Immigration files hold passports, criminal histories and asylum declarations. These are the controls that keep them confidential, and how each one works.
Only verified members of your firm can sign in, and every session stays under your control.
Users sign in with a single-use link or code delivered to their verified email address. With no stored passwords, there is nothing to leak, reuse or brute-force.
Magic link or 6-digit code, valid for 15 minutes, locked after 5 failed attempts.
Every signed-in device is listed in Settings and can be revoked at any time. Revocation takes effect on the next request, not when a token happens to expire.
15-minute access tokens with rotating refresh tokens. Reuse of a retired refresh token revokes the session, and session state is verified server-side on every request.
Your firm's data is separated from every other firm's and visible only to the people you choose.
Every request is authorized against your firm before any data is returned. Another firm cannot read, or even detect, your records.
Firm membership is resolved from the database on each request, never trusted from the token. Cross-firm lookups return the same 404 as a nonexistent record.
Restrict a sensitive matter to named attorneys or groups. Removing someone revokes their access immediately.
Per-case grants to users or groups, with group membership evaluated live on each request.
Clients can access only their own case, documents and messages. Drafts, internal documents and other clients' records are never exposed.
Portal endpoints are restricted to the client role, and every query is bound to the authenticated client.
Client documents are encrypted, stored privately and never exposed through a public link.
Passports, certificates and declarations are stored in private, access-controlled storage and encrypted both at rest and in transit.
Per-firm storage paths, server-side encryption at rest, TLS in transit.
Each time a file is opened, Lexfill issues a temporary, signed link. A forwarded or saved link stops working within minutes.
Presigned URLs expire after 5 minutes for downloads and 15 minutes for uploads.
Only document and image formats are accepted, so executable or web content can't enter a case file.
File-type allow-list (PDF, Office, images; HTML and SVG rejected) with a 25 MB per-file limit.
Your data is used to do your work, and nothing else.
Under our agreements with our AI provider, your firm's data is not used to train AI models.
A single AI provider processes client data; no other AI vendor receives it.
Lexfill does not file with USCIS or any court. Every form and packet is reviewed and submitted by your team.
When filing review checks requirements online, it reads only official government sources.
Web retrieval in filing review is restricted to .gov domains.
Signatures and review decisions are recorded so they can be verified later.
Every signed engagement letter includes a signing certificate, and any change to the document after signing is detectable.
SHA-256 digest at sending and at sealing. The certificate records signer name, email, timestamp, IP address, user agent and consent version, and ESIGN consent is captured before signing.
Document approvals and rejections are recorded with the reviewer and time. Rejected files are retained, not overwritten.
US-hosted, hardened at the edges, and careful with what it logs.
The application, database and file storage are hosted in the United States.
Credentials for connected Google Calendar, Zoom and Clio accounts are encrypted before they are stored.
OAuth tokens encrypted with AES-256-GCM.
Automated sign-in attempts are throttled, and inbound payment and email events are rejected unless their signature verifies.
Per-IP rate limits on every endpoint, stricter on authentication. Payment and email provider signatures are verified; outbound webhooks are signed with HMAC-SHA256.
Error reports exclude client-entered data and credentials.
Personal data collection is disabled, request bodies and auth headers are stripped, and session replays are fully masked.
Rule 1.6(c) asks lawyers to make reasonable efforts to protect client information, including when they rely on outside software. We'll complete your security questionnaire and walk your IT team through these controls on a call. To report a vulnerability, email contact@lexfill.app.