Skip to content
Security

Security

What we actually do to protect your cases.

Your data

  • Encrypted during every transfer and on our servers.
  • Site and database hosted in the European Union.
  • A case is visible only to its author, the matched lawyer and the assigned reviewer. Administrators have no access to case documents.
  • Each document opens through a temporary link reserved for the authorised person.
  • Automatic database backups.

Your account

  • Sign in with Google, GitHub or a password; the password is stored in irreversible form.
  • Account temporarily locked after several failed attempts.
  • Optional two-factor authentication with an authenticator app.
  • Additional verification code to enter the administration area.

Artificial intelligence

  • The assistant relies on Mistral AI, with Google Gemini as a fallback.
  • Legitym trains no model on your data.
  • Answers are an aid: no decision about you is made automatically.

Site protection

  • HTTPS enforced and a content security policy on every page.
  • Automatic code checks before every release.

Providers, retention periods and your rights: privacy policy

Report a vulnerability

Found a security flaw? Write to us.

security@legitym.com