Clio sets the standard for legal software
-
Dedicated security experts
Our security is led by experienced and certified cybersecurity experts, on duty 24/7/365 to monitor and respond to security issues, which ensures continuous data protection. Clio’s robust security is supported by specialised internal teams.
-
AI security your firm can trust
AI maintains the same high-level security standards as the rest of Clio’s platform. Data is never used to train AI models or for any other external purposes. All customer data remains within Clio’s secure, region-specific infrastructure.
-
Application security
Ensures our software is secure by finding and fixing security vulnerabilities, proactively addressing potential incidents, and improving our risk response.
-
Security engineering
Protects our infrastructure and corporate operations, focusing on clear operational visibility for rapid and effective incident response.
-
Product security
Builds secure, user-facing features and internal tools, managing Clio's login systems (Identity Service) and developing features like SAML/SSO and MFA.
-
Security compliance
Guides our security program according to industry best practices, audit requirements, and relevant laws and regulations—all to help Clio meet its overall governance, risk management, and compliance objectives.
-
Proactive information protection
We continuously enhance our cybersecurity posture by proactively monitoring systems for weaknesses, regularly updating software and system settings with the latest security improvements, and actively managing vulnerabilities. This includes a private bug bounty program, software component monitoring, and daily malware scans.
Designed to meet compliance requirements with ease
-
GDPR (General Data Protection Regulation)
Clio offers regionalized infrastructure for GDPR and UK Data Protection Act, and Swiss Federal Act on Data Protection (FADP) compliance. Our AI features are designed to ensure the rights of data subjects are protected.
Learn More -
PCI DSS
Clio Payments is built to ensure all payments are PCI compliant, which enables you to get paid 39% faster by accepting credit card payments from your clients.
-
HIPAA (Health Insurance Portability and Accountability Act)
Clio also supports your HIPAA obligations, ensuring ePHI is stored and processed according to the HIPAA Security Rule. HIPAA compliance also extends to AI functionality in Clio.
Learn More -
PIPEDA (Personal Information Protection and Electronic Documents Act)
Clio meets the requirements of PIPEDA , Canada's federal privacy law for private-sector organisations.
Tested and certified for strong security
-
Regular independent audits
Clio successfully completes annual SOC 2 Type II and SOC 1 Type II audits. The rigorous, independent reviews confirm our security practices meet high standards. Our SOC 1 and SOC 2 reports are available via trust.clio.com.
-
Regular independent security tests
At least annually, a leading cybersecurity firm conducts penetration tests on our platform, using advanced methods to find and fix potential security holes.
Why your firm can trust AI with Clio
-
Your data remains encrypted and local
All data used by our AI is encrypted and processed in your region (US, Canada, EMEA, or APAC) to ensure confidentiality and protection of client information.
-
Client data is private
Our AI tools process data in real time and it does not store or reuse it. Sensitive client information never leaves Clio’s secure environment, and outputs are generated only for the authorised user requesting them.
-
User permissions remain intact
AI is strictly controlled and limited to authorised users within the firm and follows your existing user permissions. This ensures only authorised information is accessed and displayed. Clio staff and external parties do not have access to this data.
Built with best practices on state-of-the art infrastructure
-
Keeping your data encrypted
Clio uses strong encryption. Data moving over the internet is encrypted using HTTPS/TLS 1.2 or higher, and stored data is encrypted with Advanced Encryption Standard (AES - 256).
-
Automatic backups and reliable servers
To ensure data access and prevent loss, we perform regular automatic data backups that are monitored for errors. Our systems use geo-redundancy, with infrastructure hosted by AWS in multiple regions for durability. You can also use our data escrow feature for your own automated backups. As part of our disaster recovery planning, we test production database restoration quarterly.
-
Data location and physical security
Clio offers data hosting choices in Canada, the US, Europe, and Australia. AWS facilities provide advanced physical security and are audited for certifications which Clio reviews annually. We follow a shared responsibility model for cloud security.
Advanced security features you control
-
Role-based permissions
Restrict visibility to sensitive case information to certain users at your firm.
-
Two-Factor Authentication (2FA)
Verify every login attempt via a mobile device - do it with a single tap using the Clio Mobile App or connect with an authenticator tool you and your firm already use.
-
Password policies
Clio enforces strong security practices by requiring strong password rules and preventing employees from using the same password when resetting.
-
Login safeguards
Protect against brute-force attacks by temporarily locking accounts after many failed login attempts.
-
Session and activity tracking
Clio logs the IP address of every session for your account and actions taken by your users to help you monitor for suspicious activity. In addition to logging, users are also able to review active sessions and terminate them. You can also see a log of every action taken by AI within the firm.
-
Customer Support (CS) security
If Clio support needs temporary data access, your explicit permission is required in the app. This access is time-limited, logged, and can be revoked at any time.
-
Customer data segregation
Clio logically separates each customer's data, ensuring only you and your team have access to your firm's information.
-
Our commitment to your trust
Clio is dedicated to being a trusted partner. We continuously invest in our security systems, processes, and expert team. Our successful third-party attestations highlight our commitment to continuous improvement.
For more details or specific security questions, contact support or visit trust.clio.com to request any of our security documentation.
Get started today
See how Clio can help your law firm get organized and practice more efficiently.