Security

Setting the standard for legal software

Dedicated security experts

Our dedicated security team brings more than 40 years of combined cybersecurity experience at world-class organizations. Our security team is available 24x7x365 to respond to security incidents.
Staying on top of the latest in cybersecurity

We continuously monitor for potential vulnerabilities and review and update our code and systems configuration to ensure your data is always protected.
Standardizing employee security protocols

Clio enforces a set of administrative, physical, and technical controls such as office access policies, two-factor authentication for internal tools, criminal background checks for employees, regular security training, and more.

Meeting compliance requirements

Operating in accordance with GDPR legislation

Clio Manage is compliant with the terms found in the GDPR guidelines, meeting our requirements as both a data controller and data processor.
Learn More
Operating in accordance with PCI legislation

Clio Payments is built to ensure all payments are PCI compliant, enabling you to get paid 39% faster by accepting credit card payments from your clients.
Health Insurance Portability and Accountability Act (HIPAA)

Clio has successfully completed an internal HIPAA attestation examination, which means that we help our customers fulfill their ePHI obligations as we store and process data in a manner consistent with HIPAA standards.

Learn More
SOC2 Compliance

Clio has completed attestation of SOC2 in accordance with International Standards on Assurance Engagements (ISAES). This further affirms Clio’s commitment to following industry recognized best practices. Our SOC2 report is available upon request.

Clio is tested and certified as secure

Regular security tests

Every year, Clio works with a leading cybersecurity firm that tests our platform using the most advanced techniques available to ensure that Clio’s software is secure.
Daily security malware scans

Clio is audited and certified each day by McAfee Secure to help guarantee that our products are not affected by malware, vulnerabilities, and other online threats.

Built with best practices, on state-of-the art infrastructure

In-transit and at-rest encryption

Clio applies in-transit and at-rest encryption using industry best practices (such as HTTPS and TLS) to ensure your firm’s data is stored and transmitted securely. Clio’s web interfaces are also verified by DigiCert, a trusted certificate authority.
Automatic backups and redundant servers

To ensure your account data remains accessible at all times, Clio performs regular automatic backups and makes use of geo-redundancy for its infrastructure. You can also make use of our data escrow feature to automate backups of your data.
Built with data residency (and physical security) in mind

Clio offers hosting options in the United States, European Union, Australia, and/or Canada to address any data residency requirements. Clio’s hosting facilities are audited annually for security certifications (such as SOC 2 and ISO27001) to ensure they employ advanced physical security measures such as biometrics, CCTV cameras, and 24×7 on-site security.
Secure development practices

Clio demands high internal standards for code quality, mandatory code reviews, and constant internal security consultations on complex technical decisions.

Implementing advanced product features and controls

Role-based permissions

Restrict visibility to sensitive case information to certain users at your firm.
Two-factor authentication

Verify every login attempt via a mobile device—do it with a single tap using the Clio Mobile App or another multi-factor authentication solution.
Password policies

Enforce strong passwords and/or regular password resets with Clio’s password policy settings.
Login safeguards

Clio will automatically lock your account for a period of time after too many failed login attempts.
Session/Activity tracking

Clio logs the IP address of every session for your account and actions taken by your users to help you monitor for suspicious activity.

Approved by 90+ bar associations & law societies

Clio is recommended by 90+ bar associations and law societies—the most of any legal practice management software—in part due to high security standards.