AI gateway for law firms that keeps client confidentiality under the firm's control
Standard Compute is the AI gateway law firms use to give lawyers and legal tech Claude, GPT and open models while client confidentiality stays under firm control. Through one API, each step goes to the cheapest model that can do it.
Partners and the risk team set the rules once: prompts are processed in Europe and not stored, and only the providers and models the firm approves can serve them.
Create a company accountor write to contact@standardcompute.com
The short answers
- Can lawyers use Claude and GPT on client matters without client data being stored?
- Turn on zero data retention for the firm and every request goes only to inference endpoints that commit to keeping no copy. Standard Compute processes prompts in memory, never writes them to storage or logs, and never trains on them.
- Where is client data processed?
- With a Europe rule, every request, including retries and fallbacks, is served only by approved European inference endpoints. Our EU gateway terminates TLS and runs in Finland, and account data is stored in Frankfurt.
- Can the firm see who used which model?
- Yes. The request log shows the model, the provider that served it and the region rule for every request, kept for 12 months, and the admin audit log records every rule change with before and after values.
Your requirements, mapped to product controls
The duties a firm's risk partner checks before a lawyer pastes a client document into an AI tool, and the control that answers each one.
| What the sector asks for | How Standard Compute handles it |
|---|---|
| Professional secrecy: client information reaches only service providers under a confidentiality duty | Sign the DPA in the dashboard in minutes: no training on your data, no retention of your content, breach notification within 72 hours. Every sub-processor is published, with 14 days' notice before a new one is added. |
| No copy of privileged material left with a vendor | Turn on zero data retention and every request is routed only to inference endpoints that commit to keeping no copy of your data. We process prompts in memory and never write them to storage or logs. |
| Client data is not used to train models | Standard Compute never trains on your prompts or outputs. With a region rule or zero retention on, every request goes only to providers that commit not to train on it. |
| Processing location the firm can state to clients | Set a Europe rule for the company, a team or a single key. Every request, including retries and fallbacks, is served only by approved European inference endpoints, and a request no European endpoint can serve is refused before the prompt is sent. |
| Only vetted providers handle matter data | Choose exactly which inference providers may handle your data, for the company, a team or a key. Lower levels can only narrow the list, new providers never join without an admin's approval, and fallbacks never route around it. |
| Different tools for different practice groups | Decide which models each key can use, so every app and every person gets exactly the models you approve. GLM, DeepSeek and MiniMax run on European providers for Europe-restricted workspaces. |
| Lawyers sign in with their firm account, and leavers lose access | Connect Microsoft Entra ID or any SAML identity provider. Anyone on your verified domain joins the company automatically, and access to Claude Desktop and Claude Code follows your Entra groups through SCIM. |
| A record for the risk committee | Every admin change is recorded with before and after values. Export a record of every request showing the model, the provider that served it and the region rule in force, kept for 12 months. |
| Predictable cost per lawyer and per legal-tech app | Every person and app gets a fixed monthly budget that never overruns, with spending caps per key and for the whole company. |
Set it up in an afternoon
Create the company account
Invite colleagues by email, organize them into teams, and give every person and every app its own key.
Set the Europe rule and zero data retention
Set both for the whole company. Teams and keys inherit them and can never switch them off underneath you.
Connect Microsoft Entra ID
People sign in with their work accounts, and employees use Claude Desktop and Claude Code with their Microsoft work account through our EU gateway.
Approve providers and models, then sign the DPA
Choose which inference providers and models each key may use, set the budgets, and sign the DPA in the dashboard.
Regulation references
The rules buyers in this sector check first, linked to the official text. They are references for your own assessment.
Links checked 9 November 2026.
Questions from IT, security and procurement
- Does Standard Compute sign a DPA?
- Yes. Sign our Data Processing Agreement in the dashboard in minutes. It commits us to no training on your data, no retention of your content, and breach notification within 72 hours.
- Can we restrict which AI providers see client data?
- Yes. Provider allow-lists set exactly which inference providers may handle your data, for the firm, a practice group or a single key. New providers never join without an admin's approval, and fallbacks never route around the list.
- Can our lawyers use Claude Desktop and Claude Code with their Microsoft account?
- Yes. Employees sign in to Claude Desktop and Claude Code with their Microsoft work account, through our EU gateway, so there are no API keys to hand out. Access follows your Microsoft Entra groups through SCIM provisioning.
- Who is Standard Compute?
- Standard Compute AS is a Norwegian company (org. no. 938 498 806) based in Oslo. Our DPA is governed by Norwegian law.
Read next
Other sectors
Create the company account, set the Europe rule and zero data retention, and your people can start the same day.