Your Security is Our Priority
As a lawyer, your firm has an obligation to maintain the confidentiality of your clients and staff, which is why keeping data secure is one of LawPay’s top priorities. However, we understand that some lawyers might be nervous about the topic, leading to questions about how information is being stored and kept secure.
In this guide, we’ll provide an overview of how LawPay ensures data security and aim to answer any remaining questions you may have.
What is Cloud Computing?
The idea of cloud computing is simple: When you store information in an online storage solution, you’re storing information “in the cloud.”
In other words, your data lives on servers owned and maintained by a third party. This way, your law firm can access files from anywhere, anytime. Some examples of popular cloud storage tools include Google Drive and online bank accounts.
Cloud computing comes with several benefits, including:
- Affordability: Cloud-based storage avoids costly solutions like in-house IT departments and expensive onsite servers.
- Convenience and Mobility: When your data is stored in the cloud, you can access your firm’s case files 24/7 from any location using any internet-enabled device.
- Security: Online cloud solutions provide secure electronic data storage and backup, so your files are more protected than with physical paperwork.
How LawPay Protects Your Data
LawPay runs on an Amazon Web Service (AWS) cloud computing platform. Amazon has experience managing cloud-based systems across the United States for some of the biggest companies and government organizations, so you can trust them to stay at the forefront of technology.
Amazon also has strict policies to protect the physical security of its servers, safeguarding the integrity of its data. In fact, it builds its data centers and network architecture to meet the requirements of even the most security-sensitive organizations.
In addition to Amazon’s security standards, LawPay enforces network restrictions that ensure your data communications are never accessible to other AWS customers. We also ensure that confidential information is encrypted during transmissions, whether it’s between our own systems or external partners, including our payment providers and underwriting systems.
For more information on Amazon’s cloud infrastructure and security, we recommend visiting their website.
Payment Card Industry Data Security Standard (PCI DSS) Compliance
LawPay’s platform is regularly evaluated by independent auditors to confirm that we meet specific provider standards for Payment Card Industry Data Standard (PCI DSS) compliance.
Additionally, our internal and third-party security teams conduct consistent internal and external vulnerability scans to keep LawPay secure. We also constantly monitor the latest security threats and evolve and adapt our services to address any issues that might arise.
Military-Grade Encryption
When you connect to LawPay’s servers, your data is encrypted before transmission using a 256-bit, military-grade Transport Layer Security (TLS) connection. This is the same secure connection used in online banking, investments, and healthcare portals.
Multi-Factor Authentication
Multi-factor authentication (MFA) is a security feature that makes it extremely difficult for unauthorized users to access your account. For example, when you log into a web-based software system without MFA, your data is available after entering your username and password. However, systems with MFA require an additional step.
Instead of automatically logging in after entering a username and password, MFA systems require you to enter a one-time verification code to access your account. These codes are usually sent to an email address or phone number on file to minimize the risk of data breaches. It might seem tedious to prove your identity multiple times before logging in, but this level of security is essential to keeping data secure.
Other Security Features
In addition to the security measures we’ve already mentioned, LawPay has other features and safeguards in place to protect your account. These precautions include:
- Built-in PCI compliance to comply with ABA regulations, as well as an easy-to-use PCI compliance program at no additional charge
- Tracking sessions and user activity to help monitor any suspicious activity
- Automatically logging out users after a certain period of inactivity or if the account has been accessed on another machine
- Features like Customizable Payment Pages and a Card Vault prevent you from having to manually request and process client credit card information
- Different permission settings and access controls, so you can control what each user can access
