Why does confidentiality matter so much in this work?
Customers hand over identity documents, agreements, payment records and private correspondence so that a legal task can be done. Advocates also carry a professional duty of confidentiality, set by the rules of the profession that the Bar Council of India publishes. A platform that supports advocates has to make that duty easy to keep, not hard.
The portal is built around that idea. Protection is layered, so that no single mistake, such as a reused password or a mis-sent file, exposes a case. The sections below take each layer in turn, and the trust and security page gives the summary.
What protections does the portal provide?
| Protection | What it does | What you do |
|---|---|---|
| One-time-code sign-in | Verifies every sign-in with a code, with lockout after repeated failures | Use a password you do not reuse and never share a code |
| Encrypted document vault | Stores files privately after a virus scan, never on public links | Keep customer files inside the portal |
| Access by assignment | Shows you only the cases assigned to you, and ends access when a case closes | Do not seek or share access to other cases |
| Audit trail | Logs views, downloads, signatures and changes with time and device | Work through the portal so the record is complete |
| Protected signed files | Versions signed documents so they cannot be silently changed | Sign only approved documents |
How is sign-in protected?
Every sign-in is verified with a one-time code after your password, and repeated failures trigger a lockout. Changes to your payout account need a fresh code too. The aim is that a stolen password alone is not enough to reach a case or redirect a payout.
Your part is to use a password you do not use anywhere else, keep the device you sign in from up to date, and write to the partner desk at once if you suspect that someone else has used your account. Quick notice limits what a problem can become.
Who can see a case and its documents?
Files uploaded to a case are scanned for viruses and stored privately in an encrypted vault. There are no public links to documents. You see only the cases assigned to you, and your access ends when the case closes, so a closed matter does not stay open to you indefinitely.
The same rule works in the other direction. Other partners cannot see your cases, and customers see their own cases only. Because access follows the assignment, accepting or declining a case is also the moment at which information is shared, which is why the response timer and the offer screen matter.
What does the audit trail record, and why?
The audit trail logs views, downloads, signatures and changes, each with the time and the device used. It exists to give a factual answer when someone asks what happened on a case, and to make careless or improper access visible. Signed documents are versioned, and a changed document creates a new version instead of overwriting the old one.
For partners, the practical result is that working through the portal protects you. If a customer ever questions what was done, your actions are on the record with their dates, which is far better than relying on memory. The DSC guide shows how signatures appear in that record.
How does this relate to privacy and data protection?
The programme is aligned with India's data protection rules, and partners can make export and deletion requests for their personal data by writing to the partner desk. The privacy policy will set out what is collected, how it is used and how long it is kept once the legal copy is published, and the partner agreement will cover the handling of customer data. Both pages are marked as pending until then.
Documents you provide when you register are protected in the same vault as customer files. The documents guide lists what is asked for and why.
What must partners do to keep data confidential?
- Keep customer data confidential and inside the portal
- Use your own account only and never share your password, codes or token
- Decline a case promptly if you have a conflict or cannot take it on
- Tell the partner desk at once about any suspected misuse or mistake
- Keep your credentials and your agreement up to date
If something does go wrong, write to the partner desk straight away with the case reference and a short description. Complaints follow the grievance process. This guide describes the protections as built into the portal and is not legal advice.
What should you do about your own devices?
The portal protects data where it is stored, but a case is also open on your screen while you work. As good practice, keep your computer and browser updated, lock the screen when you step away, avoid public computers for case work, and do not leave downloaded copies of customer files in shared folders or on removable drives.