Because HIPAA compliance also depends on each organization’s policies, configuration, procedures, and use of technology, Meet Gabbi does not represent that use of the platform alone makes a law firm HIPAA compliant.
4 Transcript & Data Control
Your firm controls its retained intake information
When Meet Gabbi handles an intake conversation, information collected during that interaction can be made available to authorized users through the firm’s Meet Gabbi dashboard.
Transcripts retained within the Meet Gabbi platform remain available to the firm until they are deleted in accordance with the firm’s configured controls and applicable retention practices.
When a call is transferred from Gabbi to the law firm, Gabbi’s AI intake transcription ends. The subsequent conversation between the caller and the firm’s team is not part of the Gabbi intake transcript.
5 Access & Privacy
Designed around authorized firm access
Meet Gabbi is designed so that client information is accessible within the appropriate firm’s environment rather than being shared across customer accounts.
We apply access controls and infrastructure safeguards intended to reduce unauthorized access to client information.
6 Responsible AI & Data Handling
AI systems often involve multiple technologies working together, including telecommunications, cloud infrastructure, language models, and law-firm software integrations.
We believe firms should understand how their information moves through those systems.
Meet Gabbi evaluates the security and data-handling requirements of the providers used within our platform and configures our infrastructure with the confidentiality of legal intake in mind.
We do not describe our platform as “military-grade,” “unhackable,” or make security guarantees that no responsible technology provider can make.
7 Integrations
Security doesn’t stop at the Meet Gabbi dashboard
Meet Gabbi can integrate with law-firm systems and third-party platforms to move intake information into the workflows firms already use.
The security, privacy, and retention practices of connected third-party systems are also governed by those providers and by the firm’s configuration of those services.
We work to minimize unnecessary data movement and limit integrations to the information required for the intended workflow.
8 Security Is a Shared Responsibility
Designed around authorized firm access
Technology is one part of protecting confidential client information.
Meet Gabbi provides technical safeguards designed to protect information processed through our platform. Law firms remain responsible for their own user permissions, connected systems, internal policies, retention requirements, devices, and professional or regulatory obligations.
Our goal is straightforward: give firms a secure, transparent intake infrastructure without overstating what technology alone can guarantee.
Security Questions?
Law firms, enterprise clients, and technology teams evaluating Meet Gabbi can contact us for additional information about our infrastructure, data handling, integrations, and security practices.