How we protect your data

An immigration case carries sensitive documents. These are the protections the platform actually applies — and what each one means.

Security Features

Encryption in Transit and at Rest — Data travels over TLS 1.3 and is stored with AES-256 encryption at rest. Your client information is encrypted in transit and in the database — the platform processes it to prepare the case, and each account can access only its own data.
Secure Infrastructure — The platform runs on managed cloud infrastructure (Supabase and first-tier providers), with automated database backups.
Access Controls — Authentication through a managed provider (Supabase Auth). Access is scoped per account, and one account's data never reaches another.
Regular Audits — Per-account data isolation: each firm and each client can access only its own data, enforced by security rules applied to every record in the database.
Data Privacy — We never sell your data. You can request access, export, or deletion of your information — the rights are described in our privacy policy and CCPA rights page.
Incident Response — Access and operation logging in the database, alongside the managed infrastructure logs. Failures and improper access leave a trail to investigate.