Security & professional responsibility
Evidence deserves better than a consumer upload box
BodyCamAI is built around the duties defense counsel already carry: confidentiality, competence with technology, and control over client material.
- An encrypted evidence vault, reserved for your account. Discovery files upload over TLS into private cloud storage that is encrypted at rest and never exposed through public links. Every read and write goes through a short-lived signed URL issued to your signed-in session, and the Solo plan includes 200 GB. Your browser keeps a local copy of recently used files for instant playback, but the vault is the system of record and follows you to any device.
- Processing stays inside the walls. When the AI reviews a video, our servers read it directly from your vault, derive downscaled frames and compressed audio for analysis, and discard them once your results are written. Nothing footage-derived is retained outside the vault and your results.
- No training on your data. Your footage is processed for your analysis only. Our model providers are contractually barred from training on customer content.
- Managed authentication by Clerk. Passwords, MFA, and session security are handled by a dedicated auth provider; we never see or store credentials.
- Access is scoped, always. Every database query and vault operation is scoped to your account, or to your firm workspace when you explicitly share a case. Payments are processed on Stripe’s systems; card numbers never touch ours.
- Verifiability over vibes. Every AI finding carries a timestamp back to the source second. Findings are a reviewing aid; counsel verifies against the footage.
- Delete means gone. Delete a video or a case and the vault files are deleted along with the findings, permanently. Keep your original discovery files in your own evidence storage as a matter of practice.
- Roadmap. SOC 2 Type II, audit logs, and SSO/SAML. Ask for current status before onboarding sensitive matters.