One installation per firm
Every firm has its own server, its own database and its own document storage. No system holds data from more than one firm.
Security and trust
Professional confidentiality is a technical requirement too
A law firm holds information its clients would share with no one else. This is how Legado protects it, and what we are still building.
Absent, not hidden
A matter a user cannot access does not appear in search, counts, calendars or notifications. They cannot even infer that it exists.
No unnecessary third parties
Fonts and icons are served from your own server. Opening a case file sends no request to any outside provider.
Controls in place today
Every one of these controls is implemented in the product today.
Access control in the database
Permissions are applied as conditions inside every SQL query, not as a filter on screen afterwards. The browser never receives data the user may not see.
Roles and matter-level permissions
Administrator, Partner, Lawyer, Assistant and Read-only, plus matter-by-matter access that decides who sees each case.
Argon2id passwords
Resistant to GPU and side-channel attacks. Passwords are never stored in readable form.
Tamper-resistant audit log
Relevant actions are recorded with their author and time. The log only accepts new entries: nothing is edited or deleted.
Encryption in transit
In production, all traffic between the browser and your server is encrypted over HTTPS. The database and storage are never exposed to the internet.
Time-limited document links
Every preview or download uses a signed, short-lived link. A forwarded link stops working after 15 minutes.
Separate operations console
Deployment settings are managed from an independent account that has no access to the firm’s matters.
Questions about your data
Where is my firm’s data hosted?
On your installation’s server, which is decided with you. It can be the firm’s own server or one contracted for it; either way it is exclusive.
Does Legado share my information with third parties?
No. Apart from the email server your firm configures for notices, the only outside request the product makes is to the Rama Judicial’s public register, and only with the case number.
Who at Legado can see my matters?
The operations account that manages the deployment has no access to matters. Only your firm’s administrator grants that access.
What happens to my data if I stop using Legado?
It is yours. Because it lives on an exclusive installation, the database and documents sit on your firm’s server and belong to you.
Ready to stop checking the portal by hand?
Book a demo and see your own matters kept up to date in Legado.