Security
Security, built into Legalspot.
The controls a General Counsel and an IT team expect — present from day one, not bolted on later.
The controls a General Counsel and an IT team expect — present from day one, not bolted on later.
All data is transmitted over an encrypted TLS 1.3 connection. Documents are stored encrypted (AES-256).
The application runs on our own servers located in Warsaw, Poland. Your data never goes to third-party cloud providers.
Strict permission control — for both platform users and the internal Legalspot team.
Threat-detection systems run continuously. Every anomaly is analysed immediately.
Automatic daily backups kept in isolated environments, with fast recovery.
Authentication via Microsoft Entra ID — the secure standard used by the world's largest organisations.
Legalspot on your own servers. For organisations with heightened security requirements, we offer installation of Legalspot within the client's infrastructure. Your data never leaves your environment.
Legalspot regularly commissions external penetration tests from an independent, specialised firm. This independent verification lets us ensure the platform meets the highest standards of resilience against attacks. Findings are analysed and rolled out as improvements.
Immediate analysis of every report or detected anomaly.
In the event of a breach, we notify users and supervisory authorities in line with GDPR requirements.
We remove the cause of the incident and prepare a detailed final report.