Every model your lawyers want. No client data they can't account for.
Lawyers already draft with Claude, research with Perplexity, summarise with ChatGPT and use a dozen legal-specific tools. Agentu gives the firm one encrypted memory underneath all of them — organised by matter, walled by key, hosted where the client expects — so the partner who signs the engagement letter can say exactly where the client's information is and who can read it.
Four obligations, four controls
Confidentiality and privilege
Each matter is its own encrypted category with its own key. A model drafting on one matter cannot see that another exists. Nothing a lawyer puts into Agentu is used to train a model, and model calls run under business terms that say so in writing. Privilege is not waived by using an assistant whose provider cannot read, keep or learn from the material.
Conflicts and information barriers
An ethical wall is a set of keys, not a memo. Lawyers on the other side of a wall simply hold no key for the matter; a model they connect inherits the same restriction. When a wall is lifted or a lateral joins, keys are issued; when someone moves firm, they are revoked — in every assistant at once.
Residency and client requirements
Switzerland by default: neutral ground, outside both EU and US jurisdiction, recognised as adequate by the EU and the UK, so the engagement letter can say where client data is in one sentence. Where a client's terms require in-country storage, a regional home in the United States or Singapore as those go live. Storage, backups, keys and processing stay in the home. Data residency →
Retention, holds and erasure
When a matter closes and its retention period ends, destroying the matter key makes every copy unreadable, backups included — an erasure you can evidence rather than assert. Under a litigation hold, the key stays and the signed history proves nothing was altered or removed.
A week in a firm using Agentu
The matter opens
Intake creates the matter category and keys for the team. Client terms set the region. The firm's drafting assistant and research tool each get a key limited to the matter.
The work happens in several models
A first draft in Claude, case research in Perplexity, a translation in Gemini — all reading the same encrypted matter memory through their own keys, with every entry recording which model wrote it. Nothing is pasted between windows.
People and matters move on
An associate leaves: one revocation ends their access everywhere. The matter closes: retention runs, then the key is destroyed. The audit log shows every key use, never content.
What is live and what is not
| Capability | Status |
|---|---|
| Encrypted, categorised memory with per-model keys, signed history, export and crypto-shredding | Live |
| Connectors for Claude, ChatGPT, Perplexity, Gemini and any MCP-capable legal tool | Live |
| Swiss home (AWS Zurich) | Live |
| Agentu Professional: matter-level organisation, ethical walls as keys, several AIs on one matter at the same time, one brief to all of them, admin portal, one-action offboarding | In build |
| Regional homes in the US and Singapore | In build |
| Side-by-side answers from several models on one matter (Agentu Professional, compete mode) | In build |
| Document discovery across the DMS, Drive and e-mail | Planned |
| Professional-indemnity and cyber cover for Professional and Enterprise plans | Being arranged |
Regulatory notes: the SRA, bar associations and the EU's professional-secrecy rules each expect a lawyer to know where client data is and who can access it; Agentu is built so that question has a short answer. This page describes the product, not legal advice on your own obligations.