Security standards
Reunify Science is local-first for sensitive case records. Read the project’s current controls, user responsibilities, and the limits of what the site promises.
Local-first records
Case Builder records and evidence remain in the browser on the device where they are entered unless the user explicitly exports a backup. Browser storage is not automatically encrypted or tamper-proof.
AI processing
Communication Coach previews redactions and requires approval before sending text to the rewrite endpoint. The service is designed to receive placeholders rather than names, contact details, URLs, or case identifiers.
Optional encrypted sync
When Convex/auth is configured, an authenticated user may explicitly sync a client-side AES-GCM encrypted envelope. The passphrase and plaintext do not enter Convex. Local-first storage remains the default, the feature is not a HIPAA claim, and hosted attorney-share links are not enabled.
Release boundary
Production sync requires access, retention, deletion, audit, incident-response, and legal gates. Do not treat the scaffold as a secure evidence-management system.