Built with your client confidentiality obligations in mind
Exhibix was designed from the ground up around a simple principle: your case documents are yours, and they should stay that way. Here's how we protect your data at every step.
Browser-Based Processing
Exhibit numbering, Bates stamping, Bates stamp detection, and evidence sticker placement happen directly in your browser session — your document contents are not required to pass through our servers to be processed.
Encrypted Connections
All connections to Exhibix are encrypted in transit using industry-standard TLS, protecting your account information and session data from interception.
Access Controls
Account access is protected by authentication, and team seat management lets firm administrators control exactly who on their team can access the Service.
Account & Authentication
Account credentials are never stored in plain text. Passwords are stored using industry-standard hashing, and we support secure session management to keep your account protected across devices.
- Encrypted password storage
- Secure, time-limited session tokens
- Team seat controls so administrators can manage who has access
Document Handling
We designed the entire exhibit organization workflow — exhibit numbering, renaming, Bates stamping, Bates stamp detection, evidence sticker placement, and exhibit list exports — to run in your browser session. This means your document content isn't required to be uploaded to our servers to perform these operations.
- Exhibit numbering, Bates stamping, and evidence sticker placement run client-side in your browser session
- Existing Bates stamps are detected by reading the document's text locally in your browser — no server-side content analysis
- Exhibit list exports (Word and Excel) and document downloads are generated in your browser
- Notes, dates, and exhibit groupings you add stay within your working session
- You control when and how your finished exhibit sets are exported or downloaded
- No automated content scanning of your case documents for advertising or unrelated purposes
Infrastructure
Exhibix's application and account infrastructure is hosted with reputable cloud providers that maintain their own physical and network security programs. We apply security updates to our infrastructure on an ongoing basis.
Your Responsibilities
Security is a shared responsibility. To help keep your account and case data safe:
- Use a strong, unique password for your Exhibix account
- Only invite trusted team members to your organization's seats
- Remove team members promptly when they leave your firm
- Review your firm's confidentiality obligations and any applicable protective orders before uploading case materials
Reporting a Security Concern
If you believe you've discovered a security vulnerability in Exhibix, please email us at admin@exhibix.net. We take all reports seriously and will respond promptly.