Security

We treat all matter and client data as confidential and potentially privileged. Access to your firm’s data is restricted to your firm’s authorized users and the limited JurisAide personnel required to operate and support the service. We never sell client data, and we do not use your confidential matter content to train third-party AI models.

All data is encrypted in transit using TLS and encrypted at rest. Secrets and credentials are stored in a managed secrets system, and document storage is encrypted at the storage layer.

JurisAide enforces role-based access: owners manage billing, members, and firm settings; attorneys create and edit matters, draft documents, and log billable time; and staff have limited, read-oriented access. Every matter is scoped to its firm so that one firm can never access another firm’s data. The client portal uses separate, per-matter access tokens that are fully isolated from attorney accounts.

Sensitive actions — including firm creation, conflict checks, and billing changes — are recorded in an audit log. We monitor the service for security events and maintain backups to support recovery.

Protect your account credentials, enable available authentication safeguards, and promptly remove access for departing personnel. Security is a shared responsibility between JurisAide and your firm.

Found a security issue? Please report it to security@jurisaide.example.