Security

Security is the product. This page summarizes the controls Attorney Armor maintains for its platform. It is maintained by Attorney Armor and is not an independent certification.

Authentication & access

• SSO via Google with email/password fallback.
• Role-based access enforced by row-level security on every customer-scoped table.
• Least-privilege access for personnel; production access is logged and reviewed.

Encryption

• TLS 1.2+ for all data in transit.
• Customer data encrypted at rest using AES-256 by our managed database provider.
• Secrets stored in a managed vault; never committed to source.

Infrastructure

• Hosted on hardened cloud infrastructure with isolated production environments.
• Continuous dependency scanning and automated patching of platform code.
• Daily encrypted backups with point-in-time recovery.

Application security

• Mandatory code review and CI checks before deployment.
• Webhook signatures verified before processing inbound events.
• Internal penetration tests of the platform we provide to customers.

Responsible disclosure

If you believe you have found a vulnerability, please contact our security team. We will acknowledge within two business days and coordinate remediation.