Security & Trust

We take security seriously

Your legal data matters. We do our best to protect it with solid security practices, transparent data handling, and honest communication about how we operate.

Data Protection

How we protect your data

We use industry-standard practices to keep your data safe. Nothing exotic — just solid, proven approaches applied consistently.

Data encrypted in transit (TLS) and at rest (AES-256)
Regular encrypted backups
EU-based hosting infrastructure
Role-based access control with customizable permissions
Multi-factor authentication support
SSO / SAML integration for seamless enterprise login

🔐

Data Ownership

Your data, your rules

We believe your data belongs to you. We don't use it for anything beyond providing you with the service, and we make it easy to take it with you if you leave.

All data stored in EU data centers
Full data export in standard formats at any time
Data deletion upon request
Logical tenant isolation between customers
We don't sell, share, or mine your data

📤

Compliance

GDPR and beyond

As a tool built for legal and compliance professionals, we practice what we preach. We're GDPR compliant and continuously working to improve our compliance posture.

GDPR compliant data processing
Data Processing Agreement (DPA) available
Privacy by design in our development process
Sub-processor list available with change notifications
Security documentation provided for vendor assessments

📜

Our Practices

What we do day-to-day

Security isn't a feature — it's part of how we work.

🛡️

Secure Development

Code reviews, dependency scanning, and security-aware development practices. We keep our dependencies up to date and follow OWASP guidelines.

📊

Audit Logging

Actions in Coolegi are logged for accountability. You can see who accessed what and when — useful for your own compliance and governance needs.

📋

Incident Handling

We have incident response procedures in place. If something goes wrong that affects your data, we'll let you know promptly and honestly.

🔄

Regular Backups

Automated daily backups with tested recovery procedures. We monitor our systems and aim to catch and resolve issues before they affect you.