Security and governance

8rney applies security at the workspace, resource, and matter levels. Interface visibility helps people navigate, but server-side authorisation remains authoritative.

Identity and sessions#

Users can sign in with supported social, enterprise, or credential-based methods. Organisations can enforce verified domains, enterprise login, MFA, password policy, device and session rules, and forced logout. Revocable session records back authenticated sessions.

Matter access#

Workspace matters are available according to role and permissions. Restricted matters require an explicit grant while preserving permitted administrator oversight. Ethical walls require an explicit grant and do not give administrators implicit access.

Tenant isolation#

Workspace context is derived from the authenticated user and route. Customer APIs reject ownership identifiers supplied as substitutes for that context. Sensitive database operations run in workspace-scoped transactions, and database policies provide an additional tenant boundary.

The same workspace scope applies to search, file storage, background jobs, outbox events, webhooks, and real-time channels.

Data lifecycle#

Administrators can configure retention and deletion policies, place legal holds, request exports, and review resulting jobs. A legal hold suspends conflicting disposition for the preserved scope. Audit and security events make material administrative and access activity searchable.

Ambient-agent controls#

Ambient agents use the same workspace boundary as the rest of 8rney. Tool requests pass through the 8rney broker, which checks workspace permissions, autonomy, approval ceilings, identity grants, sandbox routing, and audit logging before work proceeds.

See Tools and sandboxes for the safety model behind browser work, file operations, external messages, signatures, filings, payment, and billing actions.

External collaboration#

Secure portals can give clients, outside counsel, experts, and contractors explicit access to permitted matters, documents, tasks, and communications. Portal capabilities stay narrower than employee workspace access and respect download and watermark policies.