Skip to content

Security

How client data is protected.

Encryption in transit and at rest. Role-based access. Relaw's infrastructure providers are SOC 2 Type II certified.

  • Encryption

    TLS and AES-256.

    In transit and at rest. From the browser through to the database.

  • Access

    Role-based.

    People see the matters the firm grants. Isolated environments. No shared login.

  • Infrastructure

    SOC 2 Type II hosts.

    The providers Relaw runs on are certified.

Controls

What is in place.

Hosting, data, messaging, and transport. The measures firms ask about before a client file goes on Relaw.

Hosting

SOC 2 Type II certified infrastructure providers, with DDoS protection and isolated deployments.

  • Regular third-party audits on the hosts
  • GDPR and CCPA ready
  • Encryption at rest and in transit
  • DDoS protection and monitoring
  • Isolated deployment environments

Database

Multi-layered protection on the records themselves.

  • AES-256 at rest
  • TLS in transit
  • Role-based access control
  • Network isolation
  • AWS infrastructure compliance

Messaging

Secure delivery between services, with token-based authentication.

  • TLS on every endpoint
  • Token-based authentication
  • Message signature verification
  • High availability design
  • Secure message delivery

Transport

TLS for every user connection, with integrity on the wire.

  • HTTPS encryption
  • Data confidentiality
  • Integrity protection
  • Secure user connections
  • Browser security indicators

Compliance

Security Reviews.

Security reviews are available upon request.
Please book a demo below to start the process.

Ask further questions at a demo.

Bring the security review to the demo. White-glove setup after.

Request a demo

14-day trial after onboarding · Standard from $269/mo annual