Security and data location

• The database, documents and backups are at Hetzner Online GmbH, in Nuremberg, Germany (EU). Hetzner's data centres are certified to ISO/IEC 27001.
• Traffic to the app passes through Cloudflare's network, which protects it from attacks.

• Every connection to the website and the app is encrypted (HTTPS).
• Passwords are stored only in protected (hashed) form, and two-factor secrets are encrypted.

• Each firm sees only its own data.
• Roles and per-matter access: the administrator decides who sees what.
• Two-factor sign-in, protection against password guessing, and automatic sign-out after inactivity.
• Our staff have no function in the app for viewing firms' content and are bound to confidentiality.

• The servers are protected by a firewall, and the database is not reachable from the internet.
• Only authorised persons access the servers.
• Security updates are installed regularly.

• We make regular backups, kept for at most 30 days.
• Deleted documents stay in the trash for 30 days so they can be restored.
• After the service is cancelled, the firm's data is permanently deleted after 90 days.

• The service's availability is monitored continuously. The current status is at status.clerkmind.com.
• Error reports contain no names, emails or document content.
• Each firm has a record of who did what. Login history is kept for 12 months, and server logs for up to 30 days.

Report a security issue to [email protected].