Built with your client confidentiality obligations in mind
Exhibix was designed from the ground up around a simple principle: your case documents are yours, and they should stay that way. Here's how we protect your data at every step.
Browser-Based Processing
For PDF documents, exhibit numbering, Bates stamping, Bates stamp detection, and exhibit sticker placement all happen directly in your browser session — your document contents are not required to pass through our servers for those operations. Non-PDF files (like Word or Excel documents) are converted to PDF first through our secure, self-hosted conversion service, and aren't retained afterward.
Encrypted Connections
All connections to Exhibix are encrypted in transit using industry-standard TLS, protecting your account information and session data from interception.
Access Controls
Account access is protected by authentication, and team seat management lets firm administrators control exactly who on their team can access the Service.
Account & Authentication
Account credentials are never stored in plain text. Passwords are stored using industry-standard hashing, and we support secure session management to keep your account protected across devices.
- Encrypted password storage
- Secure, time-limited session tokens
- Team seat controls so administrators can manage who has access
Document Handling
We designed the exhibit organization workflow — exhibit numbering, renaming, Bates stamping, Bates stamp detection, exhibit sticker placement, and exhibit list exports — to run in your browser session for PDF documents. This means your document content isn't required to be uploaded to our servers to perform those operations. The one exception: non-PDF files (like Word or Excel) are converted to PDF first through our secure, self-hosted conversion service before further processing continues locally, and converted files aren't retained afterward.
- Exhibit numbering, Bates stamping, and exhibit sticker placement run client-side in your browser session once a document is in PDF form
- Non-PDF files (Word, Excel, etc.) are converted to PDF via our self-hosted conversion service before processing continues locally; converted files aren't retained
- Existing Bates stamps are detected by reading the document's text locally in your browser — no server-side content analysis
- Exhibit list exports (Word and Excel) and document downloads are generated in your browser
- Notes, dates, and exhibit groupings you add stay within your working session
- You control when and how your finished exhibit sets are exported or downloaded
- No automated content scanning of your case documents for advertising or unrelated purposes
Infrastructure
Exhibix's application and account infrastructure is hosted with reputable cloud providers that maintain their own physical and network security programs. We apply security updates to our infrastructure on an ongoing basis.
Your Responsibilities
Security is a shared responsibility. To help keep your account and case data safe:
- Use a strong, unique password for your Exhibix account
- Only invite trusted team members to your organization's seats
- Remove team members promptly when they leave your firm
- Review your firm's confidentiality obligations and any applicable protective orders before uploading case materials
Reporting a Security Concern
If you believe you've discovered a security vulnerability in Exhibix, please email us at admin@exhibix.net. We take all reports seriously and will respond promptly.