- Is PartnerVault HIPAA compliant?
- PartnerVault is built to HIPAA-grade practice — mandatory two-step verification, encryption in transit and at rest, quarantine scanning, isolation enforced in the database, a full audit trail and a written retention policy — and we are transparent about every control on the security page. We are not a covered entity and do not claim certification; if you need a Business Associate Agreement, ask and we will discuss it.
- Where is our data stored?
- In the United States, on Supabase (Postgres and encrypted object storage) behind Cloudflare. Files are scanned on infrastructure we operate; they are never sent to a third-party scanning vendor.
- Can one partner ever see another partner's files?
- No. Each partner is a member of their own portal only. The separation is enforced by database policy and covered by automated tests that run before any change ships.
- How do partners sign in? Do they need to install anything?
- A browser and an authenticator app on their phone. They receive a named invitation, set a password and enrol two-step verification. There is nothing to install on a computer.
- What happens to files when a case or engagement closes?
- You move them to trash, and they are permanently deleted 30 days later. You can export the audit trail first. Nothing lingers in a backup of the file store.
- Can we take our data with us if we leave?
- Yes. Documents download as the original files and the audit trail exports as CSV. We will help with a bulk export on request.