Trust center
Security, privacy and external data processing. We do not claim certifications we do not hold.
Security
Field-level encryption, TLS, MFA/passkeys/enterprise SSO, RBAC and ethical walls, audit logs, public endpoint rate limits, session revocation, backup and recovery drills.
Privacy and data rights
DSR access/erasure/rectification/restriction/portability; retention and legal holds; token-scoped client rooms; no paid rankings.
Access control
Seven roles, project ownership and ethical walls; SCIM provisioning/deprovisioning; all auth channels closed after deactivation.
Subprocessors
| Processor | Purpose | Status |
|---|---|---|
| Stripe | Payments/refunds | Not connected in production |
| SMTP provider | Notifications/reset email | Not connected in production |
| Peppol AP | E-invoicing | Not connected in production |
| TSA/CA | Timestamps/signing | Not connected in production |
| OCR service | Scanned document extraction | Not connected in production |
| Enterprise IdP | SSO/SCIM | Not connected in production |
Vulnerability disclosure
Email support@globallegalportal.com. We acknowledge within 5 business days. Please do not publicly disclose unpatched issues.