Built so your clients' business stays your business.
PageMax handles enquiries from people at some of the hardest moments of their lives, on behalf of firms bound by confidentiality. The platform is engineered around that fact: encrypted everywhere, resident in the EU, each firm's data sealed off from every other firm's, and every action on a record that cannot be quietly rewritten.
The commitments.
-
Encrypted everywhere
Your firm's data is encrypted in transit and at rest.
-
Resident in the EU
Compute and database run in Frankfurt, on EU infrastructure. Public sites are served by an EU-headquartered edge network.
-
One firm, one boundary
Each firm's data is isolated at the database layer, enforced by policy, and never used for another firm.
-
Never training data
Client data is never used to train AI models.
-
Two factors, every account
Every sign-in requires a second factor. Each person has their own login, and what they see follows their role.
-
Read-only support
When PageMax support views a firm's dashboard, the view is read-only, and both entry and exit are logged.
-
A tamper-evident record
Every action lands on a ledger where each entry is chained to the one before it, so history cannot be quietly rewritten.
-
Hard AI spend ceilings
Every AI call carries a hard cost cap, and each firm has a monthly ceiling the platform will not cross.
Who can see an enquiry
An enquiry assigned to a solicitor is visible only to that solicitor. Everyone else at the firm sees what their role needs and nothing more.
The reporting engine that answers questions about your numbers works on counts and outcomes; it is technically blocked from reading names, emails or phone numbers. And sensitive enquiry data does not sit around: it is redacted and aged out on a schedule.
GDPR treated as a hard gate
Enquiry data sent to your firm belongs to your firm. PageMax processes it on the firm's instructions, and a data-processing agreement is part of onboarding, not an extra to ask for.
The same plain-dealing runs through the product itself: where the platform generates an image with AI, the image is labelled as such.
Leaving is designed too
If your firm leaves, you take a full export of your content and your data, and then we delete it. Your firm always owns its own domain, so the address your clients know goes wherever you go.
No certificates on the wall. The controls themselves.
PageMax is an early-stage Irish company and holds no ISO or SOC certification today. Rather than borrow reassurance, we publish how the system is governed, control by control, and let you read it.
Read how the system is governedQuestions firms ask.
How is my data protected?
It is encrypted in transit and at rest, and it stays in the EU: compute and database in Frankfurt, public sites served by an EU-headquartered edge network. Your firm's data is isolated at the database layer and never used for another firm, and every action taken on the platform lands on a tamper-evident record.
Who can see my firm's data?
Your own people, by role: each person has their own two-factor login and sees what their role needs, and an enquiry assigned to a solicitor is visible only to that solicitor. On our side, support access is read-only and both entry and exit are logged. The reporting engine is technically blocked from reading names, emails or phone numbers.
Is my data used to train AI?
No. Client data is never used to train AI models, and one firm's data is never used for another firm.
What happens when we leave?
You take a full export of your firm's content and data, and then we delete it. Your firm always owns its domain.
Serious about how this is run? So are we. Ask us anything on this page and we will answer it plainly.
Get access