Legal Hold Pro

Legal Hold Pro is the world’s first pure cloud-based system for managing the litigation hold notification process. The tool has been designed from the ground up to ensure that your data is safe and secure using industry best practices.

The Legal Hold Pro system has been evaluated for use by world-leading companies and it meets their demanding requirements. We are committed to the keeping your private data private (Confidentiality), the way you intended it (Integrity) and accessible when you want it (Availability).

LEGAL HOLD PRO SECURITY IN BRIEF

• High availability and network accessible
• HTTPS data-in-transit security and SSL authentication
• Secure data protection and encryption for data-at-rest
• SAS 70 Type II data centers with world-class security protocols
• Data protection for business continuity and disaster recovery, including redundant offsite storage
• 24/7/365 security monitoring to prevent malicious behavior

DATA SECURITY IS OUR TOP PRIORITY

The software application was architected to ensure strict data access controls, with Secure Sockets Layer (SSL) authentication and secure log-in credentials. We have implemented a solid design and operational rigor that prioritizes security and observes tight internal controls.

User information, including all emails and files, is encrypted when stored on the application server. All servers are protected behind multi-layer firewalls and user passwords are stored using one-way encryption employing hash values that are inaccessible. Vulnerability testing and threat modeling is a standard design component, and independent audits performed.

Following are some of the security protocols designed into the Legal Hold Pro system:

• HTTPS data-in-transit security and SSL authentication
• Sound practices for managing login/passwords
• Cross-site scripting protections and forgery safeguards
• Anti-phishing barriers
• Separate per-user accounts allow group accounts to have full accountability and control
• Tamper-resistant cookies

PARTNERING WITH LEADER IN CLOUD HOSTING ENSURES DATA PROTECTION AND AVAILABILITY

To ensure optimum data protection, the Legal Hold Pro application is hosted at world-class data centers. As a pioneer in cloud computing, no company knows more about secure hosting and it allows us to take advantage of the talents of some of the top security engineers in the business.

System performance is continually monitored, and physical access and environmental security to the data center strictly maintained. The latest virus and spam protection, hardware and software security patches and intrusion monitoring protocols are assured. Our servers are SAS 70 Type II compliant and are regularly used for data and services that meeting stringent requirements and regulations, including PCI, HIPAA and SOX.

Working with a leader in cloud hosting provides our customers with the following benefits:

• The data centers are engineered with performance and security in mind, offering multiple servers with redundant fiber and power infrastructure for the network, web server and database layers.
• The servers themselves are redundant and scalable, demonstrating nearly 100 percent network availability, and are actively monitored 24/7/365 and are routinely audited.
• All data is routinely backed up both on-premise, as well as off-site using an entirely separate collocation service provider.
• Legal Hold Pro’s data are stored on servers located within United States territory.
• Industry leading security protocols to prevent malicious behavior include:
  • Managed intrusion detection system guards against threats like worms, Trojans, BotNets and unauthorized intruders.
  • Distributed Denial-of-Service Mitigation includes three layers of detection to identify and filter hostile traffic, including traffic monitoring and analysis, anomaly detection at the server level and traffic filtering and re-routing in the event of any malicious activity.

We not only rely on our partner to perform daily data backups to ensure no lost data, we also employ a second world-class cloud provider for offsite disaster recovery storage. This assures our clients of multiple layers of data redundancy that would be cost prohibitive to replicate in-house or with dedicated hosting.