For your firm’s review
Security & trust
Review BRON’s published reports, data-handling disclosures and known limits. Each report states what was evaluated, when and what the evidence can establish. English is the version of record.
On this page
Review documents
The reports below were published on October 15, 2026. Publication does not update their findings or establish current production conditions.
Accessibility Conformance Report (VPAT)
- Scope
- The historical versions of the attorney web app, client portal, iPhone app and Mac collector named in the report.
- Evidence
- An unsigned, source-based self-assessment with original ratings and references.
- Limits
- No independent audit or conformance certification. Known gaps and Not Evaluated ratings remain; publication does not establish current conformance.
Continuity and disaster recovery
- Scope
- Recovery responsibilities, database and document recovery, application restoration and communication with affected firms.
- Evidence
- A public plan describing recovery sources, proposed targets and the limits of recorded exercises.
- Limits
- Unrehearsed recovery paths, no automatic application or database regional failover and a single-operator dependency. Targets are not contractual recovery commitments.
Access and attorney review
Protected matter routes check access on the server, including ethical-wall screening. Database row-level security provides a separate boundary for direct database access; the server uses a privileged database identity and must perform its own checks. Client exposure requires both the record’s classification and its client-visibility setting.
Consequential actions use the existing server confirmation gate. Citation review remains a send gate. These controls support attorney review; they do not replace professional judgment.
Review access, data and approval controls →Read the privacy notice and sub-processor disclosure for data handling and providers. The accessibility statement describes the engineering target, recorded checks and limitations.
What a record check establishes
Hash-chain and provenance checks can identify integrity failures in the records checked. A timestamp or matching digest establishes a narrower fact about an artifact. It does not prove that nothing was withheld or that a matter’s record is complete. Known removals and recovery gaps must be disclosed.
Inspect artifact verification →Evidence limits
These documents do not assert a SOC 2 certification, an ISO certification, an independent penetration-test result or WCAG conformance. They are not a guarantee of recovery. Source review does not verify today’s production configuration.
Report a concern
Use private vulnerability reporting for security issues, or Support for accessibility and continuity questions. Do not send passwords, tokens, privileged records or client information in an initial inquiry.