LegalDreams Security & Trust Center

Implemented Today

• Server-side validation on all public website forms (waitlist, priority onboarding).
• CAPTCHA / abuse-prevention checks on public form submissions.
• Parameterized database queries to reduce injection risk.
• Delivery logging for outbound notification and acknowledgement emails.

Planned

Not yet implemented - in development

• Formal encryption-at-rest and in-transit documentation for customer/matter data.
• Tenant isolation architecture for multi-firm deployments.
• Structured audit logs for platform actions (once case/matter features are live).
• Published data-residency and infrastructure-region commitments.
• Independent security review or certification (none currently held or claimed).

Customer Responsibilities

• Keep your account credentials and device access secure.
• Apply least-privilege access when inviting team members to your firm's workspace, once team features launch.
• Only upload or submit content you have the right to process under applicable law and your professional obligations.
• Review AI-assisted output before relying on it, once AI features are live - see our AI Policy.

Reporting a Security Issue

If you believe you've found a security vulnerability, please follow our Responsible Disclosure Policy rather than exploiting or publicly disclosing it.