What portion of Ugandan law do you hold, and when was it updated?
Published in full on our corpus coverage page, source by source and with a date, including the courts we have not ingested. In short: legislation is held complete to the 7th Revised Edition; Supreme Court judgments are complete, the High Court substantially so, the Court of Appeal partial, and the Constitutional Court is not yet ingested.
Does client data train any model?
No. We do not train models on your content, and our agreements with the model providers do not permit them to use content submitted through our accounts to train theirs. Your matters are used to answer your questions and for nothing else.
Which third-party AI providers process firm data, and where?
The models do not run on our own hardware, so answering a question means sending the relevant part of the matter to a model provider. The providers that can receive matter content are:
| Provider | Function | Processes in |
|---|---|---|
| Anthropic | AI assistant, drafting and research | United States |
| DeepSeek | Alternative model, only where a firm enables it | China |
| Voyage AI | Document and memory search indexing | United States |
| Mistral | Optical character recognition for scanned PDFs | European Union |
| AssemblyAI | Speech-to-text, only when voice is used | United States |
| ElevenLabs | Text-to-speech, only when voice is used | United States |
Which provider handles your firm’s content is configurable. A firm can restrict processing to a single approved provider, and an administrator can narrow that choice further for individual members. DeepSeek is off unless your firm turns it on. The full subprocessor list, including the services that never see matter content, is in the Privacy Policy.
Our application servers and document storage are hosted outside Uganda. Section 19 of the Data Protection and Privacy Act, 2019 permits such transfers where the receiving country affords adequate protection or where consent is given; we rely on the contractual protections in our agreements with each provider.
A firm that needs its data kept on infrastructure it controls can ask about a self-hosted instance, or about a dedicated instance that we run for that firm alone. Both are in early access. The deployment page compares them with the cloud service.
Are you SOC 2 or ISO 27001 certified?
No. We do not hold SOC 2 Type II or ISO 27001. We are a young company and we have not been through those audits. If your client’s legal department audits its advisers’ vendors and requires a certification, we will not satisfy that requirement today, and you should know that before you start rather than at the end.
What we do have, and what each of these actually means:
- Firm-scoped isolation — a firm’s data is scoped to that firm. Access is granted through firm membership, and there is no cross-firm view of matters, documents or knowledge.
- Role-based access within the firm — matters and vaults are visible according to role and membership, so a firm can keep a matter to the team running it.
- Approval on every outward action — the assistant proposes; a person approves. Nothing is filed, sent, saved or changed on a matter without a member of your firm signing it off.
- Attributable output — what the assistant produces points back to the matter file, the firm document or the provision it came from, so any answer can be traced to its source.
- An audit trail — actions taken in the workspace are recorded, so you can establish what happened and who did it.
- Encryption in transit — traffic to and from PractoCore is encrypted with TLS, and uploaded documents sit in object storage that is not publicly listable.
- Confidentiality in practice — we treat everything in a matter as privileged. Our staff do not read matter content except where you ask us to in order to resolve a support issue, or where we are compelled by law.
None of that is a substitute for an audit and we are not presenting it as one. It is the honest description of the controls that exist, which you can test.
Can we export everything, at any time?
Yes, and it is a term of our agreement rather than a favour: the Terms of Use give you the right to export your data, and on termination your content stays available for 30 days so that you can. Nothing in our terms claims ownership of your matter content — your documents remain yours.
The limitation you should know about: there is no self-serve export button in the product today. Export is a request to us, which we fulfil — matter data in a structured, machine-readable form another system can read, and documents in the format you uploaded them in. There is no exit fee and no proprietary lock on the file format, but the mechanism is us running it rather than you clicking it. A self-serve export is work we have not done yet, and we would rather say so than let you assume the button is there.
If continuous, unassisted export matters to your firm, say so before you sign and we will agree a schedule or a delivery commitment in writing. Billing records are kept for as long as Ugandan tax and company law requires.
What happens to our data if you cease trading?
This is the right question to ask a small local company, and the honest answer starts by conceding the risk: we are a young Ugandan company, and a firm that depends on us is exposed to us in a way it is not exposed to a large international vendor.
What we commit to against that. If we were to wind down we would give notice to account administrators and keep the service available for an export window rather than switching it off, and your content would come back to you. Nothing in our terms claims ownership of your matter content.
And the practical answer, which is better than any promise: take exports on a schedule from the day you start. We will run them for you as often as you want — quarterly, monthly, at the close of each matter — so that your firm holds a complete, current copy of its own file independently of whether we are here. A firm doing that is exposed to our disappearance for the length of one export cycle, not for the length of its file.
We are not going to pretend a written commitment removes the risk. Ask us for the first export in your first month and judge the answer by whether it arrives.
Why buy from a small local company at all?
Because the things that make us small are the same things that make us useful here. Ugandan procedure, the Ugandan corpus and a live connection to ECCMIS are not on any international platform’s roadmap, and a change your firm needs is a conversation with the people who wrote the code rather than a request in a queue set by firms with three thousand lawyers.
Where we would not recommend us: cross-border transactional work under English or New York law, and bulk due diligence across very large document sets. The international platforms are materially better at both and we are not going to close that gap on a timescale that helps you.
Something we have not answered
Put it to us at contact@practocore.com and we will answer in writing. If the answer is no, or not yet, we will say that.
Questions about this document?
Write to contact@practocore.com, or see the contact page. The coverage page states what we hold, and the Privacy Policy carries the full subprocessor list.