Security
Security built for sensitive legal work
Poppy protects legal and financial data with independently audited controls, clear AI boundaries, and safeguards designed for modern legal teams.
How we protect data
Protection at every layer.
Responsible AI
AI with clear boundaries.
AI should support your team without compromising confidentiality, control, or professional judgment. Poppy is designed around those boundaries from the start.
AI output is reviewable and grounded in the underlying source material.
Customer data is never used to train Poppy or third-party models.
Users remain in control and decide what action to take.
Evidence
The details are there when your security team needs them.
Our Trust Center is the source of truth for current security documentation. Request reports, inspect control coverage and policies, and review the subprocessors that support Poppy.
SOC 2 Type II report
Request access to the latest independent report.
Policies and control coverage
Review how Poppy manages security across the organization.
Subprocessors
See the services that support Poppy and the data they process.
Security questions
Ready when you are
Experience how Poppy combines modern legal spend management with the safeguards your organization expects.