LawVu supports single sign-on (SSO) via SAML 2.0, and all SSO integrations use SCIM provisioning for secure, automated user management. Administrators can also enforce multi-factor authentication (MFA) across their organization’s account.
All customer data is encrypted at rest using AES-256, including databases, document files, backups and logs. Data in transit is protected using TLS 1.2 or higher.
The LawVu Services undergo annual penetration testing by independent CREST-certified security firms.
You can choose to host your data in any one of the following regions:
Our engineering teams follow OWASP secure-by-design principles. All code is peer reviewed and must pass approval gates with a software architect, QA manager and senior management before release to production.
Our platform is monitored in real time, with automated alerting to our engineering and security teams 24/7.
Our Service Level Addendum commits to 99.95% uptime.
Check live service health at any time on our system status page.
We maintain business continuity and disaster recovery plans and regularly test them against defined recovery time (RTO) and recovery point (RPO) objectives.
LawVu is certified to ISO/IEC 27001 and independently audited against SOC 1 and SOC 2 Type II standards as part of our ongoing compliance program.
Our ISO/IEC 27001 certificate and SOC reports are available on our Trust Center.
How we collect, use and protect personal information.
Our commitments when we process personal data on your behalf.
The third parties that help us deliver LawVu, and where they are located.
The principles that guide how we develop and use AI at LawVu.
LawVu’s AI features run within our existing Microsoft Azure environment, under the same security controls as the rest of the platform.
AI features are covered by our security and privacy compliance program, including the certifications and commitments set out above.
Access our certifications, audit reports and security documentation in one place.
