Security and the EU AI Act Control who
can see
your
clients’ details
Set access by role and keep a record of every download and approval.
Book a demo
KINSELLA MORAN
What Olivia sees
Signed in as Olivia Brennan · Lawyer
Daniel Walsh Assigned request
Her inbox lists the requests assigned to her.
PAGEMAX SIGN-IN
Choose how to sign in
Use a passkey
Or use your password Then your authenticator code
A passkey counts as both steps.
Two-step sign-in
Every platform account, including PageMax staff and our contractors, signs in with a passkey, or a password with an authenticator code or a one-time recovery code.
Security at a glance
-
GDPR
Database in the EU, with data processing terms in our service agreement
-
EU AI Act
The chat says it is AI, and your firm approves AI-written words
-
Two-factor sign-in
Every platform account, ours included: a passkey, or a password plus an authenticator code
-
Audit record
Every approval and download, with who and when
-
Data export
Your content and client data, exported if you leave
Team roles and request records
Access by role
Each person sees the information their role allows.
TEAM ACCESS
Your team’s roles
- Firm admin
- Firm management access
- Reception
- Assign new requests
- Lawyer
- Assigned client requests
A record you can keep
Download the client request record when your firm needs it.
REQUEST RECORD
Daniel’s record
- Includes
- Conversation and request details
Download record
Each download is logged with who and when.
PageMax and the EU AI Act
The Act’s transparency rules have applied since 2 August 2026. Here is how PageMax puts them into practice for your firm.
-
Every chat says it is AI
The assistant on your website tells people it is an AI from its first message.
-
A person at your firm approves what AI writes
Articles and page updates written with AI go live only after a person at your firm reviews and approves them. AI translations are labelled on the page.
-
People decide who takes a client
PageMax prepares the brief. Your team decides who follows up, never the AI.
-
A record of every approval
Who approved what, and when, is kept for your firm.
Your clients’ details, protected
-
Access on a need-to-know basis
Within your firm, each person’s role decides which client details they can see, and website editors see none.
-
Details are not kept forever
Unless your firm marks a request as a new client, its personal details are removed after 12 months.
-
Take your records with you
If your firm leaves PageMax, it receives an export of its content and client data.
-
Where your data is stored
The database that holds your firm’s data is in the EU, in Frankfurt. AI processing runs with specialist providers outside the EU, mainly in the United States, under EU-approved transfer safeguards.
For the full detail, read our Privacy notice.
Our duties to your firm
-
Staff views of your dashboard are recorded
Our staff open your client requests only to provide and support the service. Each time one of us views your dashboard as one of your users, it is recorded on your firm’s audit log.
-
Breach notice in 48 hours at most
If a personal data breach affects your firm’s data, we tell you no later than 48 hours after we learn of it. Your firm decides whether to tell its data protection regulator, and we help with the facts.
-
Notice before a new supplier
We give your firm at least 30 days’ notice before a new supplier handles its data. Your firm can object on reasonable data protection grounds, and if that is not resolved, end the agreement with no minimum term fees for any month after it ends. Unless your firm agrees otherwise, the one exception is a supplier that fails or becomes a security risk. We may then move the work at once to another supplier our agreement already names for that job, and tell you no later than 5 working days after. Any other supplier then needs your firm’s OK or 10 working days’ notice, which your firm can also object to.
Your firm decides
who sees what
Be the law firm cited in ChatGPT
We're opening PageMax to a small number of firms. Book a demo.