Capture everything. A person decides.
AI drafts. A person files, sends, and clears every gate. Ezra never writes to a client on the paths a person owns, never moves money, and never clears a compliance check on its own.
The promise
AI drafts. A person decides.
Notes, time entries, replies and onboarding packs stay drafts until someone at the firm files or sends them.
Never sent to a client alone.
Client-facing messages that a person owns go through an approvals queue. Automated operational messages — form acknowledgements, appointment reminders, e-signature chasers, the identity-check heads-up — each have an off switch.
Never moves money.
Funding alerts notify the firm. Bills and the client account stay in Clio. Ezra does not take, transfer or release client money.
Never clears a compliance gate.
A referred Thirdfort result waits for a person. Conflict matches at or above the review threshold wait for a person. The convert button stays dead until the gates are done.
Data we hold
Leads and enquiries
What arrived, from where, and where it sits in the pipeline — including form answers and call metadata the firm captured.
Recordings and notes
Meetings the firm chose to record. Retention of recordings and transcripts follows the firm's rules — how long they last is a firm-level setting.
Calendar busy/free
Enough of a connected Google Calendar or Outlook to offer real booking slots and to know which meetings the notetaker should join. Disconnect the calendar and the tokens are deleted.
Recording
Visible on the call. Spoken notice. In the room, the lawyer tells the client.
Visible join
On Google Meet, Microsoft Teams and Zoom the recorder joins as a named participant carrying the firm's name. It does not sit invisibly in the call.
Spoken notice
When the first person from outside the firm arrives, a spoken notice tells them the meeting is being recorded.
In the room
The desktop recorder for in-person meetings does not join a call and does not announce itself. Telling the client is the lawyer's job, every time.
Google and Microsoft calendars
Connect a calendar so consultations book onto real availability and the notetaker can join. Disconnect any time. Tokens are then deleted.
What we ask for
Calendar events and free/busy on the connected Google Calendar or Microsoft 365 / Outlook account — titles, times, attendees and the identifiers needed to create or update a booking, and to join the meetings the firm's rules say should be recorded.
What we do not ask for
Gmail, Google Drive, Outlook mail or OneDrive. Calendar data is not sold, not used for advertising, and not used to train general-purpose models.
How to disconnect
A lawyer or administrator disconnects the calendar in Ezra. Tokens are then deleted. Google and Microsoft account settings can revoke access independently.
Controls
Encryption
Data in transit is TLS. Data at rest is encrypted by the hosting providers we use.
Access control
Three layers: the pages a role can open; a per-person finance-visibility grid; and a per-matter rule that can close a sensitive file to everyone outside its team, the people named on it, compliance and administrators.
Audit log
Matter access decisions are written to an access log. Compliance overrides are recorded, not skipped.
Per-firm isolation
Each firm is an isolated tenant. A second firm does not go live until that isolation is verified.
No training on firm data
Firm recordings, notes and Clio data are not used to train general-purpose models.
What we will not claim
No certification badge.
This page names no ISO, SOC or Cyber Essentials mark. What it describes is how the product behaves.
No named client.
Ezra runs in production at a UK law firm, every working day. The firm is not named, and no logo, quote or case study stands in for one.
No AI supplier named here.
Recording, transcription and language-model suppliers are named on request for a DPIA. That is a deliberate policy, not an omission — the list changes, and the DPIA is where it is answered.
Request access
We onboard firms one at a time, with the team close by.
Tell us where to reach you and what you’re trying to fix, and we’ll be in touch. Only the email is required.
Your request is in. We read every one ourselves and reply by email.
What Ezra connects to