ISO/IEC 27001:2022 certified
Certificate No. 26ZOCZ0922IS, valid to August 2029.
Trust and security
Your papers stay yours.
What we do to protect your data, and what we do not claim. We are precise about this so that you do not have to guess.
LegiScore · Security at a glance
- CertificationISO/IEC 27001:2022Certified
- StorageIndia-region infrastructureStored in India
- Sign-inPhone OTP, no passwords storedLive
- Personal-data breachNotice within 72 hoursDPDP Act
What we have today
Three facts you can check.
Each one is already published on legiscore.in. Nothing here is a promise about the future.
Stored in India
Data, documents, app services and email are hosted on India-region infrastructure. Third-party AI analysis runs on globally distributed API endpoints.
Phone OTP, no passwords
Sign-in uses a one-time code on your phone, and no passwords are stored. The database enforces row-level isolation, and business teams work in a workspace with roles.
Honest scope
What we have, and what we do not claim.
This page is descriptive, not contractual.
In place today
- ISO/IEC 27001:2022 certification
- Data and documents stored on India-region infrastructure
- Encryption at rest, provided by the cloud storage layer
- Phone OTP sign-in, with no passwords stored
- Row-level data isolation, enforced by the database
- Personal-data breach notice within 72 hours, under the DPDP Act
Not claimed
- SOC 2 (Type I or II): not attested
- GDPR: not certified
- PCI DSS: not directly applicable
- Customer-managed keys (CMK / BYOK): not offered today
- Bug bounty: none
- 24/7 security operations centre: none
The details
Security at LawyerDesk.
1. Certification
LawyerDesk is ISO/IEC 27001:2022 certified. Certificate No. 26ZOCZ0922IS, valid to August 2029.
2. Where data lives
The primary data store, document storage, app services and email are hosted on India-region infrastructure.
Third-party AI analysis is performed via globally distributed API endpoints. Your data is stored in India; AI analysis can run outside it.
3. Sign-in and access
You sign in with a one-time code sent to your phone. No passwords are stored.
The database enforces row-level data isolation. Business accounts get a team workspace where each person has a role.
4. Encryption
Data at rest is encrypted by the cloud storage layer. We do not currently operate customer-managed keys (CMK / BYOK).
5. Incidents and status
If a personal-data breach happens, we notify within 72 hours, as the DPDP Act requires.
Service status is public at status.legiscore.in.
6. What a report is
LegiScore builds its reports from public government land records. It runs 100+ automated government searches, so you do not have to visit each portal yourself.
LawyerDesk is not a law firm and does not give legal opinions. Reports are AI-assisted and must be reviewed by a qualified professional.
7. Still to be confirmed
- The email address for security questions and vulnerability reportsTo be confirmed
8. Questions
For the complete published detail, read the security page on legiscore.in. If you have a question, or you think you have found a problem, contact our team.
Have a security question?
Ask our team. We answer with what is published and true.