Security
Your clients' information is sensitive. Here is how EasyLaw handles security, in plain English.
Data Ownership
Your firm's data belongs to your firm. We do not sell, share, or use your data to train AI models. You can export everything at any time.
Encryption
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256. Authentication uses industry-standard JWT token-based security with secure refresh rotation.
Access Controls
Role-based permissions let you control who sees what. Partners, associates, and support staff each get appropriate access levels. Matter-level access restrictions ensure confidentiality across your team.
Two-Factor Authentication (2FA)
2FA is on the roadmap for Q3 2026. In the meantime, accounts are protected by secure token-based authentication with automatic session expiry and refresh rotation.
Audit Logs
Every significant action (logins, document access, edits, exports, and permission changes) is recorded in a tamper-evident audit log accessible to firm administrators.
Data Export
Export your matters, documents, billing records, and audit logs in standard formats at any time. No lock-in, no hidden restrictions.
Backups and Retention
Database backups run daily via automated script. Backups are compressed, encrypted, and retained for a rolling 7-day window by default. The restore process is scripted and tested. Retention and frequency are configurable per deployment.
Incident Response
Security incidents are triaged within 24 hours of detection. Affected customers are notified within 72 hours when a confirmed data breach impacts their information. Report issues to security@easylaw.co.zw.
Infrastructure
EasyLaw is hosted on secured infrastructure with firewall rules, rate limiting, and DDoS protection. Application containers are isolated and regularly updated.
Responsible Disclosure
If you discover a security vulnerability, please report it responsibly to security@easylaw.co.zw. We take all reports seriously and will respond within 48 hours.
Questions
For security-related questions, contact security@easylaw.co.zw or visit our Contact page.