Security

Last updated: July 1, 2026

Joshira is designed for sensitive legal operational data. This page summarizes our security posture for prospects and customers.

Access control

• Role-based permissions within workspaces
• Separated staff dashboard and client portal experiences
• Session controls and authenticated API access

Data protection

• Encrypted transport (TLS) for application traffic
• Least-privilege internal access practices
• Backups and recovery processes for platform continuity

Application security

• Input validation and honeypot protections on public forms
• Continuous dependency and code review practices
• Monitoring for anomalous authentication and API activity

Responsible disclosure

Report security issues to support@joshira.com with details to reproduce. We take reports seriously and will coordinate remediation.