Sandra for legal teams

    A private channel for client documents

    One place to collect intake documents, deliver privileged work, and keep matter files after the handoff. Your clients never create an account. Your links expire on your schedule. Nothing you send is scanned or used to train AI.

    TLS 1.3 in transit
    AES-256 at rest
    Optional end-to-end encryption
    EU infrastructure

    The problem

    Email was never built for privilege

    Most confidential documents still leave law firms as email attachments. An attachment can be forwarded anywhere, lives on in inboxes long after the matter closes, and tells you nothing about who opened it.

    Consumer sharing drives fix little. Permissions accumulate, links stay live for years, and the fine print often allows content analysis.

    Sandra takes a narrower position: move the file from one party to the other, keep a record, and stay out of the content.

    How firms use Sandra

    Intake. Delivery. Archive.

    01

    Client intake

    One request link instead of a chase

    Create a file request for each new client or matter: identification, the signed engagement letter, supporting records, exhibits. The client opens the link in a browser and uploads. No account, no app, nothing to explain over the phone. Everything lands in your workspace instead of a shared inbox.

    02

    Matter delivery

    Privileged work, delivered under your rules

    Send contracts, closing sets, and discovery exports through a private link. Set the expiry before it goes out, add a password on Pro, and see when files are downloaded. For the most sensitive documents, switch on end-to-end encryption: the file is encrypted in your browser before upload, and the decryption key never reaches our servers.

    03

    Matter archive

    The record outlasts the link

    Transfer links are supposed to expire. Vault is not. Keep executed versions, final bundles, and reference folders in encrypted storage, organized by matter and separate from the short-lived links you send.

    Security

    Answers for your security review

    The details a managing partner or IT reviewer will ask for, stated exactly as they work today.

    In transit
    TLS 1.3 on every upload and download.
    At rest
    AES-256 on stored files, transfers and Vault alike.
    End-to-end option
    AES-256-GCM applied in your browser before upload. The decryption key travels in the link fragment and is never sent to our servers. One tap, on every plan including Free.
    Link expiry
    Every transfer link expires on a schedule you set. Expired files are deleted from transfer storage.
    Access controls
    Password-protected links and download visibility on Pro, so you know when a file was retrieved.
    Content policy
    No scanning, no profiling, no ads, and no AI training on your files. This is a founding constraint of the product, not a setting.
    Hosting
    EU infrastructure for core storage, with GDPR-oriented practices published in the Privacy Policy.

    Common questions

    Asked by firms before they switch

    More detail in the full FAQ and the Privacy Policy.

    Do clients need a Sandra account to send us documents?

    No. A file request opens in the browser like a normal web page. The client uploads and closes the tab. Accounts are only needed on the firm’s side.

    Are our documents used to train AI?

    No. Sandra does not scan, analyze, or profile file contents, and never uses them to train AI models. The product exists because most large platforms now reserve that right.

    How long does a download link stay live?

    As long as you decide. Every transfer has an expiry you set before sending, and Pro plans allow longer or permanent links when a matter needs them. When a link expires, its files are deleted from transfer storage.

    What does end-to-end encryption change in practice?

    With E2EE on, the file is encrypted in your browser before upload using AES-256-GCM. The decryption key stays in the link itself and never reaches Sandra’s servers, so nobody on our side can read the file. It is a one-tap toggle, available on every plan.

    Where are the files stored?

    Core storage runs on EU infrastructure and Sandra follows GDPR-oriented practices. The details are published in the Privacy Policy.

    Can the whole firm work under one account?

    Yes. Business plans add shared workspaces, team billing, and role-based access, so associates and paralegals work under the firm’s controls rather than personal accounts.

    Get started

    Share work that speaks for itself.

    Built for professionals who need secure, reliable, and elegant file delivery.

    No credit card required · 500GB free transfers