Security and privacy
This page describes the controls LegalTime implements to protect your firm and client data. Maintained by LegalTime; not an independent certification.
EU hosting
Data lives exclusively in EU data centers (Netherlands and Frankfurt). No production data transfers outside the EEA.
Encryption
Encryption in transit (TLS 1.3) and at rest for secrets and document storage. Key management via a dedicated KMS.
Tenant isolation
Each customer has a logically separated dataset. Row-level security enforced at the database, not just the app.
Immutable audit trail
All changes to matters, time entries, invoices and AML documents are logged with timestamp and user ID.
2FA
Two-factor auth via authenticator app or hardware key (WebAuthn). SSO via Microsoft Entra and Google Workspace on Firm+.
GDPR & DPA
Standard data-processing agreement available. GDPR-compliant processes for access, rectification and erasure requests.
How we handle your data — from login to deletion
- •1. Sign-in
TLS 1.3 connection, mandatory 2FA for firm accounts, SSO via Microsoft Entra or Google Workspace on Firm+.
- •2. Storage
Data encrypted at rest in EU data centers (Netherlands/Frankfurt). Secrets and documents via dedicated KMS keys.
- •3. Isolation
Each customer lives in a logically separated dataset. Row-level security at the database — an app bug cannot mix tenants.
- •4. Usage
Every read and write is logged with timestamp, user ID and source IP. The audit trail is immutable and retained for seven years.
- •5. Backups
Daily encrypted backups with point-in-time recovery up to 30 days. Backups stay within the EU.
- •6. Export & deletion
On request you receive a full export (CSV/JSON). On termination we delete your data within 30 days, except statutory retention.
What we don't claim
We do not claim ISO 27001, SOC 2 or other external certifications without an audit report. If a certification becomes relevant for your firm, we'll let you know and share the underlying report.
Responsible disclosure
Found a security issue? Email security@legaltime.nl. We confirm within two business days.
More billable hours, less admin.
In 30 minutes we show how LegalTime fits your firm. No commitments.