Security and trust
Privileged information deserves more than a password
How we protect your firm's files and your clients' data, and how Chronica helps you meet the Nigeria Data Protection Act 2023.
Where your data lives
Your data is stored in [hosting provider and region], encrypted at rest. Every connection to Chronica uses TLS. Backups run every day, are encrypted and kept for [retention period], in a separate location.
You can export your matters, clients, documents and invoices at any time, and we delete your data within [n] days of closing an account unless the law requires us to keep it.
Who can see what
The firm sets roles: partner, associate, clerk, accountant and more. Matters can be restricted to the lawyers on them. Clients see only what you share to their portal.
| Role | Matters | Billing | Settings |
|---|---|---|---|
| Partner | All | All | Yes |
| Associate | Their matters | Their time | No |
| Clerk | Diary and filings | No | No |
| Accountant | Names only | All | No |
Sign-in supports two-step verification [confirm]. The audit log records who opened, changed or shared each record.
NDPA and your clients
Under the Nigeria Data Protection Act 2023, your firm is the data controller for client data and Chronica is your processor. We sign a data processing agreement with every firm, keep records of processing, and help you answer client requests to see or delete their data.
Our data protection officer: [Name], dpo@chronica.legal. [NDPC registration or DPCO audit reference, if applicable]
AI and your files
The assistant reads only the matter or firm files you point it at, and each answer cites its sources. Your files are not used to train AI models [confirm with provider terms]. Firm admins can turn the assistant off, or limit who uses it. [Model provider and data handling terms]
Payments
Client payments are collected securely by a licensed payment partner and paid out to your firm's bank account. Card details never touch Chronica's servers.
Documents to request
- Data processing agreement
- Security overview for your IT or risk team
- List of sub-processors