Every firm isolated at database level
All firms share the software, but never each other's data. The isolation is not only in the application but in the database itself (row-level security): every database query sees only the rows of its own firm. Even a bug in the application therefore cannot show another firm's data. With every release we check, using a second test firm, that it can see nothing of the first.
Restricted matters within the firm
Within the firm, too, you can restrict a matter with entitled users or an exclusive administrator or team member. Then only those people and the administrators see the matter and everything attached to it (documents, time entries, tasks, invoices). This is enforced on the server, including in search, direct links and reports. More about matter access
Audit trail
Creation, changes, deletion, invoice status changes and deliberate overrides of the conflict check are recorded with user and timestamp.
Encrypted traffic
Traffic between your browser and Advoca is always encrypted (HTTPS/TLS); unencrypted connections are redirected to HTTPS.
Backups we actually restore
The database is backed up continuously to encrypted storage in the EU (Frankfurt) with immutable retention (object lock): during the retention period a backup cannot be deleted or overwritten, not even by an attacker with access to the server. A separate restore-test environment automatically restores the backup several times an hour and checks the result. If that fails, an alarm goes off.
Sign-in and accounts
- Passwords are only stored as a hash, never in readable form.
- Repeated failed sign-in attempts are limited.
- New firms confirm their email address and accept the terms of use; bots are stopped by a security check that sends no data to third parties.
- The administrator decides who gets access and with which role: administrator or team member.
GDPR and data processing agreement
For the personal data in your matters, you are the controller and Advoca is the processor. The terms of use include the data processing agreement. Advoca uses your matter data only to provide the service and does not look at it, unless you ask us to for support or the law requires it. Read our privacy policy as well.