Client confidentiality is built into every layer
Advocates hold some of the most sensitive information there is. Here is exactly how AOMS protects it.
Complete office isolation
Every record carries your office ID and every database query is filtered by it on the server. One office can never see another office’s clients, cases or documents.
Encrypted in transit
All connections use HTTPS. Passwords are stored as one-way hashes, never in plain text; sensitive settings are encrypted.
Private file storage
Documents are stored outside the public web folder and served only to signed-in users of your office after a permission check. Uploads are checked for type and size.
Two-factor authentication
Any user can turn on 2FA with Google or Microsoft Authenticator, with one-time recovery codes. It is mandatory for our own administrators.
Role-based permissions
Decide exactly what each person in your office can view, create, edit, delete or export.
Activity & sign-in logs
Important actions — logins, exports, deletions, permission changes — are logged with user, time and IP. You can review active sessions and sign devices out.
Attack protection
Login throttling and temporary lockouts stop password guessing; security headers and CSRF protection guard every form.
Backups
Databases and documents are backed up daily and old backups are rotated automatically.
Your data, your control
Export your clients, cases and records at any time. If you leave, you take your data with you.
Responsible disclosure
Found a security issue? Please email support@aoms.pk with details. We investigate every report and will keep you updated.
Security questions
Can other law offices see my data?
No. Every office’s data is isolated at the database level and every request is checked against your office. No other office can see your clients, cases or documents.
Can AOMS staff read my files?
Our team does not access office data except when you ask us to help with a support issue, or when required by law. Admin access is logged.
Is my data backed up?
Yes. The database and documents are backed up daily, and you can export your own data at any time.
Do you support two-factor authentication?
Yes. Any user can turn on 2FA with an authenticator app such as Google Authenticator or Microsoft Authenticator.