Lumbre Legal

Security & data

How we protect your firm’s data

Law firms trust us with sensitive case information. Here is how Lumbre protects it, in plain English.

No passwords to steal

You sign in to Lumbre with a one-time code sent to your work email. There is no password to guess, reuse, or leak.

Each firm's data stays separate

Every firm's cases, contacts, and documents are kept to that firm. Each request inside the app is checked against the signed-in person's firm, so one firm can never see another's data.

Connected-service credentials are encrypted

When your firm connects a service to Lumbre, such as its texting account, those credentials are stored encrypted and are never shown back in the app. Especially sensitive identifiers, such as Social Security and tax ID numbers, are encrypted too.

A record of changes

Important actions, such as settings changes, case ownership changes, texting-consent changes, case-file transfers, and fax activity, are written to an audit trail, so there is a record of what changed and when.

AI suggests, people decide

Lumbre's AI reads incoming documents and emails and suggests updates, such as a new deadline or an insurance policy. A person on your team reviews every suggestion. Nothing is filed or added to a case without that approval.

Documents in access-controlled storage

Your documents are stored in access-controlled cloud storage. They are never public links: a document is only shown to signed-in members of the firm it belongs to. That covers everything that arrives through document management, the medical records and bills behind medical specials, liens, and settlements.

No tracking inside the app

We use website analytics only on our public marketing pages. Analytics never runs inside the Lumbre application, so your case and client pages are never tracked.

Your data, on request

Your firm's data is yours. You can export case files, and we will provide an export of your firm's data on request.

Questions

If you have a security question, or you believe you've found a vulnerability, email privacy@lumbrelegal.com. For anything else, use our contact page.