Security and trust, by default.
USLege holds the system of record for what your government says. We protect it to the standard that Fortune 500 teams, law firms, and government buyers require. SOC 2 Type II certified and TX-RAMP authorized. We never train on your data.
SOC 2 Type II
Independently audited. Report available on request, under NDA.
TX-RAMP
Certified for Texas public-sector procurement readiness.
We never train on your data
Your data is never training data, and never sold.
DPA available
A Data Processing Addendum is available for enterprise procurement.
Authentication enforced
Unique account authentication for every account, with production access restricted to authorized personnel.
Audited. Authorized. Verifiable.
We claim only the certifications we hold and can prove. Two of them, both independently verified.
SOC 2 Type II
Independently audited controls for security, availability, and confidentiality, tested over time rather than at a single point. Our SOC 2 Type II report is available on request, under NDA.
TX-RAMP
Certified under the Texas Risk and Authorization Management Program, the state framework for cloud security, so public-sector teams can procure with confidence.
Our full security posture lives in our Trust Center, where the TX-RAMP certificate is available and the SOC 2 Type II report can be requested under NDA.
We never train on your data.
Your tracked bills, briefs, searches, and team activity belong to you. They are never used to train AI models, never mixed across organizations, and never sold. The intelligence on your screen comes from the public government record, not from your work.
See exactly how we handle dataHow your data is handled.
Built for teams who answer to procurement, legal, and a board. Here is what happens to your data inside USLege.
Your data is yours
You retain full ownership and control of your content. Request deletion in writing and we delete your data within 60 calendar days, except where law requires retention, in routine backups, or in de-identified form.
Never training data
Content you bring into USLege, and your inputs to AI features, are never used to train models and are not retained for training.
Never sold, never shared
We do not sell or share your personal information, in line with the CCPA.
Only the right people, only the right access.
Authentication and access controls sized for enterprise government affairs teams.
Account authentication enforced
Unique account authentication is enforced for every account. No feature gates and no forced upgrades. Enterprise SSO via SAML, OIDC and Microsoft Entra ID; talk to our team about getting set up with your identity provider.
Production access restricted
Access to production and to customer data is restricted to authorized personnel on a least-privilege basis.
Encryption key access restricted
Access to encryption keys is restricted and controlled, a published control in our SOC 2 program.
Resilient by design.
The platform behind the largest transcribed government video archive in the world, built to stay secure and stay up.
Enterprise cloud
USLege runs on enterprise cloud infrastructure, covered by the controls independently audited in our SOC 2 Type II program.
Encrypted in transit and at rest
Customer data is encrypted in transit and at rest, and data transmission is encrypted end to end.
Tested and monitored
Controls are continuously monitored, with live status published in our Trust Center and real-time uptime at status.uslege.ai.
Backups and recovery
Automated backups and a disaster-recovery plan keep your data available.
Incident response
A formal incident-response process, with prompt, transparent notification if an event affects your data.
Retention and deletion
Clear data retention and deletion practices, with deletion on request when you close your account.
The documents your procurement team needs.
Terms of Service
What governs your use of the Service, including licensing, data use commitments, and dispute resolution.
Privacy Policy
What we collect, why, who we share it with, how long we keep it, and how to exercise your rights.
Trust Center
Live certifications and controls, the TX-RAMP certificate, and the SOC 2 Type II report on request under NDA.
System Status
Real-time uptime and incident history across the application, legislative data, AI, and alerts.
Need a Data Processing Addendum for procurement? Email support@uslege.ai or ask your account manager and we will send it over.