Security
Tenant walls between firms, two-step sign-in, an append-only audit log, signed time-bound links, encrypted secrets, and retention, legal holds and exports. Described by what the product does.
§ 1Security
Tenant walls
Every record belongs to one firm. A request for another firm’s record answers “not found”, not “forbidden”, so the product does not even confirm that it exists. An automated gate checks that every registered route carries an authorization check.
§ 2Security
Two-step sign-in and recent sign-in
By default, everyone who works in LegalBook (firm staff, attorneys and the shared workforce) must sign in with two-step verification. Sensitive actions ask for a recent sign-in, and each device has its own session that can be ended on its own.
§ 3Security
Audit log
Creating, changing, downloading, sharing, approving and transferring firm data each write an audit record. The log is append-only and hash-chained, and the chain is verified every day.
§ 4Security
Signed links and sealed secrets
Documents are reached only through signed, time-bound links minted after a permission check. Provider credentials are encrypted before they are stored and are never returned once saved.
§ 5Security
Retention, holds and exports
Retention schedules, legal holds, client-file exports and deletion requests are part of the product. A legal hold stops disposal; a deletion request is decided by compliance, not by whoever asked.
§ 6Status
What is in the product today.
Each capability on this page, with its status. Not available yet means exactly that: it is not offered today.
- In product
Every record belongs to one firm, and an authorization check guards every route.
- In product
One LegalBook sign-in with two-step verification (an authenticator app or a passkey, plus recovery codes), and a fresh sign-in before sensitive actions.
- In product
An append-only, hash-chained audit log of who did what, under whose workflow.
- In product
Provider credentials are encrypted before they are stored and are never shown again.
- In product
Retention, legal holds and exports
Retention schedules, legal holds, client-file exports, deletion requests decided by compliance, and support access only with consent.
§ 7Read next
You practice law. We run the operating system around you.
See how LegalBook would run your front office and case operations, with a plain account of what is available today and what is not.
LegalBook is not a law firm. It gives no legal advice and forms no attorney-client relationship. Your attorneys supervise all legal work.