Security - We Keep Your Data Safe
Wherever you are in the world.
SECURITY MATTERS
You Value Your Data's Security. We Value Your Trust
Safeguarding your data is paramount, and Lawcadia keeps your data safe with an ISO 27001:2022 certified Information Security Management System (ISMS). This international standard ensures that your data is protected through meticulous third-party security evaluations, rigorous audits, penetration testing, and continuous security enhancements.
By adhering to these stringent protocols, we can confidently secure your data across various geographical locations. The sovereignty of your data is maintained, with the flexibility to access your information seamlessly through shared or private cloud infrastructures.
By adhering to these stringent protocols, we can confidently secure your data across various geographical locations. The sovereignty of your data is maintained, with the flexibility to access your information seamlessly through shared or private cloud infrastructures.
PLATFORM PERFORMANCE
Secure & Reliable
Our platform, powered by Amazon Web Services (AWS) data storage, ensures that your information is not only safeguarded but also accessible from any location, at any time.
By leveraging AWS's robust infrastructure, we offer a solution that ensures your data is both secure and easily retrievable. It also provides the peace of mind that comes with knowing your data is protected by the best in the business.
Reliability is important and Lawcadia is active across three data centres in AWS London region and an additional three data centres in AWS Sydney region, ensuring you remain online even in the case of a data centre unavailability or outage. The platform is also reinforced with auto-scaling to adjust capacity to maintain steady and predictable performance.
By leveraging AWS's robust infrastructure, we offer a solution that ensures your data is both secure and easily retrievable. It also provides the peace of mind that comes with knowing your data is protected by the best in the business.
Reliability is important and Lawcadia is active across three data centres in AWS London region and an additional three data centres in AWS Sydney region, ensuring you remain online even in the case of a data centre unavailability or outage. The platform is also reinforced with auto-scaling to adjust capacity to maintain steady and predictable performance.
SECURITY CONTROLS
Access Management
Enhancing your legal teams access without compromising security has become simpler with Identity Access Management providers (IAM) and Single Sign-On (SSO). They streamline platform access across your organisation while upholding high security standards.
Lawcadia utilises SAML to exchange authentication and authorisation data between your Identity Provider (IdP) including Okta, auth0, OneLogin, Microsoft Entra ID, Google IdP and our platform. Allowing users to authenticate with a single set of credentials across multiple services.
In addition, we support SCIM (System for Cross-domain Identity Management) for automating the exchange of user identity information and can also enable multifactor authentication (MFA) as another layer of security for administrator roles.
Lawcadia utilises SAML to exchange authentication and authorisation data between your Identity Provider (IdP) including Okta, auth0, OneLogin, Microsoft Entra ID, Google IdP and our platform. Allowing users to authenticate with a single set of credentials across multiple services.
In addition, we support SCIM (System for Cross-domain Identity Management) for automating the exchange of user identity information and can also enable multifactor authentication (MFA) as another layer of security for administrator roles.
ACCESS CONTROL
Information Barriers
Information barriers are essential controls that prevent unauthorised communication and data sharing between specific teams or individuals, ensuring compliance and safeguarding sensitive information within your legal matters.
Lawcadia uses highly granular permissions so that you have complete control over what data your users can access as well as an ability to lock down matters that are highly sensitive.
Role-based access control (RBAC) further strengthens these measures by assigning permissions based on an individual's role. This ensures employees only have access to the information necessary for their work, reducing the risk of unauthorised access.
Lawcadia uses highly granular permissions so that you have complete control over what data your users can access as well as an ability to lock down matters that are highly sensitive.
Role-based access control (RBAC) further strengthens these measures by assigning permissions based on an individual's role. This ensures employees only have access to the information necessary for their work, reducing the risk of unauthorised access.
INDEPENDENTLY ASSESSED
SecurityScorecard
You can gain a holistic view of Lawcadia’s cybersecurity posture with security ratings.
SecurityScorecard calculates cybersecurity scores based on 10 factors that reflect different cybersecurity practices and risks. Lawcadia has an 'A' grading and consistently out-performs competitors.
SecurityScorecard's trusted and proven security ratings are used by 70,000 companies across the globe.
SecurityScorecard calculates cybersecurity scores based on 10 factors that reflect different cybersecurity practices and risks. Lawcadia has an 'A' grading and consistently out-performs competitors.
SecurityScorecard's trusted and proven security ratings are used by 70,000 companies across the globe.
Security Protocols
Secure Data Encryption
The Lawcadia platform is end-to-end encrypted, with dual layer (Application and Cloud level) data-at-rest encryption using AES 256 and transit layer encrypted with TLS 1.2/1.3.
Frequent Platform Updates & Improvements
Regular platform updates and necessary patches are released in the cloud environment without downtime. Proactively fixing issues as they arise supports continuous improvement and allows for positive and more frequent enhancement cycles.
Multi-Factor Authentication & Single Sign-On
Lawcadia supports and recommends SAML 2.0 single sign-on (SSO). However, where this is not possible, we enforce multi-factor authentication.
Real-Time Monitoring
We monitor our application for real-time health, security, uptime and general event updates using an array of comprehensive monitoring tools, including threat detection and network vulnerability scanning, which feeds into our Advanced SIEM (Security Information and Event Management) system.
Backups & Disaster Recovery
All data is backed up regularly throughout the day and is stored for six months. Lawcadia has a comprehensive disaster recovery plan in place in which various scenarios are tested annually, ensuring a quick recovery from any disruptions should they arise.
Enterprise-Grade Web Application Firewall (WAF)
A cutting-edge advanced WAF (web application firewall) system protects Lawcadia from DDoS (distributed denial-of-service) attacks and other threats, keeping your data safe.
