Trust
Security
Last updated June 2026
Security is the product. This page summarizes the controls AttorneyArmor maintains for its platform. It is maintained by AttorneyArmor and is not an independent certification.
Authentication & access
- SSO via Google with email/password fallback.
- Role-based access enforced by row-level security on every customer-scoped table.
- Least-privilege access for personnel; production access is logged and reviewed.
Encryption
- TLS 1.2+ for all data in transit.
- Customer data encrypted at rest using AES-256 by our managed database provider.
- Secrets stored in a managed vault; never committed to source.
Infrastructure
- Hosted on hardened cloud infrastructure with isolated production environments.
- Continuous dependency scanning and automated patching of platform code.
- Daily encrypted backups with point-in-time recovery.
Application security
- Mandatory code review and CI checks before deployment.
- Webhook signatures verified before processing inbound events.
- Internal penetration tests of the platform we provide to customers.
Responsible disclosure
If you believe you have found a vulnerability, please email security@attorneyarmor.com. We will acknowledge within two business days and coordinate remediation.