Purpose

Security Protocol.

Security Protocol

Purpose Legal provides legal support and eDiscovery solutions that deliver at the speed of law, safely and securely. Our systems and infrastructure have continuously maintained ISO 27001, and SOC2 Type II Certifications through adherence to the highest security standards and protocols and have over ten years in a row without a material defect. We’ve maintained this through strict adherence to our security protocols and the standards below.

Data Security

Confidentiality agreement signed by every employee
Data is encrypted or decrypted for maximum security
Transmission of data is secured over 4096-bit SSL protocols
Periodic data back up and monitoring facility
Multiple layers of user I.D. authentication and tracking
Usage of USB, CD/DVD drives, Bluetooth, and optical devices blocked; prompt alert systems place in case of any violation
Adherence to rigorous password security standards
Our data centers are fully virtualized with redundant network devices that ensure no single point of failure

Network Security

Secured VPN connectivity for content sharing
Seamless integration into clients’ networks with the highest levels of security and confidentiality
Firewall administrator inspection of network log
VLAN to avoid merging information from one client to another
Unified theft management device to monitor and track all incoming and outgoing packets
Traffic and bandwidth allocation prioritized and controlled at user/application level with QoS monitoring
Email security to control spam mail and viruses
EDR installed to all critical systems
Scheduled and random audits to ensure adherence to procedure

Data Center Security

Environmental controls

24-hour A/C power, UPS with emergency diesel generator backup, HVAC, fire detection and suppression linked to the local fire authority and comprehensive security measures. Purpose Legal’s Datacenter is fully equipped with CCTVs in operation at all times.

Security Policy

Proximity card readers, hand scanners, video surveillance, chain link fencing and no external windows

Preparedness

Un-interruptible Power Supplies (UPS) are provisioned in an N+1 configuration and designed to supply full power to all essential services in the event of a main power failure or fault. Generator systems are configured for auto-start and will start up within 45 seconds of a main grid power failure. Utilizing a fully locked metal cabinet

Access

Access is requested by submitting an Access Request Ticket via email to the Datacenter’s Service Desk prior to the visit.

Visitors

Visitors are escorted to the servicer cabinet through 4 security access points – each is secured by a Biometric reader and number pad combination with a proximity card reader 9 Privileged & Confidential after providing Government issued ID and biometrics, the relevant Purpose Legal personnel is given a security card and allowed to enter.

Backgrounds Checks

All Purpose Legal employees are background checked and security vetted before being able to work on client projects.

Remote Security

NDA signed by all the employees
Provide training sessions on phishing and other related malware
VDI installed on all machines used by attorneys
No data can be copied from the server to local devices
TrendMicro Antivirus enabled in all VDI with active & behavioral scan, device block, application block, and web reputation
Forcepoint Websense for web security enabled to restrict user access and allow administrative monitoring
TrendMicro Email security enabled for all email domains to protect from phishing and spam emails
Client database and protocol materials accessed through Purpose Legal’s VPN and remote desktop session
Purpose Legal’s Microsoft SharePoint and Teams, accessed via VPN and VDI, used for collaboration Internet restricted based on project requirement
Redundant internet connectivity ensures sufficient availability
All permission/setting change requests raised with support ticket and processed with appropriate approvals
Purpose Legal’s gateway IP address disclosed to platform vendor to restrict platform access within VDI environment

Purpose

Security Protocol.