VakilBoxThe file belongs to the client. No one can lock it away.
Data stays in India
We store your data in Mumbai. We follow the DPDP Act. We take consent and use data only for the stated purpose. Each case type has its own rule for how long we keep data. We handle a data breach with a set 72-hour process. You get a grievance contact.
A log no one can edit
The log is permanent. No one can edit it, not even the managing partner. We log every document opened, downloaded or refused, with the time and device.
Keep files from the wrong people
Limit a matter to named people. Hide single details, like a phone number. Give interns and outside people access that ends on a set date. We don't add partners on our own. Remove a person in one click, and we wipe their device.
Export everything and leave in one click
If your plan lapses, the account becomes read-only. You can still read, print and export. Our staff can't see your case data. The system blocks it.
Your files are yours. Your clients' files are theirs.
You can export everything at any time. We never hold a file back.
How it works
Consent and purpose
When you take on a client, the app records their consent. It also records which notice version they saw, the purposes, and how consent was given. Client data is used for representation, billing and case updates.
You decide how long to keep data
Set how long to keep files for each case type. Put a legal hold on a file when needed. When files are erased, we give you a certificate of erasure.
A 72-hour breach process
When you log a breach, the app starts a step-by-step process. It drafts notices to the affected people and to the Data Protection Board. It tracks the 72-hour deadline.
Reply to grievances on time
When a client sends a grievance through the portal, you have 30 days to reply. The compliance panel tracks every open grievance.
We never hold back a client's file
The handover pack is always available. We never hold it back for unpaid fees, including fees owed to us. If your plan lapses, the account becomes read-only and export still works.
Our staff cannot read your cases
Our staff use a separate system that cannot read your firm's data. Support can only look in when your firm allows it. That access ends on its own, and every view is logged.
Sign-in and devices
Sign in with a password. Too many wrong tries lock the account. We note failed sign-ins from a new device in the audit log. See every device, and wipe one from far away.
Your firm's own filings
Track your firm's own filings and renewals in the compliance panel. Track engagement letters and client consents there too.
The full text is in the privacy and data-processing notice.