Question 1

How is data protection handled?

Accepted Answer

rightflow is GDPR compliant. We conclude a data processing agreement (DPA, German: AVV) with you. It is part of the contract package; we will name our sub-processors on request. In addition, an external data protection officer from heyData supports us and reviews our processes on an ongoing basis. You receive all documents in writing with the contract package.

Question 2

Where is our data stored and processed?

Accepted Answer

Each firm works in its own environment, separate from all others. Only you can see your data. Database, documents, sign-in, logs In Germany, with geo-redundant backups in the EU, in ISO 27001 certified data centres Text recognition (OCR) Microsoft Azure Document Intelligence AI models Microsoft Azure OpenAI and Claude by Anthropic via AWS Bedrock Emails with your own email provider We run sign-in, monitoring and AI logging ourselves in Germany, not with third-party providers. Data processing agreements are in place with all service providers.

Question 3

How does rightflow protect professional secrecy?

Accepted Answer

rightflow is BRAO compliant. As a service provider within the meaning of § 43e BRAO, we are contractually bound to confidentiality. Each firm works in its own environment, separate from all others. Service providers that process client data are contractually bound. Anything that goes out is approved by a lawyer.

What law firms want to know before they start

Data protection and storage

Control and responsibility

If your question is missing

What law firms want to know before they start

Data protection and storage

How is data protection handled?+

Where is our data stored and processed?+

Control and responsibility

How does rightflow protect professional secrecy?+

If your question is missing