Security
Security: what we say about your datacan be checked
Every measure that protects your data is written in a published document, and here is the link to the clause that binds us to it.
Six measures, six clauses
Each card opens the section of the security and compliance document where it is written.
Encryption at rest
Sensitive data — personal information and matter notes — is encrypted with AES-256-GCM before it is stored. Anyone reaching the database without authorization reads unreadable text.
Read the clauseEncryption in transit
All traffic between your browser and the server travels over TLS. No unencrypted path is left open.
Read the clauseAccess by role and by firm
Every query is limited to the firm you belong to and to what your role is allowed to see. The filter does not depend on anyone remembering to write it: a compile-time guard rejects any query that omits the firm boundary.
Read the clauseAudit log
Every action on personal data is recorded with a timestamp, the responsible user, and the detail of the change. They are audit records of the relevant actions, and they are not deleted.
Read the clauseThe original does not stay with us
The file you upload is processed and not stored. What remains is the text Custodio read and where it came from, linked to the filing that produced it; not the original, not a cloud link, not a provider identifier.
Read the clauseHabeas Data
Processing is governed by the Ley 1581 de 2012 in Colombia (its data protection statute), by the Ley N° 8968 and its Reglamento in Costa Rica, by the LOPDP and the Decreto 904 in Ecuador, and by the Ley núm. 172-13 in the Dominican Republic. Access, rectification and cancellation rights are exercised from your account, and opposition where the law of the country recognizes it.
Read the clauseThe rights over your data — to know, update, correct and delete it — are exercised from your account, and from the public channel as well. Go to the rights channel
Anything left to ask?
Create your free account and see how a real matter is protected. If a question remains, write to us.