A legal platform holds the most sensitive record a person owns. This page describes what we actually built, in plain terms — including the parts that are not finished yet.
Every table carries row-level rules. If your account has no right to a row, the database refuses to return it — the interface never gets the chance to decide. This is the difference between a screen that hides data and a system that does not hand it over.
An authorisation manifest records, as data, which roles may touch each table, view, function, storage bucket and scheduled job. Anything not explicitly granted is denied. Because the manifest is data, drift between what we intended and what is actually configured becomes detectable rather than theoretical.
Log output passes through a redaction layer that removes authorisation headers, tokens, prompts, document contents, email addresses, phone numbers and payment identifiers. Diagnostics should never become a second copy of your case.
Signing a device out invalidates its scope rather than merely clearing a local token. You can see active sessions and end them from your account.
You can request a copy or the deletion of your data from inside your account. Data you cannot export is not really yours.
A law firm passes a verification step before its profile can accept a mandate. Being on Lawendo is meant to carry information.
We would rather tell you this than let you discover it.
Lawendo is being developed towards full GDPR alignment ahead of general availability. We do not claim completed certification and will not until an independent review says so.
The controller/processor split between us and the law firms on the platform is still being determined with legal counsel; the privacy policy will state it precisely once it is settled.
Automated fulfilment of data export and deletion requests is being built. Requests are handled today, and the surface to make them already exists in the product.
The platform is in an invitation-only phase precisely so that these gates close before a wider audience depends on them.
Security questions get a direct answer from the person who built the thing.