Data and privacy

What happens to your data, where it lives and how it leaves.

6 controls, monitored continuously

Data minimisation
Cases stores what you give it to build your case, and nothing else.
Monitored
Deletion on request
Deleting a case removes it from the product immediately and from backups within 35 days.
Monitored
Data residency
Documents are stored in the European Union.
Monitored
Data Processing Addendum
A DPA with Standard Contractual Clauses is available to every customer.
Monitored
Subprocessor oversight
Every subprocessor is reviewed before use and annually, and you are notified before a new one is added.
Monitored
Privacy by design
Data protection impact assessments are run for new processing.
Monitored

Other areas