Answers to the questions a law firm asks before entrusting data covered by professional secrecy: where the data is, who can see it and when, how it is protected and what happens in the event of an incident.
This is the information page for the “Security pack” document on the Consilaris website. Below you will find the essentials in plain language. The binding full text is published in one place: the Mivare Group document library.
Version in force: 1.0 · 29 October 2026
Open the full text and PDFDOCUMENT CNS-LEG-007
We treat all of the law firm's data as covered by professional secrecy, and everyone given access to it, at Mivare and at a subprocessor, has undertaken in writing to keep it secret, without a time limit. We do not hand over data voluntarily or on a mere request from an authority, and we do not contact the law firm's clients.
The Application, its database, files and backups are in the European Union, and backups are kept in a separate store, apart from the server and from the files. We do not store or process entrusted data, including backups, outside the European Union.
Mivare staff view the content of the data only at the law firm's request or when fixing a failure or a threat, and notify the firm of such access within 3 working days. We record every access and provide the law firm with a list on request.
Passwords are stored solely as an Argon2id hash, every user has two-factor authentication (TOTP), and the number of sign-in attempts is limited. Each user sees only the matters, case files and documents to which the law firm has given them access.
Connections, files and backups are encrypted, and the law firm's KSeF token and certificate are stored only in encrypted form. We back up the database every hour, with a full backup once a day. Encryption of the database on disk is still only planned, and we say so plainly.
We report a personal data breach or an event that may have disclosed information covered by secrecy within 24 hours. We answer questions about safeguards within 14 days, and the law firm or an independent auditor may carry out an audit on the terms of the DPA, once every 12 months.
Consilaris is created by the Mivare Labs brand, part of Mivare Group. The terms of service, privacy and cookie policies, data processing agreements, payment terms and legal information of all our brands and products are kept in a single library, at permanent addresses, as a web page and a PDF file.
Go to the Security pack at Mivare GroupONE LIBRARYONE SOURCE
The same, up-to-date text applies to every brand and every product. There are no versions that drift apart between websites.
Always the current versionRead the document in your browser or download it as a PDF file that you can keep for your own records.
For reading and for your recordsMIVARE GROUP PROSTA SPÓŁKA AKCYJNA · Registered office: 22-440 Krasnobród · Registry court: Sąd Rejonowy Lublin-Wschód w Lublinie z siedzibą w Świdniku, VI Wydział Gospodarczy KRS · KRS 0001268091 · NIP 9223092251 · REGON 545767254 · Share capital: PLN 1,000. The brands are trade names of a single entity.
You know who you are contracting with
