Security at Toposphora

Tenant isolation

Every record belongs to exactly one practice. Isolation is enforced in the database itself with PostgreSQL row-level security on every tenant table, not just in application code: a query without your identity attached returns nothing.

Encryption

All traffic is encrypted in transit with TLS. Documents and databases are encrypted at rest in AWS. Document downloads use short-lived signed links.

AI processing

AI features run on Amazon Bedrock inside the same AWS environment that stores your files. Your content is not used to train models, and it never leaves that environment for AI processing.

Email capture and retention

When you file an email into a matter, the filed record becomes part of that matter. The raw inbound message is deleted from staging shortly after processing; only what you filed persists. Nothing is filed automatically - every capture is your explicit decision.

Deletion

Deleting is real: removed records, attachments, and contacts are not kept in hidden archives. Financial records connected to invoices and payments are retained so your accounting stays reconstructable.

Subprocessors

The services Toposphora relies on:

• Amazon Web Services - Application hosting, storage, and databases (US region)
• Amazon Bedrock - AI document processing, inside the same AWS environment
• Amazon Cognito - Sign-in and identity
• Stripe - Payments and invoicing
• SignWell - Electronic signature of engagement agreements
• Resend - Transactional email delivery
• Cloudflare Turnstile - Bot protection on public forms

The public site

This marketing site carries no analytics and no trackers.

Certifications

Toposphora does not currently claim SOC 2 or ISO 27001 certification. What this page states is what is actually built.

Reporting a concern

Found something that worries you? Use the contact form on the home page and mention "security" - reports are read by the people who can fix them.