Trust
Security built for sensitive legal and medical records.
NORBU Demand is designed for the sensitive information personal injury firms handle every day, with HIPAA-compliant data practices and SOC 2 Type II controls supporting the security and confidentiality of firm and client information.
HIPAA Compliant
Designed to support the secure handling of protected health information used throughout the personal injury demand process.
SOC 2 Type II
NORBU Demand has completed SOC 2 Type II attestation, providing independent assurance regarding applicable controls over time.

Your clients trust you with their records.
NORBU is built to respect that responsibility.
Client files stay client files
Case material is handled as confidential work product belonging to the firm and its clients, not as NORBU's data.
Attorney review is required by design
Every deliverable is produced for review. NORBU does not send, file or transmit anything to a carrier on a firm's behalf.
No legal advice, no valuation
NORBU does not determine legal value, predict settlement outcomes or provide legal advice.
Traceability over assertion
Findings are reported with the page of the record they came from, so a reviewer verifies rather than trusts.
Access limited to the work
Access to case material is scoped to the work required to produce and support the demand package.
Questions answered directly
Security, retention and processing questions are answered in writing during evaluation.
Professional responsibility
Where the platform stops.
These limits are structural, not disclaimers added after the fact.
- ·NORBU does not determine legal value or settlement ranges.
- ·NORBU does not predict outcomes.
- ·NORBU does not provide legal advice or substitute for professional judgment.
- ·NORBU does not transmit demands to carriers on a firm's behalf.
- ·NORBU does not represent that a demand is complete — the attorney of record does.
Documentation
Requesting security detail
Specific questions about data handling, retention, processing and access are answered in writing during evaluation. Email hello@norbudemand.io.
- Is NORBU Demand HIPAA compliant and SOC 2 Type II?
- Yes. NORBU Demand is HIPAA compliant and has completed SOC 2 Type II attestation. Supporting documentation is available on request during evaluation.
- Who reviews the output?
- The firm does. NORBU produces analytical work product for attorney review and does not act on a firm's behalf.
- Is NORBU giving legal advice?
- No. NORBU provides analytical support for counsel and does not provide legal advice, valuation or outcome predictions.
- How do we get specific security documentation?
- Contact hello@norbudemand.io and the relevant documentation will be provided as part of the evaluation process.
NORBU Demand provides analytical support for counsel. It does not determine legal value, predict settlement outcomes, or provide legal advice. Every observation is presented for attorney review.
Evaluate it with your own file.
Bring your questions — they get answered in writing.