3. Describe the application or The system ensures system system’s system integrity requirements. and data integrity from a number of perspectives: Authentication all users – must provide valid credentials to enter the LegalFiles application All communication and data transmission is encrypted at the transport level using SSL (HTTPS) Each user is assigned specific roles or privileges in LegalFiles LegalFiles has built in data validation to ensure proper integrity of data from a format, and context perspective. For example, ensuring that dates are formatted properly and related information makes sense in context such as end dates always coming after associated start dates. 4. For electronic commerce systems Not Applicable involving financial transactions, describe how you are ensuring that the parties in a transaction cannot deny that the transaction took place. 5. Describe the application or system access LegalFiles application roles controls and their rules for all levels of the are defined within the system. system and/or application. Group roles are used. Security in LegalFiles is managed through system security configuration. Roles can be customized to allow or deny access at the module/screen level, as well as to allow or deny specific functionality within a module. 6. Describe the audit trails that will be Within LegalFiles there are captured and the details included in the audit logs that record field/data, user trail for tracking administrative actions that change and date of change impact access or change to critical data. which can be accessed by administrators only.
3. Describe the application or system’s system integrity requirements. The system ensures system and data integrity from a number of perspectives: Authentication – all users must provide valid credentials to enter the LegalFiles application All communication and data transmission is encrypted at the transport level using SSL (HTTPS) Each user is assigned specific roles or privileges in LegalFiles LegalFiles has built in data validation to ensure proper integrity of data from a format, and context perspective. For example, ensuring that dates are formatted properly and related information makes sense in context such as end dates always coming after associated start dates. 4. For electronic commerce systems involving financial transactions, describe how you are ensuring that the parties in a transaction cannot deny that the transaction took place. Not Applicable 5. Describe the application or system access controls and their rules for all levels of the system and/or application. LegalFiles application roles are defined within the system. Group roles are used. Security in LegalFiles is managed through system security configuration. Roles can be customized to allow or deny access at the module/screen level, as well as to allow or deny specific functionality within a module. 6. Describe the audit trails that will be captured and the details included in the audit trail for tracking administrative actions that impact access or change to critical data. Within LegalFiles there are logs that record field/data, user change and date of change which can be accessed by administrators only.
388929915.docx