Security
The page for your IT review.
Every statement here is an architectural fact, not a policy, and the ones that matter are written into the license agreement. Nothing on this page is aspirational.
That is the complete list. The only connection Soltris ever opens is to the AI provider your firm configured, on your firm's account.
What IT will want to know.
In the order the security review asks.
- No connection to Soltris, ever
- No telemetry, no usage reporting, no license server, no account. The license is a signed file verified on the workstation. There is no Soltris cloud for your data to reach.
- No access to your environment
- Soltris has no standing access to your premises, systems or matter data, and no remote-access capability is built into the product. Remote support happens only when your firm asks for it or agrees to it, nothing seen in a session is kept, and the license agreement says so.
- AI runs where you point it
- A request goes directly from the workstation to your own provider account, under your agreement and your retention terms. Soltris is never in that path, and with no provider set there is nowhere for a request to go.
- The credential belongs to your IT
- Your IT writes the AI credential at deployment. It is encrypted with a certificate inside your SQL Server, and it is never displayed, exported, logged or included in a diagnostic report. The admin screen can select, test and clear a provider; it cannot read or enter a key.
- Diagnostics are yours to send
- A diagnostic report is generated only when a user asks for one, is scrubbed of case content, and goes nowhere unless you send it. Support materials are shared at your initiative, not collected.
- A lapse never locks you out
- An expired license makes the application read-only. Open, search, print and export keep working. Soltris never deletes, encrypts or disables anything.
Access control and audit, inside the case.
Four roles, from Administrator to Read Only, set who can import, annotate, designate and administer. A per-case user activity trail records who did what, and deletions are soft: recoverable, and logged.
Authentication and the database live in your own environment, under the controls your firm already runs.
The build itself
The installer and the application are code-signed by Soltris Technologies LLC, so your endpoint tooling can verify what it is running. Releases are deployed by your IT on your schedule; nothing updates itself.
Bring the hard questions.
The demo is better with IT in the room. Ask about the credential, the network posture, the schema, the roles; the answers are the reason firms choose Soltris.