When you're dealing with data about real people and real problems, security is paramount. It should never end up in the hands of someone who might misuse it. That's why we've spent a lot of time implementing a rigorous set of security rules and systems.


To protect your account, we insist that you use a strong password and two-factor authentication is available to add an extra level of security. We also log every attempted sign-in, both successful and unsuccessful, and block any suspicious activity automatically. We're an ISO 27001:2013 (information security management) certified company and backup the database every minute, meaning we can react to any incidents quickly with the right level of care. All data is encrypted, in transit and at rest, making it hard to intercept your communications.


Unlike other casework software, our infrastructure ensures that your data is stored and processed in the United Kingdom and the European Economic Area (EEA) only, and we use Amazon Web Services which sets industry-standard levels of high availability, dependability, confidentiality, integrity and data security. System administrators are alerted automatically of abnormal events and can respond within the hour, 24 hours a day, 7 days a week. Anti-virus software is installed on our mail server, and server-hardening techniques are used to ensure that only services absolutely required by the systems are enabled by default.