Security

Security is foundational for practice software. This page summarizes how we protect PracEasy — Business Login for firms and Client Login for end clients.

1. Access control

• Separate authentication for firm staff and client portal users.
• Role-based permissions inside the firm workspace.
• Session cookies and tokens scoped to the correct portal.

2. Data protection

• Production data hosted in India.
• Encrypted transport (HTTPS/TLS) for web and API traffic.
• Passwords stored using industry-standard hashing; sensitive vault fields use encryption at rest where applicable.

3. Application practices

• Authenticated APIs for firm and portal modules.
• Rate limiting on authentication endpoints to reduce brute-force risk.
• Operational logging for troubleshooting and incident response.

4. Your responsibilities

Use strong unique passwords, limit admin access, revoke leavers promptly, and only invite trusted client portal users. Report suspected incidents to support@praceasy.in immediately.

5. Questions

Security inquiries: support@praceasy.in. Related policies: Privacy, Terms.