TrialView's Privacy Policy

Last updated: 27th January 2026

1. Overview

TrialView Limited (“Company”, “we”, “us”) is an Irish-registered company providing AI-enabled litigation software and related services. This Privacy Policy explains how we process personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Data Protection Acts 2018.

2. Data controller

For the purposes of the GDPR, the data controller is: TrialView Limited
Registered office: Suite 122 The Capel Building, Marys Abbey, Dublin 7, D07 AV2F
Email: Security@TrialView.com

3. Categories of personal data

We process the following categories of personal data:

3.1 Client and end-user data

• Identification and professional contact details
• Account credentials, authentication data, and access logs
• Litigation, case-related, or legal data uploaded to or processed through the software
• Client communications and support records

3.2 Employment data

• Employee and contractor identification and contact details
• Payroll, tax, and statutory employment information
• HR, performance, and compliance records

3.3 Business and website data

• Business contact details obtained via our website, events, or professional networking
• Communications and correspondence
• Website technical data (including IP address, device, browser, and usage
  logs)

4. Purposes and legal bases for processing

We process personal data only where permitted under Article 6 GDPR:

Where we rely on legitimate interests, we have assessed that such interests do not override the fundamental rights and freedoms of data subjects.

5. Marketing

We may process business contact data to promote our services to organisations and professionals where permitted under applicable law and based on legitimate interests.

Individuals may object to such processing at any time by contacting us or using any unsubscribe mechanism provided.

6. Data processing and confidentiality of client data

6.1 Client data processing roles

In providing our AI litigation software, TrialView may process personal data and confidential legal information uploaded by or on behalf of clients (“Client Data”).

For such processing:

• The client acts as data controller, and
• TrialView acts as data processor within the meaning of Article 28 GDPR, unless otherwise agreed in writing.

We process Client Data solely for the purpose of performing our contractual obligations and strictly in accordance with the client’s documented instructions.

6.2 No secondary user

Client data is:

• Not sold, shared, or disclosed to third parties, and
• Not used to train, fine-tune, or improve AI models, except where explicitly agreed in writing with the client or where data has been irreversibly anonymised.

6.3 Confidentiality

All Client Data is treated as confidential. Access is limited to authorised personnel who are subject to contractual confidentiality obligations and who require access solely for service delivery, maintenance, or support.

6.4 Sub-processing

Where we engage sub-processors (including secure hosting or infrastructure
providers), we ensure that:

• They are subject to written data processing agreements compliant with Article 28 GDPR
• They process personal data only on our documented instructions
• They implement appropriate technical and organisational security measures
• A list of sub-processors may be made available on request

6.5 Deletion or return of client data

Upon termination or expiry of the relevant client contract, Client Data will be deleted or returned, at the client’s election, subject to applicable legal or regulatory retention requirements.

7. Data sharing

We do not sell, rent, or trade personal data.

Personal data is disclosed only where strictly necessary to:

• IT, hosting, or infrastructure providers acting as data processors
• Professional advisers or regulators where required by law

All recipients are bound by confidentiality and GDPR-compliant data protection obligations.

8. International data transfers

Where personal data is transferred outside the European Economic Area (EEA), we
ensure appropriate safeguards are in place, including:

• European Commission adequacy decisions, or
• Standard Contractual Clauses approved by the European Commission

9. Data retention

Personal data is retained only for as long as necessary to:

• Fulfil contractual obligations
• Comply with legal, regulatory, or statutory requirements
• Establish, exercise, or defend legal claims

Data is securely deleted or anonymised when no longer required.

10. Security measures

We implement appropriate technical and organisational security measures to protect personal data, including access controls, encryption, audit logging, and secure system architecture appropriate to AI-driven legal services.

11. Data subject rights

Under the GDPR, individuals have the right to:

• Access, rectify, or erase personal data
• Restrict or object to processing
• Data portability (where applicable)
• Withdraw consent at any time (where consent is relied upon)

Requests should be submitted to Security@TrialView.com.

12. Complaints

Individuals have the right to lodge a complaint with the Irish Data Protection.

Commission:
Data Protection Commission
www.dataprotection.ie

13. Updates to this policy

We may update this Privacy Policy from time to time. The most current version will be made available on our website.