Security and data

Two lawyers talk. Two firms stay apart.

One deployment, one database, tenanted by firm. Two lawyers at two firms get a conversation, and their firms get nothing. Here is where each line is drawn, what a firm controls, and what we do not claim.

Firm A · own tenant
Dana Whitfield
Apex Law
Filed under Mendez v. Hartwell · retention 7y · exportable
Person to person
no tenant link
Firm B · own tenant
Meredith Cole
Hartwell Logistics
Filed under Deposition scheduling · retention 10y · exportable
The firm boundary

Scoped to the acting firm

Every read and write in the cross-firm surfaces is scoped to the signed-in person’s firm, never to anything in the request.

The gates

Not found, not forbidden

A colleague, either administrator, a third firm or the same person at another firm all get one answer. The difference would confirm a conversation exists.

The gates

Files in a fixed order

Relationship first, then scan verdict, then withdrawn or expired. One neutral answer covers all of them.

Firm controls

Retention, legal hold, custodian

Apply to the firm’s own copy of every conversation and file. Ethical screens on matters, audited.

Records

Certified export

Each firm exports its own side. Tamper evidence comes from fingerprints, not from trust in a log.

Records

The firm’s audit trail

Every administrative act and matter-association change, written in the same transaction as the change. Identifiers only.

MatterChat desktop app, Administration: the Permissions grid listing what Admin, Moderator, Leader and Owner roles may do across chat, boards and the console

Firm controls in the MatterChat desktop app: the permissions grid

Ownership

The record is yours, and only yours

A network conversation exists twice: once in each firm's workspace. Neither copy depends on the other. What one firm deletes, files or exports has no effect on the other side.

Look-ups
An administrator cannot see who their lawyer sent a request to, or who sent one to them.
Endings
A close, a block, a departure and a closed account look the same from outside. History stays readable; files and writes stop for both.
Filing
Attaching a conversation to a matter is private. The other firm never sees that you did, or which matter.
Deletion
Deleting your copy does not touch theirs. Their record stays intact under their retention.
Never crosses
An email address as an output. Your matter id. A scan verdict. The reason a conversation ended. Whether a decline happened.

Need the details for your security review?

Security sets out the firm boundary, the gates and what we do not claim. Write to us for a review and a person on the team will answer.