Security & data
Security built for the most sensitive cases at work.
Protections
Ten protections, explained.
Signing in
Two-factor sign-in, always
Everyone signs in with a password and a code from an authenticator app, and the database checks for it on every request. A stolen password alone opens nothing.
Sessions end on their own
Casepoint signs you out after 4 hours without use, and after 12 hours in any case. Passwords need at least 12 characters, and any password known from a data breach is refused.
Who sees what
Permissions enforced by the database
Each company's data is kept apart, and roles, case visibility and restricted cases are checked by the database itself. Over 1,000 automated tests try to break these rules every time the database changes.
Our staff tools never show your cases
Casepoint's staff tools show your account details, never your cases. Any access to your data is for support you asked for, security or a legal duty, and every look is recorded.
Weise sees only what you can
Weise reads a case with the permissions of the person asking. Search answers draw on your policies and the Acas Code, never on case records.
The record
A log nobody can edit
Case views, downloads and changes are recorded in an activity log that nobody can edit or delete, not even us. It names cases by reference only.
Emails won't contain case details
Notification emails give a count and a link back to Casepoint. They never say which case, who or what.
Where your data lives
Stored in London
Case data and documents are stored in the UK, in London, and Weise runs there too.
Encrypted in transit and at rest
Everything is encrypted when stored, and browsers are told never to connect to Casepoint without HTTPS.
Never used to train AI
Your cases are never used to train AI models, by us or by Amazon Web Services, which runs Weise in London and keeps nothing it's sent.
Data protection
Your case data stays under your control.
As the employer, you're responsible for the personal data in your cases under UK data protection law. Casepoint gives you the tools to help meet those duties, from the day a case closes to the day you leave.
Retention you set
Choose how long closed cases are kept for each case type and outcome. When one is due, an admin reviews it and decides to keep, anonymise or delete it.
- Per case type and outcome
- Never deleted automatically
Legal hold
Put a case on legal hold and nothing in it can be deleted, whatever its retention date, until the hold is lifted.
- Separate from On hold
Data requests, on the clock
Log subject access and erasure requests in one register that tracks the one-month deadline. Export everything held about the person, start from a drafted reply, and erase item by item, never a whole person in one click.
- One-month deadline
- Admins only
Export anything
Download one case as a zip (a readable summary, the original files and the full data), one person's data, or your whole company. Exports are downloaded inside Casepoint, never emailed, and every one is logged.
- Case, person or company
If you leave
You have 30 days after your last day to download everything. Then your data is deleted within 7 days, and from backups within 7 more.
- 30 days to download
Some duties only you can carry out, like telling your staff and writing a DPIA. Casepoint gives your admin a checklist of them.
Contact
For your IT and data protection teams.
Security
Need our security overview, questionnaire answers or a DPIA pack for Weise?
security@casepointhr.co.ukData protection
Questions about personal data, or a complaint about how it was handled. We acknowledge complaints within 5 working days.
privacy@casepointhr.co.uk
Pilot coming soon
Help us shape what Casepoint becomes.
We're opening a pilot for a small number of UK HR teams. Register your interest now and we'll be in touch as soon as places open.
- Early access to Casepoint and Weise
- Built-in support by chat, email or in the app, all on one case
- Guided set-up of your case types, workflows and policies
- Free for the length of the pilot
- Your feedback shapes the roadmap
- 50% off your first paid year