Security built for privileged work
Law firms handle some of the most sensitive data there is. CaseLumen keeps each firm isolated, gates access by role, and logs the changes that matter.
Creates, updates, and deletes on cases, intakes, deadlines, and financials are logged with the user, timestamp, and before/after values. You can read that history on the record.
Seven firm roles — from Owner to Viewer — with permissions checked on every action, not just hidden in the UI. Access is firm-wide today; matter-level ethical walls are not in the product yet.
Microsoft credentials, SSN last-4, and SharePoint folder URLs are encrypted in the database. Traffic uses TLS. Nightly database backups are encrypted and stored separately.
Case folders live in your firm's SharePoint and dates sync to Outlook. Matter data — parties, deadlines, the trust ledger — lives in CaseLumen. Client uploads are staged briefly, then moved into your SharePoint.
Chosen documents are sent to Anthropic's API to assist your attorneys. They are never used to train AI models. Drafts and suggested dates stay in review until someone on your team confirms or finalizes them. You can turn AI off for the firm.
Each firm is a hard tenant boundary. One firm cannot see another firm's cases, contacts, or financials — isolation is enforced in the query layer, not just the UI.
SAML 2.0 single sign-on with Okta, Azure AD, and Google Workspace — to centralize access and make offboarding instant — is on the near-term roadmap for Enterprise firms.
What we don't do with your data
Plain limits that matter when the work is privileged.
Your case data is never used to train AI models. Written discovery and related features run through Anthropic's API under those terms.
Case files and calendars stay in your Microsoft 365 tenant. Cost receipts and encrypted backups are stored by CaseLumen; client uploads are staged only until they reach SharePoint.
Operator access for technical support requires a written reason, is time-limited, and is logged. We do not use firm data for any other purpose.
Attorney–client confidentiality, respected by design
You retain ownership of everything you store in CaseLumen. We do not sell your data. We share it only with the processors named in our Privacy Policy — Stripe, Resend, WorkOS, Microsoft, Anthropic, and Cloudflare.
Deletes go to an archive you can restore. Some records can be permanently deleted, and cancelled accounts may be purged after 90 days. See our Privacy Policy and Terms of Service for the details.
See CaseLumen in your firm
Start a free trial or talk to our team about your security requirements.
Or contact sales.