Passports, social security numbers, employment histories. Casey is built so that each firm, each case and each person sees exactly what they should, and nothing more.
Social security numbers and other sensitive answers are encrypted before they are stored and shown masked on screen. They are never written to logs.
Every user can turn on an authenticator app. A firm can require it for everyone, and an admin can reset it for a locked-out colleague.
Each firm runs on its own subdomain. A signed-in session is tied to that address, so one firm's data can never be reached from another's.
Clients see only their own case. Team members see the matters they are assigned to, with roles for attorneys, paralegals and case managers.
Uploads belong to a matter and are only served to people who can open that matter. Documents never execute in the browser.
Passwords are hashed, failed attempts are rate-limited per account and per address, and magic links are refused on two-factor accounts.
Who viewed a document, who changed a setting, who turned two-factor on or off, and when. The audit log is kept per firm and never contains the sensitive values themselves.
Casey runs on Render with a managed Postgres database. All traffic is encrypted in transit.
Export a case, its documents and the filing package at any time. If you leave, your data leaves with you.
We are a young company and we would rather tell you exactly where we are than hide behind badges. Ask us anything.
An external review of the platform, with the summary available to customers.
Formalizing the controls we already run into an auditable program as the firm base grows.
Evaluating Casey? Send us your firm's questionnaire and we will answer it in full.
Write to team@hicasey.com, or book a call and bring your IT person. We will walk through everything on this page in detail.