How we handle your data · lawft Support

Security & privacy

We protect your data, at rest and in transit.

Every submission is protected both while it's moving and while it's stored, meeting the industry-leading security standards used by modern support platforms.

IN TRANSIT

Encrypted end to end

Your description, screenshots, and any recording travel over an encrypted HTTPS connection, so nothing can be read as it crosses the internet between your browser, our system, and the tools where the ticket lives.

AT REST

Stored on encrypted disks

Your report is stored on encrypted disks. Any files you attach are sent straight to our developers and not retained on our servers, so screenshots don't linger in extra places.

ACCESS

Scoped to you alone

Each report has a private link, and opening one from the site requires both its ID and the email it was filed under, so no one can stumble onto someone else's submission.

Who this is for. This page is for staff at law firms that use Lawft. If you're a client of one of those firms, we can't help with your matter, please contact your firm directly.

What we collect

Only what's needed to fix your issue:

Your work email, so we can reach you.
Your description of the bug or idea.
Anything you choose to attach, such as a screenshot or a short screen recording.
Basic technical details captured automatically (your browser and operating system) to help us reproduce the problem.

We never ask for a password, a login, or a payment method. There are no accounts to create.

Where it goes

When you confirm a report, we turn it into a ticket in our engineering system so the right people can work on it. That ticket, and anything you attached, is visible to the Lawft team working on your issue. It is never shown publicly, and it's never listed anywhere others can browse.

How it's protected

Encrypted in transit. Everything you send travels over an encrypted (HTTPS) connection.
Encrypted at rest. Where your report is stored, the underlying disks are encrypted.
Private status pages. Each report has a private link. To open a report from the "Check a report" page you need both its ID and the email you filed it under, so no one can stumble onto someone else's report.
Not searchable. Report pages are blocked from search engines.
Minimal footprint. Files you attach are removed from our servers once they reach the ticket, so screenshots don't linger in extra places.
Spam-protected. A report only proceeds after you confirm it from your inbox, which also verifies it really came from you.

A note on client information. Please share only what we need to fix the problem. A screenshot of the screen (with the address bar) is what helps us reproduce a bug, the client's details in it usually aren't necessary. If a screenshot would show client information, feel free to redact it first.

Being straight with you

This is a professional support tool, with protections comparable to the mainstream help desk platforms used across the industry. It is not end-to-end encrypted, and the information you submit does reach our engineering system so we can act on it. If your firm's confidentiality obligations call for a different arrangement, contact us before submitting sensitive material and we'll work something out.

How we keep you posted

Entirely by email. You don't need an account or any access to our tools. You'll get a confirmation with your report ID, then an update whenever the status meaningfully changes, all the way through to resolved.