Encryption at rest
Uploaded case documents carry client PII and privileged material, so they are encrypted with AES-256-GCM before they ever touch object storage, and decrypted only on read inside the backend. A storage-bucket breach therefore yields ciphertext, not case files. Stored third-party credentials are encrypted at rest as well.
Encryption in transit
All traffic to CaseDesk runs over TLS. Authentication uses http-only session cookies — never read by JavaScript, so cross-site scripting cannot steal them — and passwords are stored with a memory-hard scrypt hash, never in plain text.
Tenant isolation
CaseDesk is multi-tenant by design. Each firm has its own isolated account; firm data, client matters and documents are scoped to that organisation and never co-mingled with another firm's.
Role-based access control
Access within a firm is scoped by role — Firm Admin, Partner, Associate, Paralegal and Client — enforced on the server, not just the interface. Clients see their own matter summary and next steps only.
Confidential by default
Your uploaded matter content is used only to generate your own analysis. We do not use confidential content to train third-party models, and we do not sell your data.
Built for India, designed to travel
CaseDesk is purpose-built for Indian courts, statutes and firm workflows today, and architected to extend to new jurisdictions as we grow. To discuss your firm's security requirements or a specific deployment, contact sales@casedesk.co.in.