Security-enthusiasts, this page is for you
​

We understand that when an organization considers implementing a new solution, security, reliability, and compliance are top priorities. This is why Legisway’s scalable infrastructure delivers powerful protection with encryption, secure data transfer, and advanced application controls. Designed to ensure the confidentiality, integrity, and availability of your legal data, it’s supported by a forward-thinking security program that mitigates risks and instills confidence at every level. In other words, we’ve got your back—so you can focus on what matters most.

cloud-basic
Cloud solution

Legisway provides secure, reliable, and scalable access to your data from anywhere, enabling efficient collaboration while reducing IT workload through its cloud hosting.

security-laptop-basic
Enterprise-level security

Benefit from data security at every stage of the data lifecycle, from acquisition to destruction thanks to advanced encryption, multi-layered protection, and the security of AWS data centers. Your data is stored separately, and safeguarded by robust access controls.

person-laptop-gear-basic
Unlimited storage

Your legal team can upload as much data as they want, no matter what pricing package they choose.

password-laptop-basic
Data portability

You own your data, and we will never hold it hostage. Upon termination, we assist with data export in XML format or via APIs as needed.

  • Application
  • Infrastructure
  • Ensured availability
  • Intrusion detection
  • Organisational security

Core settings

Legisway has multiple levels of account protection, starting with unique user IDs, password change history and recovery, and inactivity auto-logout.

Access control

Benefit from role-based access management. The ""super user"" manages who sees what in Legisway. They have the power to grant different access levels to different departments or individual users.

Advanced settings

Additional settings ensure enhanced account protection: strong password enforcement, automatic password expiration, login activity audit and review capabilities, and login failure notification.

Complete audit logs

Track user actions, content access, and changes for full transparency. Audit logs ensure traceability and compliance with security standards.

Encryption

Legisway offers data encryption for passwords, storage, transfer (256-bit SSL), and documents. Unique keys are generated for each client. Your database is encrypted at AWS and the corresponding password is stored in the software.

SSO & 2FA

Implement Single Sign-On (SSO) for smooth integration with corporate systems and Two-Factor Authentication for enhanced security.

Redundancy

Our virtual private cloud features multi-layer redundancy, with live data synchronization and active failover servers ready to step in during disasters. Its architecture ensures near-real-time synchronization at the data layer to maintain continuity.

Backup

Customer databases and compute data are backed up nightly without disrupting access. Backups are securely transferred off-site via a dedicated network and stored within the same server region, leveraging AWS Backup for proven security and integration.

Data center security

Our servers are hosted in Amazon AWS's top-tier data center in Frankfurt, monitored 24/7 with CCTV and onsite guards. Security includes military-grade pass card access and biometric fingerprint scans.

Fast recovery

Our disaster recovery plan targets a 24-hour (Recovery Time Objective) RTO and a 3-hour (Recovery Point Objective) RPO for optimal data protection.

Regulated climate control

The heating, ventilation, and air-conditioning (HVAC) systems have full particle filtering and humidity control, ensuring your dedicated server and hardware are functioning at their best.

Redundant power

The data centers use diesel generators and uninterruptible power systems (UPS) systems to ensure uninterrupted power, keeping your dedicated servers online during critical incidents.

Front-end scalability

There is a redundant and balanced front-end to manage an increased or increasing load of customers. The front end is scalable horizontally and vertically.

Back-end scalability

There is a redundant, “stand by” back-end application server, available in case of fault of primary server.

Network and connectivity

All network appliances and connectivity have a high redundancy mechanism.

Network activity monitoring

Network probes and host based probes are used to protect WK offerings . All incoming and outgoing TCP traffic flows are monitored for anomalous network activity.

Vulnerability tests

Vulnerability assessments and penetration tests are performed regularly and newly identified weaknesses are prioritized and fixed.

Uptime monitoring

We have a monitoring system verifying uptime, availability and performance. Custom script and tools continuously verify all the application stack is working correctly.

Data protection

Legisway processes personal data securely, requiring password-protected access to ensure confidentiality. User rights management allows information segmentation within the system. Employees cannot access customer data without explicit permission during support requests, with all access grants tracked and visible to customers at all times.

Dedicated resources

Amazon AWS maintains ISO 27001 certification through a dedicated security team with CISSP, CISA, and CISM qualifications. All Wolters Kluwer business laptops use full disk encryption.

Encrypted transmition

Data transmitted by Amazon AWS between data centers (e.g. for the purposes of remote backup) is encrypted using appropriate protocols such as SSH. Legisway is hosted in data centers in Germany.

Personal security

Wolters Kluwer conducts background checks and enforces confidentiality agreements to prevent personnel-related security breaches. A dedicated compliance team ensures staff adhere to security and compliance guidelines.

Operations team

Outside of the core data center operations, we designed our physical office to eliminate any central on-premise servers, ensuring employees and guests have no direct access to customer data.

ISO 27001

GBS Global Hosting, part of Wolters Kluwer Italy, ensures ISO 27001 compliance by implementing, maintaining, and certifying a Safety Management System in line with ISO CEI/IEC 27001:2022. This includes Third Level Support, Cloud Infrastructure Management, Database Administrators, and Application & Infrastructure Software Engineers.
Modern data center
Amazon AWS data centers: Certified security, trusted performance

Amazon AWS data centers are designed for maximum security and reliability. They feature full-scale safeguards for power outages and fire disasters, efficient cooling systems, and redundant power, air conditioning, and network connections. With 24/7 monitoring, advanced authentication methods, and highly restrictive physical access, they ensure your data remains protected. Certified to the highest standards, including PCI DSS and ISO 27001, these facilities deliver stable, secure operations backed by audited access controls and robust connectivity through multiple carriers.

Read more about AWS security

PCI DSS certification

ISO 27001 certification

CT Corporation is the leader in business license software
SSO and 2FA powering protection

Single Sign On (SSO) and and Two-Factor Authentication (2FA) work together to provide a seamless blend of convenience and security. SSO simplifies access by allowing users to log in once to access multiple systems securely, reducing password fatigue and improving efficiency. Two-Factor Authentication adds an extra layer of protection by requiring a secondary verification step, safeguarding against unauthorized access. Together, these features enhance user experience, streamline workflows, and ensure robust protection for sensitive data.

SSO in Legisway

SSO technical guide

2FA



"Since Legisway is a fully managed, cloud-hosted solution, I didn’t have to convince anyone other than IT to start using it. Since data is stored on Legisway it means no extra work for our IT. Combine that with the cost, top level data security and positive stories I had heard from other users and it was the easiest technology buy we’ve made!”

Elizabeth Hondius, Director Legal & Compliance, MSD
Quotes Icon_2
Quotes Icon_2



"Nothing beats Legisway's simplicity, reliability and durability."

Sébastien Dorléans, Product Owner for INRIA, The French Institute for Research in Computer Science and Automation

Have questions about security? We’re here to help

Your trust and peace of mind are our top priorities. If you have any questions about how we protect your data or want to learn more about our security measures, our team is ready to assist. Fill out the form below, and we’ll get back to you with the answers you need.

Frequently asked questions about the Legisway demo

We aim to contact you within 48 hours. We’ll have an initial conversation with you to learn more about your current processes and where our software has added value. After that we’ll proceed with the product demo.

Where does the presentation take place?

Currently all presentations take place online. All you need is a computer, laptop or tablet with an internet connection and a headset. You can also establish an audio connection by telephone. 

When does the presentation take place?

We will contact you within 48 hours for a short discovery call. During the call we’ll go through your requirements. We would be happy to organise the presentation at a time that suits you best. All you have to do is tell us your preferred date.

How long is the presentation?

A demonstration can last between 45 minutes and 1.5 hours, depending on your needs. We are also happy to meet your time requirements.

Do I have to buy the software after seeing it?

Not at all. We are happy to show you, without any obligation, how the software works and answer all your questions.

Back To Top