Legal & Privacy

Security Overview

Technical security measures protecting your data.

Effective Date
2026-01-01
Last Updated
2026-09-14
Version
1.1
Policy Owner
Heritage Pro Se LLC
Pending independent legal review. AI does not certify legal compliance. These policies have not been reviewed by qualified privacy and technology counsel.

Encryption

All data in transit is encrypted via TLS/HTTPS. Documents and files at rest are stored using secure cloud infrastructure with encryption.

Access Controls

Row-level security ensures each user can only access their own case data. Authorized administrators may access user case content under audit-logged conditions for authorized support, security review, incident response, or legal-hold compliance. Administrative access is not available for routine browsing and is logged in system audit logs.

Authentication

User authentication is managed through secure session tokens. Password reset flows use time-limited tokens. Optional OAuth providers (Google) use industry-standard flows.

Document Storage

Uploaded documents are stored in private storage. Access requires authenticated API calls with signed URLs. See our Document Storage Policy for details.

Audit Logging

Administrative actions are logged in system audit logs. Users can request a report of administrative actions affecting their data. Audit logs are designed for security and compliance purposes and do not guarantee immutability unless independently verified.

Incident Response

We maintain incident response procedures. In the event of a data breach, affected users will be notified as required by applicable law.

Heritage Pro Se LLC is not a law firm and does not provide legal representation or substitute for licensed legal counsel. Information and document-support tools are intended for self-represented users. Licensed attorneys available through any directory or referral service are independent providers.