Security
What worries you
We do not talk about security in the abstract. These are the situations that actually come up in a practice, and what CortexLex does about each one.
What if someone signs in with my partner’s password?
Nobody shares credentials. Two-step verification adds a second barrier, and open sessions can be closed from any device.
Can another firm see my files?
Isolation does not depend on the program remembering to filter: the database itself refuses any query that tries to cross from one firm to another.
Will my assistant see the fees?
Permissions follow responsibility, not hierarchy. A matter marked confidential does not appear for someone who should not see it, not even in search.
How is shared content controlled?
The application checks authorization again when content is opened, downloaded, or shared. Generated documents retain the model and values used so they can be reviewed.
Real control
The firm administrator changes permissions and can withdraw access that no longer applies. Detailed administrative access and download logging will be available before it is offered as complete auditing.
How it is built
Technical decisions explained without jargon, because they are part of what you are buying.
Files have no permanent address that can be shared by accident. Every download re-checks authorization at that moment.
Every incoming file is validated by type, size and actual content, not just its extension. Quarantined anti-malware analysis is not offered until that control is deployed and verified.
Information travels encrypted between the device and CortexLex, and stays encrypted while stored.
Backups and restore procedures are maintained to respond to a service interruption.
Security events are investigated according to their impact and communicated in line with contractual commitments and applicable law.
Want to see it applied to your firm?
Request a demo