Dedicated security experts
Our 40 person staffed security team monitors and responds to security issues, ensuring continuous data protection.
Setting the standard for legal software
AI security your firm can trust
AI maintains the same high-level security standards as the rest of Clio’s platform. Data is never used to train AI models or for any other external purposes.
Application security
Application security finds and fixes vulnerabilities, proactively addresses potential incidents, and improves our risk response.
Product security
Product security builds secure, user-facing features and internal tools, offering SAML-based single sign-on (SSO) and MFA to control account access.
Security compliance
Security compliance guides our program according to industry best practices, audit requirements, and relevant laws and regulations.
Proactive information protection
We continuously monitor systems for weaknesses, update software with the latest security improvements, and manage vulnerabilities through a private bug bounty program and daily malware scans.
Security engineering
Security engineering protects our infrastructure and corporate operations, with clear operational visibility for rapid incident response.
Meeting and exceeding compliance requirements
PCI DSS
Clio Payments is built to ensure all payments are PCI compliant, helping you get paid 39% faster by accepting credit card payments from clients.
PIPEDA
Clio meets the requirements of PIPEDA, Canada's federal privacy law for private-sector organizations.
Tested and certified for strong security
Regular independent audits
Clio successfully completes annual SOC 2 Type II and SOC 1 Type II examinations, confirming our security practices meet high standards. Reports available via trust.clio.com.
Regular independent security tests
At least annually, a leading cybersecurity firm conducts penetration tests on our platform to find and fix potential security holes.
Why your firm can trust AI with Clio
Your data remains encrypted and local
All data used by our AI is encrypted and processed in your region (US, Canada, EMEA, or APAC) to ensure confidentiality and protection of client information.
Client data is private
Our AI tools process data in real time and do not store or reuse it. Sensitive client information never leaves Clio’s secure environment.
User permissions remain intact
AI is strictly limited to authorized users within the firm and follows your existing permissions, so only authorized information is accessed and displayed.
Built with best practices on state-of-the-art infrastructure
Keeping your data encrypted
Data moving over the internet is encrypted using HTTPS/TLS 1.2 or higher, and stored data is encrypted with AES-256.
Automatic backups and reliable servers
We perform regular automatic data backups, use geo-redundant AWS infrastructure across multiple regions, and test production database restoration quarterly.
Data location and physical security
Clio offers data hosting choices in Canada, the US, Europe, and Australia, and follows a shared responsibility model for cloud security.
Advanced security features you control
Role-based permissions
Role-based permissions restrict visibility to sensitive case information to certain users at your firm.
Two-Factor Authentication (2FA)
Two-factor authentication verifies every login attempt via a mobile device, with a single tap using the Clio app or an authenticator you already use.
Password policies
Clio enforces strong password rules and prevents reusing the same password when resetting.
Login safeguards
Login safeguards protect against brute-force attacks by temporarily locking accounts after repeated failed attempts.
Session and activity tracking
Clio logs the IP address of every session and every action taken by users, so you can monitor for suspicious activity and review or terminate active sessions.
Customer Support (CS) security
If Clio support needs temporary data access, your explicit permission is required. This access is time-limited, logged, and revocable at any time.
Customer data segregation
Clio logically separates each customer's data, so only you and your team have access to your firm's information.
Our commitment to your trust
Clio is dedicated to being a trusted partner. We continuously invest in our security systems, processes, and expert team. Our successful third-party attestations highlight our commitment to continuous improvement. For more details or specific security questions, contact support or visit trust.clio.com to request any of our security documentation.