Encrypted in transit and at rest
Connections use TLS. Databases, files and backups are stored encrypted. [Disk and backup encryption details — confirm with hosting before publishing]
Security and data residency
Hosted in the UAE, by design.
Law firms hold other people's secrets. This page lists where your data lives, how it is protected, and every case where some of it travels elsewhere, so you can answer your clients' questions precisely.
Where each part runs.
The hosted service keeps all four parts in the UAE.
- Application
- the UAE
- The web application your team and clients sign in to.
- Firm database
- the UAE
- Matters, cases, clients, time, invoices and the audit log, separated per firm by database-level row security.
- Files
- the UAE
- Documents and uploads in private storage, served only through short-lived signed links after a permission check.
- Backups
- the UAE
- Encrypted copies on separate infrastructure. [Backup interval and restore-test schedule — confirm before publishing]
How your data is protected.
Each person sees their part
Access follows role-based permissions enforced in the database itself, not only in the screens. Partners can tighten the matrix, and documents can be restricted further per file.
Two-step sign-in and an audit trail
The firm can require an authenticator app for everyone. Sign-ins, exports, permission changes and approvals are written to an audit log that nobody can edit.
Some data leaves the UAE when a feature needs it. Here is the full list.
| Feature | What is sent | When |
|---|---|---|
| AI assistant, drafting and translation | The question and the records looked up to answer it | Only when someone in the firm uses an AI feature and the firm has an AI plan |
| Email notifications | Recipient, subject and a short message without client content | When Mizan sends an email |
| Google or Microsoft calendar sync | Event title, time and place | Only for people who connect their calendar |
| Zoom or Microsoft Teams meetings | Meeting time and invitees | Only when a meeting is created with that provider |
| Zoho Books | Invoice and client billing details | Only if the firm connects Zoho Books |
Everything else stays in the UAE. [Sub-processor list with regions — add before publishing]
Hosted in your own country, on request.
If your regulator or your clients require data to stay inside your own country, we can run the application, database, files and backups there instead. We scope it with you and quote it per firm.
Security questions.
Where is our data stored?
The hosted service keeps the application, your firm's database, files and backups in the UAE. Data is encrypted in transit and at rest, and each person sees only what their role allows. The security page lists everything that can leave the UAE and when.
Can it be hosted in our own country?
Yes, on request. A firm that needs its data in its own country can have the application, database, files and backups run there. We scope and quote it per firm.
How is access controlled?
Each person has a role (partner, associate, paralegal, accountant and others) and sees only what the role allows; partners can adjust the matrix for the firm. Two-step sign-in with an authenticator app can be required firm-wide, and every sensitive change is written to an audit log that cannot be edited.
What can the AI assistant see?
Only what the person asking could open themselves. It looks records up through the same permission checks as the normal screens, and anything it proposes (a task, a time entry, a client update) waits for that person to confirm. The AI provider processes the request to answer it; [provider data-use terms — confirm before publishing].
What happens to our existing data?
We move it across as part of onboarding, at no extra cost: clients, matters, cases, contacts and open balances from spreadsheets or your current system. Your data stays yours, and you can export it at any time.
Bring your security questionnaire.
We will go through it with you on a call and answer in writing. [Certifications and penetration-test reports — list only what exists]