Data Processing Summary
Effective October 31, 2026. This summary describes how EvidenceDesk processes data that law firm customers store in the service ("Customer Data"). Customers that need a signed data processing agreement can request one at hello@evidencedesk.io.
Roles
The customer (the law firm) controls Customer Data and decides why and how it is processed. EvidenceDesk processes Customer Data as a service provider on the customer's behalf.
Purpose of processing
We process Customer Data only to provide, secure, support and improve the service, as instructed by the customer through its use of the service, and as required by law. We do not sell Customer Data or use it for advertising.
Types of data
Matter and case information, documents and evidence, contacts (including clients, opposing parties and witnesses), calendar entries, time and billing records, trust ledger entries and user account information.
Confidentiality
Personnel with access to Customer Data are bound by confidentiality obligations, and access is limited to what is needed to operate and support the service.
Security measures
Access controls by role, encryption in transit, encrypted storage provided by our infrastructure providers, logging of access to matters and evidence, and procedures for backup and recovery. See Security.
Subprocessors
We use third-party providers for hosting, email delivery, payment processing and support. They are bound by written obligations to protect data. A current list is available on request.
Security incidents
If we become aware of a breach of security that affects Customer Data, we will notify the affected customer without undue delay and provide information reasonably available to help the customer meet its own obligations, including any notification duties under applicable law.
Assistance
We will provide reasonable assistance with requests from individuals and with the customer's compliance obligations, taking into account the nature of the processing.
Deletion and return
Customers can export Customer Data during the subscription. After termination, we make data available for export for a reasonable period and then delete it from active systems, with backups expiring on their regular cycle, unless law requires retention.
Location
Customer Data is processed in the United States.
Related pages
Privacy Policy
How EvidenceDesk collects, uses, shares and protects personal information on evidencedesk.io and in the EvidenceDesk service, and the choices available to you.
Read moreSecurity
How EvidenceDesk approaches law firm data security: role and matter permissions, encryption, audit trails and secure client sharing.
Read moreTerms of Service
The terms that govern use of the EvidenceDesk website and software, including accounts, acceptable use, fees, data, warranties and liability.
Read moreCookie Policy
How EvidenceDesk uses cookies and similar technologies on evidencedesk.io and in the EvidenceDesk service, and how you can control them.
Read moreDisclaimer
EvidenceDesk website and tools disclaimer: no legal advice, no attorney-client relationship, generic calculators, third-party trademarks and comparison content.
Read moreAcceptable Use
The rules for acceptable use of the EvidenceDesk legal practice management service, including prohibited content, security testing and enforcement.
Read more