How Jursu protects your data
Client files, hearing dates, and case notes are sensitive by definition. Here's exactly what protects them — in plain terms, not marketing language. Questions this page doesn't answer? Email [email protected].
Encryption
Every connection to Jursu — the web app, the mobile app, and the API behind them — runs over HTTPS/TLS, so data is encrypted in transit between your device and our servers. Your data is also encrypted at rest on our servers.
Authentication
- Passwords are never stored in plain text — they're hashed with bcrypt before they ever touch the database.
- Login, registration, password reset, and Google sign-in are all rate-limited, so repeated automated login attempts are throttled rather than allowed to run unchecked.
- Sessions are handled with signed tokens rather than long-lived passwords sent on every request.
Who can see your data
Jursu is built around firm-level isolation: a matter, client, or document belongs to exactly one firm, and only the lawyers you've invited to that firm can see it. Within a firm, roles (Admin, Associate, Junior, Consultant) control what each member can do — not everyone is automatically able to see or change everything.
- If you enable a client portal login for a specific client, that client sees only their own matter — never anyone else's.
- Jursu's own platform administrators access firm data only for support and account-recovery purposes, not routinely.
- Your data is never sold, and it isn't used to train external AI models.
Backups
The database is backed up automatically every day. Each backup is also copied off-site to separate cloud infrastructure, independent of the server Jursu runs on, so your data survives a full server failure — not just a database rollback on the same machine.
Infrastructure
The application applies standard HTTP security headers (protecting against common attacks like clickjacking and MIME-sniffing) on every response, and known-bad or abusive IP addresses are blocked at the network level before they reach the application at all.
Being direct about where Jursu is today: Jursu has not yet completed a third-party security audit or a formal certification like SOC 2 or ISO 27001. If that's a hard requirement for your firm, email [email protected] and we'll tell you plainly where things stand.
Your control over your data
- You can export any individual matter or client to PDF at any time from the web app.
- You can request deletion of your account and all associated data at any time — see the Data Deletion page for how.
- Deleting a matter removes it and everything filed under it; only a Jursu platform administrator can restore a deleted matter afterward, so it isn't accidental.
Have a specific security or compliance question for your firm? We'll answer it directly.
Email [email protected] →