What leaves, where it goes, and when.
Each outside service Candor or its browser extension sends anything to, with what is sent. This page covers the Candor software and its extension; the privacy page covers this website.
What stays in the browser
Text someone screens, highlights or pastes to check, AI answers read for a citation check, and documents picked for a source-consistency check are all handled in the browser and never uploaded. What leaves is the result: that a check ran, which kinds of details it flagged, the citation strings it found, and counts. The extension talks only to your firm’s own Candor account at app.candor.legal. If the firm turns on fingerprinting, fingerprints of an AI answer go to the firm’s own record; the answer itself does not.
Lookups for citation checks
CourtListener, run by Free Law Project
- What is sent
- Only the bare citation string, such as “410 U.S. 113”.
- When
- When a citation check runs: in the app, in the extension, or on the free citation check.
- Never sent
- The text around the citation, case names, client names or matter names.
Legal Information Institute (Cornell Law School) and govinfo (U.S. Government Publishing Office)
- What is sent
- A U.S. Code title and section number, such as “42” and “1983”.
- When
- When a statute is checked. govinfo is used only when it is turned on.
- Never sent
- Anything else.
Services your firm connects
Your firm’s own AI provider
- What is sent
- A prompt, after it has been screened, on the firm’s own key.
- When
- Only when someone uses Candor’s workspace (Ask). What the provider does with it is set by the firm’s own agreement with that provider.
Clio
- What is sent
- Requests for the matter list, under the firm’s connection or each person’s own login, to fill in matter numbers and to apply matter walls. If the firm turns on write-back (off by default), a note on the matching Clio matter recording the fact of an AI use: tool, task, who, when, the data label, whether the review statement was made, the billing flag and the Candor entry number.
- When
- Only once the firm connects Clio. The matter list is never stored; matter numbers are held in memory for up to five minutes.
- Never sent
- A prompt or an AI answer.
Services that run Candor
Render
- What is sent
- The firm’s record, which Render hosts with Candor’s database.
- When
- Always; this is where the Candor software runs, in the United States.
Clerk
- What is sent
- Each person’s name, email address and sign-in details, and the invitations an administrator sends.
- When
- When people sign in or are invited.
Stripe
- What is sent
- The plan, firm name, attorney count and email from checkout. Card details go only to Stripe.
- When
- At checkout and for billing.
Resend
- What is sent
- Candor’s service email: the welcome email, setup, trial and billing reminders, and messages sent from Help in the app.
- When
- When one of those emails goes out.
Google Workspace
- What is sent
- Candor’s own inbox, where Help and Contact messages arrive. Each message is checked for client details first and refused if any are found.
- When
- When someone writes to Candor.
The companies that process a firm’s personal data on Candor’s behalf are the approved subprocessors in Annex III of the DPA.