Practices

Products

For Lawyers

For Clients

Our standards

About Us

Request a Demo

/about us

Data privacy

and Security

Manifest is a SOC-2 compliant company that takes data privacy seriously and rigorously protects customer data.

01

Security

Manifest Law is designed to protect customer data through encryption, access controls, and audited security processes.

02

Data protection.

Encryption at rest and in transit.

Customer data is encrypted at rest and encrypted in transit using industry-standard protocols.

Access controls and least privilege.

Access controls
and least privilege.

Access to production systems and customer data is restricted to authorized personnel and follows least-privilege principles. Access is reviewed and logged.

Key management.

Key
management.

Encryption keys are managed with access restrictions and operational controls intended to reduce unauthorized access.

Encryption at rest and in transit.

Customer data is encrypted at rest and encrypted in transit using industry-standard protocols.

Access controls and least privilege.

Access to production systems and customer data is restricted to authorized personnel and follows least-privilege principles. Access is reviewed and logged.

Key management.

Encryption keys are managed with access restrictions and operational controls intended to reduce unauthorized access.

03

Privacy.

No training
on customer
data.

We do not train our models on customer inputs, outputs, or uploaded documents.

Purpose
limitation
and data minimization.

We collect, process, and retain data only as needed to provide the service, maintain reliability, and meet legal and compliance requirements.

“At Manifest, security isn’t a feature we add at the end — it’s the foundation everything is built on. Every system, workflow, and decision starts with protecting our clients’ data.”

Chief Technology Officer AT MANIFESt
Ex. Google, Bloomberg, Digital Ocean, Gro Intelligence

04

Compliance.

Manifest Law is SOC 2 Type II certified, which reflects an independent assessment of the design and operating effectiveness of security controls over a period of time.

For vendor security reviews, we can provide relevant compliance materials under NDA where applicable.

05

Secure
development & operations.

Secure development & operations.

Secure development lifecycle.

Security checks are integrated into the development process. This includes:

Dependency and vulnerability scanning
Secrets detection Code review and change
management Pre-release validation

Monitoring
and incident
response.

We monitor critical systems and maintain documented procedures for incident triage, escalation, and response.

Security
governance.

Security responsibilities, training, and policies are maintained as part of our SOC 2 program.

Secure development lifecycle.

Security checks are integrated into the development process. This includes:

Dependency and vulnerability scanning
Secrets detection Code review and change
management Pre-release validation

Monitoring
and incident
response.

We monitor critical systems and maintain documented procedures for incident triage, escalation, and response.

Security
governance.

Security responsibilities, training, and policies are maintained as part of our SOC 2 program.

Secure development lifecycle.

Security checks are integrated into the development process. This includes:

Dependency and vulnerability scanning
Secrets detection Code review and change
management Pre-release validation

Monitoring
and incident
response.

We monitor critical systems and maintain documented procedures for incident triage, escalation, and response.

Security
governance.

Security responsibilities, training, and policies are maintained as part of our SOC 2 program.

Secure development lifecycle.

Security checks are integrated into the development process. This includes:

Dependency and vulnerability scanning
Secrets detection Code review and change
management Pre-release validation

Monitoring
and incident
response.

We monitor critical systems and maintain documented procedures for incident triage, escalation, and response.

Security
governance.

Security responsibilities, training, and policies are maintained as part of our SOC 2 program.

“We optimize for quality first, always. Growth, scale, and efficiency only matter if the outcome is something we’re proud to put our name on.”

Chief Technology Officer AT MANIFESt
Ex. Google, Bloomberg, Digital Ocean, Gro Intelligence

CONTACT US

+1 212 246 6212

help@manifestlaw.com

Locations

333 Park Ave S

Office 3C

New York NY 10010

2550 W. Union Hills Dr

Suite 350

Phoenix AZ 85027

Find US

Attorney Advertising This website is intended for general informational purposes only. It does not constitute legal advice and is no substitute for consulting a licensed attorney. Only an attorney can provide you with legal advice, and only after considering your specific facts and circumstances. You should not act on any information on this website without first seeking the advice of an attorney. Manifest Law is an association of lawyers and legal entities that have agreed to do business under a common name, which includes Manifest Legal Services LLC and Manifest Law, PLLC. The use of the name “Manifest Law” does not imply that all lawyers or legal entities within the Manifest Law family are part of a single partnership or that they are responsible for the acts or omissions of each other. Any specific attorney-client engagement, the scope of any such attorney-client relationship, and the legal responsibility for any such engagement will be set forth in the retainer agreement entered into between the client and the relevant Manifest Law attorney(s). All legal services are conducted by licensed immigration professionals. Manifest Legal is an Arizona ABS company. This website is regulated by the Arizona Rules of Professional Conduct

Editorial Policy

Do Not Sell My Personal Information