Security & Compliance
Oberon is built on the same security standards used by leading financial institutions — because legal data demands nothing less. Every layer of our platform is designed to keep your clients’ information safe, compliant, and under your control.
Security Overview
Our security architecture follows a defence-in-depth approach, ensuring that no single point of failure can compromise your data.
Authentication & Access
Legal practice demands strict information barriers and access controls. Oberon provides enterprise-grade identity management that gives you complete control over who can access what — down to individual matter and document level.
Sarah McCarthy
Managing Partner
James O’Sullivan
Senior Solicitor
Emily Fitzpatrick
Trainee Solicitor
Ethical wall active on Matter #4217 — 2 users excluded
GDPR & Data Protection
Oberon is designed from the ground up to meet and exceed the requirements of the General Data Protection Regulation and the Irish Data Protection Act 2018.
Comprehensive DPAs available for all clients, clearly defining roles, responsibilities, and data processing activities in line with Article 28.
Built-in tools for data subject access requests (DSARs) and right to erasure, enabling your firm to respond within the required timeframes.
Automated records of processing activities (ROPA) maintained within the platform, ensuring your Article 30 obligations are always met.
Incident response procedures aligned with the 72-hour notification requirement under Article 33, with automated alerting and documentation.
Data minimisation, purpose limitation, and privacy-by-design principles are embedded into every feature we build, as required by Article 25.
All client data is processed and stored exclusively within the European Union, with primary data residency in Ireland. No data leaves the EU.
Showing 5 of 247 audit events · Tamper-proof log
Complete Audit Trail
Oberon maintains a comprehensive, tamper-proof audit trail of every action taken within the platform. From document access and edits to billing changes and permission updates — nothing goes unrecorded.
Legal Compliance
Oberon is designed to help your firm meet its professional obligations in both Ireland and the United Kingdom.
Law Society of Ireland
Compliant with Solicitors Acts and Law Society practice regulations, including accounts regulations and professional conduct requirements.
Section 68 Letters
Automated generation and tracking of Section 68 client care letters, ensuring compliance with disclosure obligations.
Anti-Money Laundering
Built-in AML workflows aligned with the Criminal Justice (Money Laundering and Terrorist Financing) Acts 2010–2021.
Data Protection Act 2018
Full compliance with the Irish Data Protection Act 2018, implementing GDPR into Irish law, with DPC guidance followed.
SRA Standards & Regulations
Aligned with SRA Standards and Regulations, including the Code of Conduct for Solicitors and the SRA Accounts Rules 2019.
Client Care Requirements
Automated client care letter generation and cost estimate tracking, helping you meet SRA transparency requirements.
UK GDPR & Data Protection Act 2018
Full compliance with the UK GDPR and the UK Data Protection Act 2018, with ICO guidance integrated into platform workflows.
Money Laundering Regulations
Compliance tools aligned with the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 (as amended).
AI Security
Oberon’s AI features are designed with the same security-first approach as every other part of the platform. Your firm’s data is never used to train external models.
AI processing occurs within your firm’s isolated environment. Your data is never shared with other tenants or used for model training.
AI queries and responses are processed in-session and are not stored beyond the active session unless explicitly saved by the user.
The AI respects all RBAC and ethical wall settings. Users can only query data they already have permission to access.
Every AI interaction is logged in the audit trail, providing complete visibility into how AI is being used across your firm.
Administrators can enable or disable AI features globally or per user, and configure which data sources the AI can access.
Our AI is fine-tuned on legal best practices and jurisdictional knowledge for Ireland and the UK, delivering relevant and accurate outputs.
Certifications & Standards
Our security posture is regularly assessed against internationally recognised frameworks and standards.
SOC 2
Type II Aligned
ISO 27001
Aligned
GDPR
Fully Compliant
Cyber Essentials
UK Certified
TLS 1.3
A+ SSL Rating
Pen Tested
Annually
Our team is happy to discuss our security architecture, compliance certifications, or data protection measures in detail. We can also provide our full security documentation upon request.