Security and data

Safe enough for a law firm. Because it was built for one.

Conveyancing files hold some of the most sensitive information your clients have. Here's how OpLegal looks after it.

Where your data lives

Your firm's data is stored in London: the database and the documents. It's encrypted when it's sent and when it's stored.

Who can see what

  • Each firm's data is kept separate at database level, so one firm can never see another's matters.
  • Access by role. You decide each person's role and the areas they can open, so each person sees only what their job needs.
  • Clients see only their own matter, in a portal in your firm's branding.

GDPR, built in

Requests to see, correct, restrict or delete personal data are handled inside OpLegal, with the letters and records to go with them. Erasure keeps what the law says you must keep, such as anti-money laundering records. Retention and archiving follow your firm's rules, and there's a record of what personal data you process and why.

A full audit trail

Who did what, and when, on every matter: from approving an estimate to accepting an ID document.

Fraud protection

  • Bank details never go by email. Clients see them only in their secure portal.
  • A fraud warning on every completion statement, reminding clients to confirm bank details by phone.
  • Changes are logged, so you can see who changed what.

AI and your data

  • The AI reads a document only when someone at your firm asks it to, for a particular job on a particular matter.
  • The AI features run on your firm's own account with an AI provider, such as Anthropic or OpenAI. Your firm confirms its agreement with the provider before AI is switched on.
  • A person decides. Everything AI suggests is marked as a suggestion until someone at your firm accepts or changes it.

Questions

If your firm has a security questionnaire, we're happy to go through it with you. Get in touch.