Security
How we protect client data.
The rules apply from the start and are testable. Where something does not apply yet, we say so.
- Client separation
- Every law firm is a separate tenant of the platform. The database enforces the separation through row-level rules; the user interface never decides on access. Every rule is tested against real sessions and separate test firms.
- Data location
- The database is located in Frankfurt. Further service providers, for example for hosting, email and payments, are listed in the subprocessor list.
- Operator and support
- The operator has no default access to matter content. Support access is intended only through time-limited approvals by your firm and is logged.
- Tracing access
- Views and downloads of documents are logged. Your firm can review the log.
- Sign-in
- Sign-in works with a password or a link by email. Invitation links are time-limited and can be used once. Further security levels for firm accounts are planned for later and are not part of the pilot phase.
- Uploads
- Uploads are pre-checked for file type and size. The first release has no virus scanner; files uploaded by clients land in your firm's inbox, which reviews them.
AdvoAccess is software, not legal advice. Data processing agreements and further documents follow before the pilot phase starts.
Want to give your clients better access?
Tell us briefly who you are. We will get back to you personally.
Non-binding and without registration.