Security law firms can trust.
From encryption to access controls, Bakers applies rigorous safeguards so your clients' files stay secure, confidential, and under your control.
- Data storage
- Canada
- Encryption
- AES-256 and TLS
- AI model training
- Never on your files
- Audit trail
- Every access recorded
Your files are stored in Canada, and stay yours.
Stored in Canada
Your files, documents, and backups are stored in AWS's Canada Central region and handled in line with PIPEDA.
Never used to train AI
Your files are never used to train AI models.
Handled as privileged
Everything your team uploads is treated as confidential and potentially privileged. And because Bakers works from public property records, you don't need to upload confidential client information to run a file.
Only the right people open a file.
Access is checked on our servers on every request, not just hidden in the interface.
Your firm's data stays your firm's
Every record is tied to your firm, and every request is checked against your firm's membership before anything comes back.
Roles on every file
Each file has an owner, editors, and viewers, so it can be shared with exactly the people working on it.
Two-step sign-in, enforced
Every user confirms sign-in with a one-time code. It is required on every account, not an optional setting.
“Who opened this file, and when?” has an answer.
Bakers records every view, edit, download, and denied attempt on a file, along with every change to who can access it.
Built to hold up.
Bakers runs on Amazon Web Services. AWS secures the data centres, hardware, and network. We secure everything built on top: the application, access, and how your data is handled.
Backups no one can erase
Daily backups are held in a locked vault. Until they expire, no one can delete or alter them, including our own administrators.
Restore to any second
Records can be restored to any second within the recovery window, and documents are versioned, so an overwritten file can be recovered.
A tamper-evident trail
Infrastructure activity across every account and region is logged to a separate, locked-down archive, with validation that flags any alteration.
Your files leave with you.
Your firm's obligation to keep its files doesn't end when a vendor relationship does.
Take your files with you
On request, we export your files, documents, and records in a portable format, so your firm can meet its Law Society file-retention obligations.
We delete the rest
Once you confirm the export, every file, document, and record is permanently deleted from production. Backups expire on their normal schedule.
Proof in writing
On request, we provide a certificate of destruction confirming your data has been deleted.
Questions from your IT or risk team?
Send them, or your firm's vendor security questionnaire, to info@bakerssearch.com. It is also where to report a vulnerability. The security whitepaper covers architecture, access, logging, and recovery in detail.