All controls monitoredLast updated October 2026Hosted in the United StatesAppend-only audit on every action
Legal by Rose
Contact security
The legal-industry platform

Run the whole practice on one system that acts.

CRM, native billing & trust, a native general ledger, and a fully agentic Legal AI — unified, not stitched together from add-ons.

Request accessExplore the platform
SOC 2 Type II in progressHIPAA BAAs availableOpen API on every tierPrivilege-aware by design
9
Specialist AI agents under one always-on monitor
40+
Matter stages, templated for every practice area
3-way
IOLTA trust reconciliation, native
1
Append-only ledger; everything else is a view of it
API
Open API & OAuth 2.0 on every tier, no enterprise gate
One system

Everything a firm runs on — together.

No more paying for billing, intake, a CRM and an AI bolt-on separately, then wiring them together yourself. Where the incumbents split it up, Legal by Rose runs it as one.

i.Legal CRM & mattersContacts, matters, pipelines, parties and activity — with per-matter access control built in.
ii.Native billing & trustTime capture, invoicing and 3-way IOLTA trust reconciliation — native, not a separate tool.
iii.Agentic Legal AIA roster of specialist agents that act across the book of business — included, not an add-on.
iv.Secure co-counsel sharingShare case and file data across firms with privilege controls and tracked referral-fee splits.
v.Executive P&L + general ledgerA native general ledger and executive P&L view — the finance layer firm software skips.
vi.Open API + OAuth 2.0A documented API and OAuth on every tier — integrate anything, no gated enterprise upsell.
Rose Legal AI

A Legal AI that acts — not a chat box bolted on.

Nine specialist agents, coordinated by an always-on monitor. Every output is cited and logged to a tamper-evident audit. Auto-act when certain, verify when unsure, route to a human when there’s no match — never an irreversible action without approval.

1Proof & code-compliancePulls AHJ building code, maps it to the carrier’s dispute, and drafts the cited rebuttal.
2Rose Sentry, the monitorWatches deadlines, missing documents and quiet matters — and alerts the right person.
3Privilege-awareRetrieval is filtered to what you can see — ethical walls enforced before the model reads anything.
Security & trust

Built on a trust-first foundation.

Security isn’t a page we bolt on — it is how the platform is built, down to the first row of the database. Explore the detail:

01

Compliance

SOC 2, HIPAA, ISO 27001, GDPR/CCPA — with honest, current status.

View compliance02

Controls

28 controls across infrastructure, access, product, data, org and AI governance.

View controls03

Subprocessors

Exactly who can touch your data — what, why, and how we protect it.

View subprocessors04

Privacy rights

Your CCPA/CPRA and GDPR rights, and how to exercise them.

View privacy rights05

Documents

SOC 2 report, pen-test summary, BAA and DPA — available under NDA.

View documents06

FAQ

The questions managing partners and security teams ask most.

View faq

We never claim “certified” until it is true — SOC 2 and ISO 27001 are shown as in progress. Legal by Rose is a software platform from Rose Tech HQ; it is not a law firm and does not provide legal advice.

Questions from your security team?

We share our SOC 2 report, subprocessor registry, BAA and DPA under NDA, and will walk your team through the controls.

Start a security review