Policies & Procedures

By using Legal Risk Alert you agree to:

• Use the service only for lawful purposes.
• Not share your account or transfer access to another person.
• Not attempt to bypass paywalls, entitlements, or access controls, or reverse engineer the platform.
• Not upload material that is illegal, defamatory, discriminatory, or infringes anyone's rights — this applies to Document Vault uploads as well as discussion posts (see section 20).
• Not use automated tools to scrape or bulk-download course content.
• Not present a Compliance Audit report as an independent audit, certification, or legal opinion, and not alter a report we issue (see sections 18 and 19).

Serious or repeated breaches may result in suspension or termination of your account.

• You must provide accurate registration information and keep it up to date.
• You are responsible for keeping your password confidential and for all activity on your account.
• Report any suspected unauthorized access to support immediately.

In discussions, live sessions, and any user-generated content:

• Be respectful and professional. Attack ideas, not people.
• Do not post harassing, hateful, sexual, or discriminatory content, or content that targets a person based on identity.
• Keep personal information private — yours and others'.
• Use the report tool to flag anything that breaches this code.

Moderators may edit, hide, or remove posts and suspend accounts to enforce the code.

• Do not share quiz or exam answers.
• Do not submit work generated entirely by another person or by AI as if it were your own.
• Cite sources where required. Suspected breaches may result in a failed assessment or removal from the course.

• Prices are shown in the currency listed at checkout and include applicable taxes.
• Subscriptions renew automatically until cancelled. You can cancel at any time from Account → Billing; access continues until the end of the paid period.
• Refund requests for one-time course purchases may be submitted within 14 days of purchase provided you have completed less than 25% of the course.
• Refunds for organization plans are handled under your written agreement.

• Course materials, videos, quizzes, and certificates are the property of Legal Risk Alert or its licensors. You receive a limited, personal, non-transferable licence to access them for learning.
• Anything you submit (notes, posts, assignments) remains yours. You grant us a licence to host and display it as needed to operate the service.

• Content must be accurate, up to date, and clearly distinguish general information from country-specific legal advice.
• Cite sources and honour copyright.
• Do not use learner data outside the platform without explicit consent.
• Follow the payouts schedule and tax reporting requirements described in the instructor dashboard.

• Only invite people you are authorized to enroll.
• Deactivate members promptly when they leave; do not reassign a live account to a different person.
• Keep at least one active admin at all times.
• Handle member data in line with your own privacy obligations.

We collect only the data needed to operate the service and improve learning. See the full Privacy Policy and the Privacy & data guide for details on export and deletion. Compliance Audit submissions and Document Vault contents are covered by the additional sections below (18 to 25).

We do: operate the platform securely, encrypt data in transit and at rest, keep Document Vault files in private storage, log vault access, and monitor for abuse.

You do: choose a strong password, enable two-factor authentication where available, keep your Vault PIN confidential and never share it, keep your devices patched, and report suspicious activity. We cannot recover a Vault PIN for you, and losing control of your own credentials is not something we can undo on your behalf.

1. Contact support with a description of the barrier and any adjustment you need.
2. We acknowledge within two business days and confirm the plan and timeline within ten business days.
3. Where an immediate fix is not possible, we agree an interim workaround with you.

• Bugs and product issues: use the in-app Help & Support widget.
• Content or conduct concerns: use the report tool on the relevant post or contact support.
• Unlawful or abusive content in a vault: email legal@legalriskalert.com with the account or reference details and the reason for your concern. See section 20 for how we handle these reports.
• Security vulnerabilities: email security@legalriskalert.com. Please do not disclose publicly before we have had a reasonable chance to respond.

We may suspend or terminate access for serious or repeated breaches of these policies, non-payment, or where required by law. Where appropriate we will notify you and give a chance to respond. You may close your account at any time from Account settings.

Discussion posts (private cohort threads and public threads) are checked by an automated moderation pass and, where flagged, held for human moderator review before appearing. Moderators may edit, hide, or remove posts, and repeated breaches may lead to loss of posting privileges. Do not share personal data of others, exam answers, or content that breaches the code of conduct in section 3.

• Do not identify yourself in a peer review or attempt to identify the author.
• Grade only against the published rubric and provide specific written feedback.
• Collusion, retaliation, or gaming assigned reviews may result in a failed assignment.

The AI Tutor is provided to help you understand lesson content. It may make mistakes and does not replace advice from a qualified professional in your jurisdiction. Your prompts and its responses are stored to your account so you can review or delete them; aggregated, de-identified usage may be used to improve the tutor. Do not paste confidential client data, personal data of third parties, or regulated information into the tutor.

The Book a virtual meeting button opens alertmeeting.org in a new tab. That is a distinct product with its own terms and privacy notice — no personal data leaves Legal Risk Alert when you click the link, but the destination site may set its own cookies and collect information you provide to it. Review its policies before creating an account there.

The Legal Compliance Audit is an AI-assisted legal risk assessment generated from the answers and evidence you provide. It is legal risk management information — not legal advice, not an audit opinion, not a certification, and not regulatory clearance or approval of your organization.

• Accuracy of input: results depend entirely on the accuracy and completeness of the information you give us. Incomplete, out-of-date, or inaccurate answers will produce unreliable findings. We do not independently verify your answers or inspect your records unless you ask us to.
• No reliance: do not rely on a report alone for regulatory filings, board or trustee decisions, funder or insurer representations, or litigation. Confirm material findings with a qualified lawyer in your jurisdiction.
• No lawyer–client relationship: buying an audit, a consult, or a report does not create a lawyer–client relationship with us.
• Consults: a 30-minute virtual compliance consult (video or audio call) is a guided discussion of your report. It is subject to the same limits as the report itself.
• Liability: to the maximum extent permitted by law, our liability in connection with an audit or report is limited to the fees you paid for that report.

Reports are issued as PDF only. Each copy is watermarked with the recipient's details and carries a unique Report ID and integrity checksum, so any recipient can confirm a report is genuine and unaltered on our report verification page.

• Download links are time-limited and expire. You can request a fresh link from your report page at any time while your account is active.
• You may share your own report with your board, advisors, funders, insurer, or counsel. Sharing does not transfer any licence in our templates, methodology, or scoring model.
• Editing, re-typing, re-labelling, removing the watermark or Report ID, or presenting a report as an independent audit, certification, or legal opinion is a serious breach of these policies and may result in termination.
• We do not issue editable versions of reports, and we do not certify reports we did not generate.

Document Vault is secure cloud storage. We act as a storage provider only — we are not a custodian of record, escrow agent, registered office, or your law firm, and storing a document with us does not satisfy any statutory filing or record-keeping duty on its own.

• You remain the owner of your files and are responsible for their accuracy, legality, and for having the right to store them — including consent where a file contains someone else's personal data.
• Organization vault is for governance, compliance, and succession-critical records. The free Personal (Vault Starter) vault is for family, property, and identity documents. Keep personal records out of the Organization vault if you do not want them visible to organization admins.
• Vault transfer: you can send selected documents to any Legal Risk Alert user — for a leadership or role change, a staff or department change, an advisor handoff, estate or succession planning, or any other reason. You choose whether to move ownership (the documents leave your vault, with a 14-day window to undo) or send a copy (your originals stay with you and the copy cannot be reverted). Personal vault documents are never included unless you select them yourself and confirm the warning. Every transfer needs acceptance by the recipient and is recorded in the vault audit log.
• Vault PIN: vault access uses an additional step-up PIN. Keep it confidential. We cannot see or recover your PIN.
• Backups: we operate platform backups, but the vault is not a substitute for your own copy of legally critical originals. Keep originals of anything you cannot afford to lose.
• Document Vault is a convenience copy. It gives you quick, organized access to your records anytime, anywhere, but it does not replace your original documents or other backups. Do not delete or destroy other copies simply because they are stored here.

• Vault files are stored in private storage, encrypted in transit and at rest, and are not publicly addressable.
• Access is limited to you, people you explicitly grant access to, organization admins for Organization vault records, and Legal Risk Alert staff acting on an explicit consent grant (see section 23) or where strictly necessary to operate or secure the service.
• We do not read your documents for advertising, do not sell them, and do not use them to train AI models.
• Staff with any access are bound by confidentiality obligations, and every vault access or assist action is written to an audit log you can review.

You must not upload, store, or transmit through any vault or form:

• material that is unlawful to possess, create, or distribute in your jurisdiction or ours;
• child sexual abuse material, or content promoting terrorism, trafficking, or violence;
• proceeds or instruments of crime, forged or fraudulent documents, or records created to conceal, launder, or misrepresent unlawful activity;
• stolen, hacked, or unlawfully obtained data, credentials, or third-party confidential information you have no right to hold;
• malware, or content designed to compromise systems or people;
• material that infringes copyright, trade-mark, trade-secret, or privacy rights.

Upload screening (format, not content). Every upload is checked on our servers — not only in your browser — before it is accepted. We accept PDF, Word, Excel, PowerPoint, plain text, CSV and common image formats only, within the per-file size limit for your plan. Executables, scripts, installers, archives, macro-enabled Office files and files whose contents do not match their name are rejected, and anything that fails the check is deleted rather than stored. This is a format and safety check; it is not a review of what your documents say.

We do not proactively scan, read, or inspect the contents of vault documents. Beyond the format and safety checks above, there is no automated content screening of your documents, no anti-virus scanning of file contents, and no routine human review. That also means we are not in a position to detect prohibited material on our own — you are solely responsible for what you upload, and you should run your own anti-virus software on files before uploading and after downloading them.

Where your files are held. Vault documents are stored in a private, access-controlled cloud storage bucket operated by our infrastructure provider on enterprise cloud infrastructure — not on LRA office equipment or personal devices. Files are encrypted in transit and at rest, are not publicly addressable, and are served only through short-lived signed links issued per request. We do not describe any system as unhackable; we commit to layered safeguards, least-privilege access, and a complete audit trail, and we ask you to keep an independent copy of anything business-critical.

Where we receive a credible report or complaint, or a valid legal order, we may (proportionately and as the situation requires):

1. suspend access to the specific file, vault, or account;
2. preserve the material and related access logs so they are not lost while the matter is assessed;
3. inspect only what is necessary to respond to the report or comply with the order;
4. disclose material and account information to law enforcement, regulators, or a court where we are legally required to, or where we reasonably believe there is a risk of serious harm;
5. remove the material and terminate the account.

We will notify you of a suspension or disclosure where we are legally permitted to do so and where doing so would not prejudice an investigation. You agree to indemnify Legal Risk Alert against claims, penalties, and costs arising from unlawful or infringing material you upload. Reports of prohibited content go to legal@legalriskalert.com.

Vault Assist is optional. Our team only ever gains access after you activate the plan and grant consent from inside your vault — purchase alone grants nothing.

• Scope you choose: the grant covers either your Organization vault only, or both vaults. Staff can upload and label documents and read the metadata needed to file them correctly within that scope, for the period you granted.
• Confidentiality: assigned staff are bound by confidentiality obligations and may use your documents only to perform the filing service.
• Audit logging: every assist action is recorded in your vault audit log and flagged as an assist upload, with the acting staff member, file, and timestamp.
• Forwarded documents: you forward records using the reference code shown in your vault. Email is not a secure channel — do not send anything you are not comfortable sending by email. Forwarded copies and the messages carrying them are deleted from our intake mailbox once the documents are filed.
• Fair use caps: each plan has a monthly document filing cap shown at purchase. Volumes above the cap may be queued or require an upgrade.
• Same limits apply: filing a document is an administrative service. It is not legal advice, and we do not review documents for legal sufficiency, validity, or compliance.
• Revoking consent: you can revoke the grant at any time from your vault. Revocation immediately ends future staff access and filing; it does not undo documents already filed, and it does not by itself refund the current billing period. Billing is quarterly or annual and cancellation takes effect at the end of the paid period unless applicable law requires otherwise.

• Audit submissions and reports: kept while your account is active so you can re-download and compare over time, and retained afterwards only as long as needed for tax, accounting, and dispute-handling obligations. Report PDFs live in private storage and are served through expiring links.
• Vault documents: kept until you delete them or close your account. Deleting a file removes it from your vault; residual copies in backups age out on our normal backup cycle.
• Audit logs: vault access and assist logs are retained for security and accountability even after the related file is deleted.
• Account closure: export anything you need first. Once closure is processed, vault contents are deleted and cannot be restored.
• We may retain specific material longer where we are legally required to preserve it (for example under a lawful order or an active investigation).

We disclose customer data only where we are legally required to, or where you have asked us to. On receiving a subpoena, court order, regulator request, or law-enforcement demand we:

1. check that it is valid, properly served, and issued by an authority with jurisdiction;
2. narrow it to the minimum data actually required, and object to or challenge requests that are overbroad or unlawful;
3. notify the affected account holder before responding, unless we are legally prohibited from doing so or notice would create a risk of serious harm;
4. record what was disclosed, to whom, and on what basis.

Send legal process to legal@legalriskalert.com.

Non-material updates take effect when published. For material changes we notify active users by email or in-app announcement before they take effect. Continued use after the effective date means you accept the updated policies.