Security, two-step sign-in and the audit log

Two-step sign-in

Every account sets up an authenticator app (TOTP) at first sign-in. Sensitive permissions in the database require a two-factor session, so a stolen password alone can't reach case data.

Firm isolation

Every firm-owned record carries the firm's ID and is isolated by database rules. A bug in the interface can't leak one firm's data to another — the database itself refuses.

The audit log

Settings → Audit log shows an append-only record of actions across the firm: who did what, when, and to which record. Entries are hash-chained so they can't be altered after the fact, and read events for sensitive records are logged too.

Ethical walls

Walls restrict specific cases to named people. They apply everywhere — search, conflicts, deadlines, even The Clerk — not just the case page.