Skip to content

Security

The most secure professional
platform ever built.

Attorney-client privilege is sacred. Client financial data is irreplaceable. Marco Reid security is built to courtroom admissibility standards — not just “good enough for SaaS.”

Security architecture.

Every feature designed for the most sensitive data in the professional world.

FIPS 140-3 encryption

Federal standard

All data encrypted at rest and in transit using Federal Information Processing Standard validated cryptographic modules. The standard required by US federal courts for electronic evidence.

Immutable audit trails

Court-admissible

Every action on the platform is logged in a cryptographically signed, append-only audit trail. No record can be modified or deleted after creation. This creates a legally defensible chain of evidence admissible in court.

Chain of custody tracking

Evidence-grade

Every document and recording has a complete chain of custody: who created it, who accessed it, who modified it, when, and from where. If opposing counsel challenges a document, the chain of custody proves its integrity.

Tamper-evident architecture

Cryptographic

If any data is modified outside the normal application flow — by a database administrator, a compromised system, or any other means — cryptographic signatures break and the system flags it immediately. Integrity is mathematically provable.

End-to-end encryption

Privilege-protected

All attorney-client and CPA-client communications are end-to-end encrypted. Messages, documents, and files are encrypted before they leave the sender’s device and can only be decrypted by the intended recipient.

Court-admissible metadata

Rules-compliant

All documents preserve original metadata: creation date, author, modification history, device information. This metadata is itself immutable and cryptographically signed, meeting Federal Rules of Evidence requirements for ESI.

Zero-knowledge architecture

Coming soon

The ultimate security goal: even Marco Reid as a company cannot access client data. Encryption keys held exclusively by the firm. Marco Reid processes encrypted data without ever decrypting it. The gold standard for privilege protection.

Multi-factor authentication

Required

MFA mandatory for all accounts. Time-based one-time passwords, hardware security keys, and biometric authentication supported. No account can be accessed with a password alone.

Compliance.

Built to the strictest standard. Satisfies everything else automatically.

StandardStatusDetails
SOC 2 Type IIPlanned6-month observed audit of sustained security controls
GDPRBuilt-inPrivacy by design — right to erasure, data portability, consent management
NZ Privacy Act 2020Built-inFull compliance with NZ privacy requirements
Australian Privacy ActBuilt-inCompliant with 2022 reforms and enhanced enforcement
CCPABuilt-inCalifornia consumer privacy rights implemented
UK GDPRBuilt-inPost-Brexit UK data protection compliance
IOLTA complianceIn progress50-state trust accounting analysis with legal tech attorney
WCAG 2.1 AABuilt-inAccessibility compliance across all interfaces

Your data stays in your jurisdiction.

Each firm is assigned a data region at signup. All data is stored exclusively in that region. A US attorney’s data never touches the Sydney server. An Australian CPA’s data never touches the Virginia server.

United States

Virginia (us-east)

Australia / NZ

Sydney (ap-southeast)

United Kingdom

London (eu-west)

European Union

Frankfurt (eu-central)

Security questions?

We take security as seriously as you do. Get in touch.