Product security

How Cases protects your cases inside the application.

• Workspace isolation

  Every query is scoped to your workspace, and every route declares who may call it.

  Monitored
• Passwordless and SSO sign-in

  Sign-in by one-time email code or Google and Microsoft SSO; no passwords to leak.

  Monitored
• Role-based access

  Private and shared cases, with per-case membership decided by your administrators.

  Monitored
• Tamper-evident audit trail

  Reads, changes and decisions are recorded with who, what and when; entries are never deleted.

  Monitored
• Legal hold

  A case under legal hold cannot be altered or deleted until the hold is released.

  Monitored
• Secure development lifecycle

  Peer-reviewed changes, dependency scanning and automated tests gate every release.

  Monitored
• Annual penetration testing

  An independent firm tests the application and infrastructure every year and after major changes.

  Monitored