Security & Data Protection
How Avocapp protects your firm's data.
Where your data is hosted
Your data is hosted on secure AWS cloud infrastructure in the United Kingdom, with redundancy across availability zones. Processing outside this infrastructure — for example identity verification — runs only under strict data-processing agreements.
Encryption
All data is encrypted with AES-256 at rest and in transit using TLS — the same standard used by financial institutions.
Access control & audit trails
Access within your firm is role-based: you decide exactly who can see cases, documents and financial information. Every action by every user is recorded in a complete audit trail.
Confidentiality & AI
Your data is used for your firm only and is never used to train generic AI models. AI Legal Search answers cite their sources, and your lawyers review them before relying on them.
Identity verification
Identity documents and verification photos are sent directly to our verification partner (SOC 2 Type II and ISO 27001 certified) over an encrypted connection. They are never stored on Avocapp servers.
Backups & availability
Automated daily backups and a 99.9% availability target keep your practice running — you are never locked out of your own data.
Your ownership & export
You retain ownership of all data you upload. You can export your cases, clients and documents at any time — including at the end of your subscription.
Cross-border transfers
Our hosting is in the United Kingdom. Where a processing step requires a transfer outside this infrastructure — for example to our identity-verification partner — it is carried out under appropriate safeguards, such as standard contractual clauses, as described in our Privacy Policy.
Data Processing Agreements
If your firm requires a Data Processing Agreement, write to us at contact@avocapp.com — we will walk you through the current arrangements and documentation.
Full details
For the complete picture — data categories, retention, sub-processors and your rights — please read our Privacy Policy.