Data Ownership & Control

All data entered into LEAP remains the customers property, with LEAP acting as a data processor on their behalf. Customers retain full control over their data and can request deletion at any time. LEAP retains data for seven years after service termination for potential reactivation, unless earlier deletion is requested. Personal data may be shared with other ATI Group entities for additional services, such as legal searches and AI solutions, as outlined in the Terms and Conditions. This data may be transferred across jurisdictions and is protected under the Data Privacy Framework, however data is not shared between customers.

Security & Compliance

LEAP adheres to the General Data Protection Regulation (GDPR), ensuring that personal data is processed lawfully, transparently, and for specific purposes as detailed at the LEAP Trust Centre. Customer data is stored in ISO 27001 certified AWS data centres located in Dublin, ensuring high standards of data security and sovereignty. All data is encrypted both in transit and at rest using industry-standard protocols like TLS and AES-256, safeguarding against unauthorised access.
LEAP is also SOC2 Type 2 and CyberEssentials accredited, ensuring continued adherence to strict internationally recognised standards.

AI Usage & Data Handling

LEAP’s AI uses enterprise licences from OpenAI and Microsoft to provide AI services. Such licences are a contractual agreement that gives the ATI Group access to AI tools with enhanced features, robust security, and support tailored for business use. These licences go beyond what is offered in free or consumer versions like ChatGPT or Gemini, providing more control, better integration, and strong data protection measures.

We have opted for enterprise licences for several reasons:

• They ensure data privacy by guaranteeing that inputs and outputs are not used to train public AI models

• They help ATI stay compliant with regulations such as GDPR or industry-specific standards

• They include service-level agreements (SLAs) for reliability, uptime, and dedicated support

• They offer greater flexibility, including integration with internal systems and workflows

• They provide centralised user management and audit logs to monitor usage and enforce policies

Enterprise AI is considered considerably safer than public tools because it operates in private or isolated environments, often within a company’s own cloud infrastructure. Data remains within agreed regions (e.g. UK or EU) and is protected through encryption. Inputs are not retained or shared, and strict access controls help prevent misuse. By using enterprise AI licences, customers data is not used to train AI models, ensuring confidentiality. Audit and monitoring features make it easier for companies to track usage, review interactions, and demonstrate responsible use of AI - this is especially important in regulated industries like legal services.