Law firms hold their clients’ most sensitive matters. This is how CaseFilerPK keeps them that way.
Each layer works on its own, so one mistake never exposes another firm's data.
Requests are only accepted for the workspace the address belongs to.
Role and firm checked on every request; sessions bound to your address.
The database filters every query to your firm — even if a check were missed.
Files fingerprinted on arrival and served through signed, expiring links.
Every record belongs to one firm. Besides the application's own checks, the database itself refuses to show or change another firm's rows (row-level security), and links between records can never cross from one firm to another.
Your workspace answers only on your firm's address. Sign-ins, sessions and file links issued there do not work anywhere else.
Documents are stored on servers we run, not in third-party cloud storage. Each file is checked for its real type and fingerprinted when it arrives, and is only served through signed links that expire.
In your workspace the long-lived sign-in token is kept in a cookie page scripts cannot read; sessions have a hard maximum length and end everywhere when a password is reset.
Platform staff sign in with a password and an authenticator code. They cannot see your firm's data unless access is approved for a limited time — your administrators are told, can see every read, and can end it at once.
Every action in the platform console is written to an audit trail that cannot be edited or deleted.
Your administrators can download all of the firm's data at any time — also if the subscription ends.
Workspace status · sample
