Backups & Recovery Policy

What Is Backed Up

LegalsOne performs automated backups of the following data for each firm's dedicated environment:

• Database: All PostgreSQL database content — matters, contacts, tasks, notes, events, trust accounting records, user accounts, and configuration data
• Document storage: All files and attachments uploaded to Amazon S3 within your firm's dedicated S3 bucket
• Configuration data: Workflow configurations, custom fields, permission settings, and integration settings

Backups are firm-specific and isolated. No firm's backup data comingles with another firm's data.

Backup Frequency

Automated backups run nightly (typically between 2:00 AM and 4:00 AM Central Time, outside standard business hours). Backups complete within the scheduled maintenance window.

In addition to nightly full backups, database transaction logs are captured continuously to enable point-in-time recovery within the backup retention window.

Backup Retention

Plan Tier	Backup Retention Period
Starter	30 days
Professional	60 days
Enterprise	90 days

On subscription termination, backups are retained for 90 days following the end of the 30-day post-termination self-service export window, then permanently deleted. See our Data Retention Policy.

Backup Security

All backups are:

• Encrypted at rest using AES-256 via AWS SSE-KMS with firm-specific encryption keys
• Encrypted in transit using TLS 1.2+ during transfer to backup storage
• Stored cross-region — backup copies are stored in a secondary AWS region separate from the primary environment for geographic redundancy
• Access-controlled — backup access is restricted to authorized LegalsOne infrastructure personnel on a need-to-access basis with full audit logging

RPO & RTO Targets

LegalsOne targets the following recovery objectives. These are operational targets, not guaranteed SLA commitments, except where explicitly stated in your signed Service Level Agreement.

• Recovery Point Objective (RPO): Up to 24 hours (last completed nightly backup). For critical systems, continuous transaction log backups may reduce effective RPO to approximately 1–4 hours.
• Recovery Time Objective (RTO): Up to 4 hours for a full environment restoration from a recent backup in a disaster recovery scenario. Partial restores (single document or record) may be faster depending on scope.

These targets assume AWS infrastructure availability. Recovery times may be longer in region-wide outage scenarios.

Requesting a Restore

If you believe data has been lost, corrupted, or accidentally deleted, you may request a restore by contacting LegalsOne support:

• Email: support@legalsone.com
• Subject line: "Restore Request – [Your Firm Name]"
• Include: Description of what data was lost; approximate date/time of loss; specific records, documents, or matter IDs if known

LegalsOne will acknowledge restore requests within 1 business day and provide an estimated timeline. Restores from recent backups (within 7 days) are prioritized. Restores may be to a staging environment first for your review before applying to live data.

Note: A nominal fee may apply for restore requests that require significant engineering time (e.g., restoring to a specific point-in-time beyond the standard recent backup). This will be communicated before any work begins.

Backup Limitations

Backups are not a substitute for a firm's own data management practices. Please be aware of the following limitations:

• Backups only protect against data loss or corruption originating on LegalsOne's infrastructure; they do not protect against errors introduced by law firm users (e.g., accidental deletions, incorrectly entered data)
• Data deleted by authorized users is captured in the next backup cycle (data is not immediately "unrecoverable" — deleted records remain in backup for the retention period)
• Third-party integration data (e.g., data in Microsoft 365 or Clio) is backed up only within those providers' own systems, not by LegalsOne
• Restores are performed at LegalsOne's discretion; we will attempt all reasonable restores within the retention window but cannot guarantee recovery in all scenarios

Self-Service Data Export

As an alternative or complement to backup restores, active subscribers can export their own data at any time via platform export tools. This is the recommended method for routine data archiving. See our Data Ownership Policy for export format details.

Contact

Backup and restore questions: support@legalsone.com