--- title: "Security and privacy for personal injury firms | Link & Impulse" description: "How we handle a personal injury firm's data: no client names by default, a database per firm that the firm owns, read-only reporting, a tracking fix that sends no case details to ad platforms, scrubbed errors and tested restores." url: "https://linkandimpulse.com/security" --- # Security and privacy Last updated October 6, 2026 For whoever approves vendors. Four rules apply to everything we do. Below them are the questions your compliance lead will ask, answered in full. - ## No client names by default Names, phone numbers and case captions are never requested or are dropped before saving. - ## A database of your own Never shared with another firm, and checked before every nightly run. - ## Reporting only reads The monthly report reads from your systems and can’t change your records. The tracking fix is the one exception, and its access is listed in writing and removed at handover. - ## Restores we’ve tested Drills rebuild every report from a restored copy and check it matches. ## The questions, answered If yours isn’t here, [ask us](https://linkandimpulse.com/contact). 1. Interrogatory no. 1 ### Do you store our clients’ names? Answer No, not by default. Client names and case captions are never requested from Clio or Litify. Filevine sends them whether we ask or not, so there they’re dropped before anything is saved. One field we do read from Clio is the client’s email address, because it’s the only thing that links an intake to the case it became. Without it, a case can’t be traced back to its channel. Call tracking works the same way: the caller’s name and number are dropped, and only city, state and country are kept. If your firm asks us to hold identity in its own database, that’s a setting you switch on. It is never the default. 2. Interrogatory no. 2 ### Is our data kept with other firms’ data? Answer No. Each firm has a database of its own. Before every nightly run, the system checks that it’s about to write to your database and no one else’s, and stops if it isn’t. 3. Interrogatory no. 3 ### Can the reporting change our records? Answer No. The monthly report only ever reads from your systems. 4. Interrogatory no. 4 ### What does the tracking fix change, and what does it send to ad platforms? Answer It needs write access to your tag manager, ad accounts, analytics, call tracking, website forms, and the source fields in your case management system. Before we start, we list in writing what we’ll change, and we remove our access at handover. Nothing a client types about their matter is sent to an ad platform or analytics, and no name, email or phone number goes into a page address. Where an ad platform matches conversions, it gets a hashed email and phone number, nothing else. 5. Interrogatory no. 5 ### What leaves the system when something goes wrong? Answer Very little. Failure alerts name the step that failed and a reference number. They carry no figures and no client details. Error messages are scrubbed of passwords, keys, credentials in web addresses, emails, phone numbers and client-identity fields before they’re logged anywhere. Because a name in running text can slip past any scrubber, alerts never include error text at all. 6. Interrogatory no. 6 ### Where are our passwords and keys kept? Answer In a dedicated secrets manager, one project per firm. Never in code and never in configuration files. 7. Interrogatory no. 7 ### What happens if one of our systems is down? Answer The rest keep running. One source failing can’t stop the others or the nightly rebuild, and we’re alerted straight away. If the nightly run doesn’t happen at all, a separate check notices the silence and alerts us. 8. Interrogatory no. 8 ### Can you recover our data if something breaks? Answer Yes, and we test it. A restore drill restores your data as of a past moment into a throwaway copy, rebuilds every report from scratch, and checks each table matches, row count and contents. Your live data is never touched during a drill. 9. Interrogatory no. 9 ### Who owns the data, and what happens to it if we stop working with you? Answer You do. Your firm’s data sits in a database of its own. If you stop working with us, it’s handed over to you with its full history, and we don’t keep copies of your data unless you ask us to. The pipeline that fills it is our software. It isn’t transferred or licensed to you, and it stops running when the engagement ends. 10. Interrogatory no. 10 ### Will you sign an NDA? Answer Yes, before we touch any of your systems. ## Start with a call. A short call about how your intakes arrive and where their source gets lost. If your tracking already holds, we start with the monthly report. If it doesn’t, we fix it first, because a report on intakes nobody can trace can’t tell you much. [Book a call](https://linkandimpulse.com/contact) [How the numbers are made](https://linkandimpulse.com/method) If neither would pay for itself at your firm, we’ll say so on the call.