About

Security for Legal SaaS is a 62-episode podcast series covering every layer of security required to build, deploy, and operate a production legal technology SaaS product.

The series is organised into 12 modules that build on each other — from first principles of threat modelling through authentication, authorisation, data protection, AI-specific security, audit logging, infrastructure, monitoring, and compliance. Each episode is a self-contained deep dive, typically 7–9 minutes, with a full companion article, citations, and further reading.

Alice leads the series. She covers both the legal context and the technical implementation — walking through threat models, architecture decisions, and code-level security patterns with equal fluency. For this series, she trades the blazer for a hoodie — the security curriculum demands a different energy. Direct, technically precise, and occasionally wry.

Dan is the co-host. He asks the questions you’re thinking — “wait, why does that matter?”, “what does that actually look like in practice?” — and keeps the explanations grounded. His job is to make sure nothing gets hand-waved past.

Both voices are AI-generated using Orpheus, an open-source text-to-speech model running on local hardware. Video hosts are animated by FlashHead, a real-time lip-sync model. The full pipeline — script generation, voice synthesis, video rendering, and site publishing — runs on a single workstation with an NVIDIA RTX 4090.

This series was put together by a lawyer-builder who wanted a starting point for understanding security in the context of legal technology — handling privileged documents, confidential communications, and regulated data. It is not adapted from generic enterprise security training; it is written specifically for those challenges.

The content is AI-generated and curated for clarity, not certification. It’s a map of the landscape, not authoritative truth. Educational content, not professional advice.