Client files deserve careful handling.
Immigration files hold passports, finances and family histories. Here is how CaseMerit keeps them in the right hands.
Who can see what
Access is set per role, not left open by default.
Signing in
- Two-factor sign-in with an authenticator app, which a firm can make mandatory for every staff member.
- Automatic sign-out after a period of inactivity.
- An optional office IP allow-list, so staff can only sign in from approved networks.
- Repeated failed sign-ins are slowed down to block password guessing.
- Password resets use one-time links that expire after an hour.
Firm data kept apart
Every record belongs to one firm, and every query is limited to the firm that is signed in. One firm can never see another firm's clients, cases or documents.
Audit log
Sign-ins, changes to clients and cases, document reviews, payments and permission changes are recorded with who did it and when. Each entry is linked to the one before it, so a deleted or edited entry shows up as a break in the chain. Owners can review and export the log at any time.
Documents
- Files can't be opened by a direct link. They are only served after checking the person is allowed to see them.
- Every upload gets a checksum, and replaced documents keep their earlier versions.
- Retention rules and legal holds help you keep files as long as you must, and no longer.
Your data, your control
Export every record and document from Settings whenever you like, as a full archive or a database backup. If you leave, you take your data with you.
Found a security issue? Please contact us and we will respond promptly.