# Connect the systems your firm already uses

Design preview. By Josef Long, October 17, 2026.

A private workspace is only useful if it can reach your documents, mail, calendar, billing and research. VaultScribe connects to the systems below, lets an administrator add others, and treats every connection the same way: under the matter's walls, with each outside request in a log you can read.

## What it connects to

| Family | Sources |
|---|---|
| Documents and practice management | iManage, Clio Manage, Box, Egnyte. Walls come in from the document management system, and notes are filed to it on your click. |
| Microsoft 365 | Outlook mail and calendar, OneDrive and SharePoint, Teams chat and transcripts, OneNote, Planner. |
| Google | Gmail, Drive, Calendar, Meet, Chat. |
| Contacts and calendars | Microsoft 365 and Exchange Online, Google, Apple and iCloud, any CardDAV address book, vCard and CSV files. Calendars from any CalDAV server. |
| Court dockets and case law | PACER on the firm's own account, with court fees shown before every billable lookup. Docket Alarm on the firm's own subscription. CourtListener. |
| Patents and data | USPTO patent and trademark data, the European Patent Office, and BigQuery in the firm's own Google Cloud project, read-only. |
| Government and public records | SEC EDGAR, the Federal Register, regulations.gov, Congress.gov, the eCFR, govinfo, USAspending and many more. |
| Work tools | Atlassian Jira and Confluence, Salesforce and Litify, HubSpot, Asana, Linear, monday.com, DocuSign, Notion, Obsidian, Everlaw. |
| Your own | Custom MCP servers, local MCP servers, any internal REST API described by an OpenAPI file, and recipes for databases and data warehouses. |

Don't see your system? Email hello@vaultscribe.app. Design partners shape which connectors come next.

## Add your own

1. A custom MCP server. Point VaultScribe at a remote or local server. The administrator reviews the tools it offers and approves it. If its tool list changes, the administrator sees a diff first and can roll back.
2. A REST connector from an OpenAPI file, for an internal billing, intake or matter API. Read-only to start.
3. A recipe for a database. Postgres, SQL Server and data warehouses through a local server or the firm's own gateway, using a read-only role. The same pattern covers contract tools, ServiceNow, Trello, ClickUp and Drata.

Every one gets its own list of allowed hosts. Nothing is reachable until an administrator turns it on.

## How every connection behaves

- Live, under your sign-in. A question queries the source at that moment, as the lawyer, within the matter's scope. The query sent out is minimal.
- Cited as outside sources, with the system, document, version and time read.
- Nothing stored by default. Results are not indexed or kept unless the lawyer saves them to the matter, and only where the vendor's terms allow it.
- Connector data is not used to train models.
- Walls follow the source. If a wall sync goes stale, access is denied. Walled results are dropped before the model sees them.
- Actions wait for a click. The agent can draft a Slack message, a Jira issue or a CRM note and show the exact payload.

## Research is opt-in

Research connectors stay off until an administrator accepts a warning that queries can reveal research topics, and they are off per matter by default. Billable lookups such as PACER show an estimate first, with caps per user and per matter. A web search option, on the firm's own zero-retention key, is for administrators and is off for privileged matters.

## Outside agents come in the same way

Other AI assistants can connect through a permission-aware MCP server, a local REST API and a command line, under the same walls. See https://vaultscribe.app/legal-ai-agent.md

## Questions

**Can we connect a system that is not on the list?** Yes. A custom MCP server, a REST connector from an OpenAPI file, or a database recipe through a read-only role. Each is approved by an administrator.

**Does connector data train AI models?** No.

**What stops a connection from reading a walled matter?** Every lookup passes the same policy as the person's own access, and a stale wall sync denies access.

**Where can I see what was sent out?** In the egress log, which shows each approved host with its purpose and size.

Now accepting founding design partners: hello@vaultscribe.app