Security
LegalDesk uses tenant isolation, role-based access, secure sessions, and auditable administration to protect firm information.
Access control
Firebase authentication identifies users. Database rules and server-side authorization check tenant membership and permissions for protected operations.
Data handling
Document operations use short-lived signed URLs. SMTP and object-storage credentials are kept server-side and must be supplied through protected environment configuration.
Firm controls
Firm owners and administrators can manage roles, revoke account sessions, review audit activity, and deactivate tenant members.
Last updated: August 25, 2026.