Security at Intake Plus

Law firms trust Intake Plus with sensitive enquiry information. These are the controls we use to protect it.

Each firm's data is kept separate

Access rules are enforced inside the database, not just in the app. Firm staff can only see records belonging to their own firm, and only the actions their role allows.

Two-step sign-in for firm staff

Firm users must complete two-factor authentication before they can open protected client, enquiry and document records. A remembered browser never replaces this check.

Limited internal access

Our platform admin accounts cannot open your firm's client records, enquiries or documents. Privileged access is limited to the backend processes and infrastructure needed to run the service.

Private document storage

Client uploads are kept in private storage, never on public links. Authorised staff open files through short-lived, signed links that expire automatically.

Encrypted connections

All traffic between browsers and Intake Plus is encrypted using HTTPS.

Activity logging

Selected security and workflow events, such as sign-ins and enquiry decisions, are logged so activity can be reviewed.

Your team stays in control

AI drafts summaries and briefs to save your team time. Your staff review everything before acting, and Intake Plus never gives legal advice.

Questions or reporting an issue

Read our privacy policy and sub-processors for data handling details. If your firm needs security information for its own due diligence, or you want to report a suspected issue, contact hello@intakeplus.com.au.