Security built for privileged work
Law firms handle some of the most sensitive data there is. CaseLumen keeps each firm isolated, gates access by role, and logs the changes that matter.
Creates, updates, and deletes on cases, intakes, deadlines, and financials are logged with the user, timestamp, and before/after values. Read that history on the record, or every action in the firm on one Activity feed.
Eight firm roles — from Owner to Viewer, including Bookkeeper — with permissions checked on every action, not just hidden in the UI. Access is firm-wide today; matter-level ethical walls are not in the product yet.
Microsoft credentials, SSN last-4, and document folder links are encrypted in the database. Traffic uses TLS. Nightly database backups are encrypted and stored separately.
Case folders live in your firm's SharePoint or Google Shared Drive, and dates sync to Outlook or Google Calendar. Matter data — parties, deadlines, the trust ledger — lives in CaseLumen. Client uploads are staged briefly, then moved into your folders.
Chosen documents are sent to Anthropic's API to assist your attorneys. They are never used to train AI models. Drafts and suggested dates stay in review until someone on your team confirms or finalizes them. You can turn AI off for the firm.
Each firm is a hard tenant boundary. One firm cannot see another firm's cases, contacts, or financials — isolation is enforced in the query layer, not just the UI.
Your firm creates each API key, and a key can do only what it was given — today, opening intakes from your website. Revoke a key at any time. Every request is logged, and each change is labeled with the key that made it.
Client upload links and opposing-counsel productions expire on the date you set and can be revoked early. Counsel Exchange keeps an access log of every download on the case.
SAML 2.0 single sign-on with Okta, Azure AD, and Google Workspace — to centralize access and make offboarding instant — is on the near-term roadmap for Enterprise firms.
What we don't do with your data
Plain limits that matter when the work is privileged.
Your case data is never used to train AI models. Written discovery and related features run through Anthropic's API under those terms.
Case files and calendars stay in your Microsoft 365 or Google Workspace. Cost receipts, encrypted backups, and Counsel Exchange downloads (until the package expires) are stored by CaseLumen; client uploads are staged only until they reach your folders.
Operator access for technical support requires a written reason, is time-limited, and is logged. We do not use firm data for any other purpose.
Attorney–client confidentiality, respected by design
You retain ownership of everything you store in CaseLumen. We do not sell your data. We share it only with the processors named in our Privacy Policy — Stripe, Resend, WorkOS, Microsoft, Google, Anthropic, Cloudflare, Vultr, and Laravel Forge.
Deletes go to an archive you can restore. Some records can be permanently deleted, and cancelled accounts may be purged after 90 days. See our Privacy Policy and Terms of Service for the details.
See CaseLumen in your firm
Start a free trial or talk to our team about your security requirements.
Or contact sales.