Security

Signed-in workflow diagnostics help distinguish an attempted action, a validation problem, and a server-confirmed save or upload result. Events contain fixed technical categories and an internal account identifier; they do not include record contents, filenames, form values, raw errors, or screen recordings.

The diagnostics table is restricted to authorized server and support operations. Other users and invited legal team members cannot access it. Events expire after 30 days with hourly cleanup, and active events are removed on account deletion. Diagnostic storage failures do not turn a successful save into a failed save.

Help → Report a problem creates a reference that you can separately email to support. Logging is limited and may miss offline or client-side failures; a lack of errors is not a guarantee that an action succeeded. Confirm the app's save status and keep originals where appropriate.

Custody Folio verifies account access with a one-time code sent to the account email. No password or authenticator app is required.

Protect your email account and device, never share a sign-in code, and sign out on devices you do not control.

The iOS app additionally locks a restored session with Face ID, Touch ID, or the device passcode. This device lock is separate from server sign-in.

The app keeps each custody matter and its files tied to the account that created them.

Custody records are not public. Access by another app user is limited to sharing you initiate, such as revocable read-only Attorney Access, separately enabled attorney conversations, or an export or file you choose to send.

Custody Folio does not provide end-to-end encryption. The application and its service providers process records to provide the service, including file screening and any optional import you approve. Restricted operational access and encryption protections do not mean that only you can decrypt the data.

Pausing attorney conversations stops the attorney's access to that conversation history; revoking Attorney Access also stops their case access. Previously sent record text or file details remain in conversation history for the client until the associated case or account is deleted, subject to applicable privacy requests. Editing an original record does not rewrite a sent copy.

If you see records you do not recognize or believe someone else accessed your account, contact support promptly. Do not include sensitive case details in your initial message.

Uploaded files pass through automated malware screening before accepted storage. Screening reduces risk but cannot guarantee that every harmful or deceptive file will be detected.

Files and generated reports are private inside the app. Protect any copy you download or share because the app cannot control it afterward.

The service records minimized authentication, request, evidence, attorney-access, deletion, and security events to detect abuse and investigate incidents.

Security logs may include timestamps, routes, request identifiers, status codes, and shortened hashes of IP addresses, browser or device information, account IDs, or case IDs. They are designed not to contain custody-record or file contents.

Access to production systems and logs is restricted and reviewed. Security and raw request logs are deleted under the retention periods stated in the Privacy Policy.

We investigate suspected unauthorized access, contain confirmed incidents, preserve necessary evidence, and notify affected people and regulators when applicable law requires notice.

Do not use email for an emergency or to meet a legal deadline. Security reports should omit sensitive case content unless we provide a protected method for sending it.

If you see records you do not recognize or believe someone else accessed your account, sign out and contact us promptly.

Include the affected page, approximate time, and device. Do not email passwords, verification codes, court files, or sensitive case details.