Subprocessors List

LegalsOne uses a limited set of third-party service providers ("subprocessors") to deliver the platform. These vendors have been evaluated for security posture as appropriate to their role. We maintain data processing agreements with each.

Last Updated: February 23, 2026  |  Customers will be notified of material changes at least 14 days in advance.

Infrastructure & Hosting

Provider Purpose Location Data Processed
Amazon Web Services (AWS) Primary cloud infrastructure: compute (EC2), storage (S3), database (RDS/PostgreSQL), and KMS encryption key management United States (us-east-1 / us-west-2) All customer data including documents, case data, and backups

Network & Access Control

Provider Purpose Location Data Processed
NetBird Zero-trust private network access for LegalsOne staff to management infrastructure Germany / EU (self-hosted relay) Network access credentials and connection metadata (no customer content)

Communication

Provider Purpose Location Data Processed
AWS SES (Simple Email Service) Transactional email delivery (notifications, password resets, system alerts) United States Recipient email address, message content for transactional messages

Customer Integrations (Optional)

These integrations are customer-enabled and optional. Data flows only if the customer activates the integration.

Provider Purpose Data Processed
Microsoft (Microsoft 365) Email, calendar, and document integration Emails, calendar events, and documents as authorized by the firm
Zoom Video Communications Video meeting integration Meeting metadata, user identifiers
Clio (Themis Solutions) Optional one-time data import from Clio Matter and contact data as exported from Clio by the firm
Payment Processor (Stripe / TBD) Subscription billing and payment processing Billing contact name, email, and payment method data (card numbers not held by LegalsOne)

Monitoring & Operations

Provider Purpose Data Processed
AWS CloudWatch Infrastructure monitoring, alerting, and log aggregation System metrics and logs (no customer content)
Change Notification: We will update this page and notify active subscribers at least 14 days before adding a new subprocessor or making a material change to an existing one. Customers who object to a new subprocessor on legitimate data protection grounds should contact privacy@legalsone.com.