Confidentiality that outlives the vendor relationship
The obligation is to the client, and it does not lapse because a supplier was compelled or acquired. The only durable answer is that the supplier never had the content.
For a law firm the threat model includes the platform itself: a demand served on a provider should not be able to produce client conversation. In Enclessa, direct and group direct messages are end-to-end encrypted with MLS, so what a provider holds is ciphertext and an epoch number. The firm’s own operations — matter coordination, internal policy, billing discussion — run in managed channels where search and export still work, and the Time module records billable hours against clients, projects and activities.
At a glance
- Client conversation
- End-to-end encrypted, no escrow
- What a subpoena of the server yields
- Ciphertext, group id, epoch, timestamp
- Matter separation
- Permission bitmask enforced in the data layer
- Billable time
- Customer → project → activity, with rates
- Hosting
- European Union
The constraints this sector actually has
Conflicts and matter separation
Who can see which matter is not a convention, it is a control, and it has to be enforced somewhere lower than the user interface.
Time is the product
Hours against a client, a matter and an activity are the invoice. Reconstructing them from memory on a Friday afternoon is how a firm loses money.
Retention runs both ways
Some files are kept for the statutory period and some must be destroyed. A platform needs to express both.
What Enclessa does about them
Questions
Legal and advisory: common questions
Encrypted collaboration, hosted in Europe.
Create a workspace in a couple of minutes. It is yours at your-team.enclessa.app, hosted in the European Union, with encrypted direct messages from the first one you send.
No card required to create a workspace.