Security & Compliance

Security built for legal data.

Dovelta is designed for the data sensitivity of legal practice. The sections below describe our posture at a high level. Detailed documentation and attestations are available on request under the appropriate agreements.

architecture · tenant isolation
RLS enforced
Firm A
tenant_a
matters
clients
documents
Firm B
tenant_b
matters
clients
documents
Firm C
tenant_c
matters
clients
documents
row-level isolation · no cross-tenant reads
shared control plane
encrypted in transit · TLS 1.2+
Identity
auth
Audit log
audit
Policy
rls
data at rest · encrypted
posture · v1
Posture

How we protect the file.

Tenant isolation

Each firm operates inside its own isolated data boundary. Matter, client, and document data do not cross tenants.

Secure access controls

Access is granted at the matter level and follows role. Users see the files they are entitled to see, no more, no less.

Encryption in transit and at rest

Traffic between your firm and Dovelta is encrypted in transit. Data at rest is encrypted using industry-standard practices.

Controlled workflows

Workflow gates and review states keep the file moving through a defined path. Submission actions are attributable and auditable.

Operational discipline

Environment separation, change management, and monitoring are part of how Dovelta is run, not an afterthought.

CICC & Law Society-aligned record keeping

Matter-level audit trails, durable engagement records, and access controls shaped around the obligations immigration consultants and law firms operate under. Dovelta supports the practice; regulatory responsibility remains with the firm or consultant.

Compliance roadmap

We do not list certifications or regulatory approvals we have not earned. Our compliance roadmap is discussed directly with prospective firms as part of onboarding, including regional requirements where applicable.

Ready

Want the detailed posture?

Book a call. We will walk through our architecture, data handling, and compliance approach in the context of your firm's requirements.

Book a demo
Response within one business day
demo · working session
  • A real immigration matter walked intake → submission
  • IRCC form generation with barcode, live
  • Evidence library, deadline discipline, review gates
  • Your questions answered on the file, not in slides
no slide decks · real matter