Security and data handling

How we protect your account, your firm data and the files you send us. This page describes the controls in place; it is not a certification.

Controls in place

Encryption in transit

All pages and dashboards are served over HTTPS only.

Firm isolation

Every request for account data is checked against your firm membership on the server. One firm cannot read another firm's tickets, files or invoices.

Staff access

Our staff accounts require multi-factor authentication and only get the permissions their role needs.

Audit trail

Sensitive staff actions — billing changes, permission changes, account activations — are logged.

Private files

Uploaded files are stored outside the public web server and downloaded through short-lived, authorized links.

Payments

Card details are entered on our payment provider's page. We never receive or store card numbers.

Please don't send confidential case files

Demo requests, contact forms and support tickets are not the place for client documents or privileged information. Share only what we need to build and support your website and account.

Reporting a security issue

Email support@legalwebdesigns.com with the details. We will acknowledge your report and keep you updated.

Client sites we've built