Security & data handling
DeedScribe drafts deeds and transfer-tax forms from real client records. These are the commitments we make about that data, and how the product is built to keep them.
Last reviewed September 2026
Infrastructure
DeedScribe runs on established cloud infrastructure with a dedicated database for the product. Data is encrypted in transit between your browser and our systems and encrypted at rest by the hosting platforms.
The application, its database, and its email delivery are each provided by a separate specialist vendor; no one vendor holds everything.
Access
A firm is created by the first person who signs up from it, after confirming their email address; that person is the owner. A firm owner invites each colleague by email and assigns a role; only owners can manage members, firm settings, and integrations. Removing a member ends their access immediately.
Every screen and every data request requires a signed-in session. Sign-in links are single-use and time-limited, passwords have a minimum length, and known-compromised passwords are rejected.
Isolation
Every record belongs to one firm, and every read and write is scoped to the firm of the signed-in user. Another firm's deeds are not merely hidden from you; from your account's point of view they do not exist.
Your browser never talks to the database directly. All access goes through our server code, which identifies you first and then acts only within your firm.
AI
Reading a scanned prior deed, tidying the legal description, and the pre-generation review use a leading AI model through its commercial API. Only the material needed for that step is sent, the result comes back to you, and under the provider's commercial terms your inputs and outputs are not used to train its models.
We keep counts and cost per call so firm owners can see usage. We do not store the prompts or the responses. The cleaned Schedule A is always shown beside the raw extract so you can confirm nothing was altered before you sign off.
AI processing is included in every plan under a fair-use ceiling set well above ordinary deed volume. Owners are notified as usage approaches the ceiling, and manual deed preparation is never affected by it.
Documents
A prior deed you upload is read in memory to extract its text and fields and is discarded when the request completes; the PDF itself is not kept. The fields you accept become the deed record for your firm.
Generated deeds and transfer-tax forms are produced on request and returned to your browser. We do not keep copies of the generated files, and our logs record request metadata, never deed text or party names.
Sources
Parcel search and tax lookup draw on New York State's public assessment records. What comes back is shown to you and, if you start a deed from it, saved to that deed. We do not sell, share, or pool your firm's data with anyone, including other firms using DeedScribe.
Integrations
A firm owner can connect a practice-management system such as Clio. The connection is authorized by you, used only to look up matters and contacts and to post back to the matter, and can be ended at any time from either side. Only the fields you choose to import become part of a deed.
Roadmap
Single sign-on and a per-document audit log are planned for the Multi-office plan. If either gates your firm's decision, tell us; it helps us order the work.
Disclosure
Email support@deedscribe.com with “Security” in the subject and the steps to reproduce what you found. We read every report and will reply. While testing, please do not access another firm's data or disrupt the service. How we use and retain data is set out in our Privacy Policy and Terms of Service.