Security Overview

All traffic is encrypted in transit with TLS. Data is encrypted at rest by our managed database and storage providers.

Role-based access control (Admin, Partner, Associate, Paralegal) governs sensitive actions. Every firm's data is isolated by tenant. Sensitive operations require the appropriate role.

An immutable, firm-scoped audit log records who did what and when — record creation and deletion, data exports, and permission changes — and is available to firm admins.

The platform runs on managed cloud infrastructure with automated backups. Changes are version-controlled and reviewed before release.

To report a security concern, contact [email protected].