Data stays in the UK
The system database and client files are kept in a data centre in London. Your data is kept separate from every other practice's.
SecurityPassports, visas and family records.
Passports, visas and family records.
Where they are kept, and who can see them.
Immigration practices hold their clients' most sensitive personal data. Here is how we store it, back it up and control access, point by point, so you can answer clients and regulators.
LondonDatabase and files kept in a London data centre
UK GDPRPersonal data handled as UK data protection law requires
HTTPSEverything between browser and server is encrypted
DailyAutomatic backups, and deleted files can be recovered
In practiceSix things,
Six things,
one at a time.
Files stored apart from the system
Uploaded files sit in separate object storage with multiple redundant copies, away from the application server. A server problem doesn't touch them.
Backup and recovery
The database is backed up automatically every day, with an extra full backup before every upgrade. Files a colleague deletes go to a recoverable state first.
Role-based permissions
Practice role decides which clients someone can see; system role decides what they can administer. An assistant sees their own files; partners see everything.
Every change on record
Who changed what, when, from which IP address and browser, with the before-and-after content kept. Successful and failed logins are recorded too.
People leave, records stay
Deactivate an account and that person's clients, files and emails stay with the practice for whoever takes over.
Data migrationYou hand over what you have.
You hand over what you have.
We sort it and bring it in.
Client records spread across Dropbox, Google Drive, spreadsheets and folders are why most practices put off switching. We do this part.
DropboxGoogle DriveSpreadsheetsClient folders
- 01
Review
We look at where your records are, how many there are and how they are organised.
- 02
Sort
We group them by client, weed out duplicates and unrelated files, and map them to clients and matters.
- 03
Import
Files come in with their folder structure intact, and client details are set up alongside.
- 04
Check
We spot-check with you afterwards to confirm every client's records are there.
Ownership
Your data belongs to your practice.
- We process your data only to provide the service. We never sell it or use it for anything else
- We can sign a data processing agreement (DPA) setting out each side's responsibilities
- If you stop using ACTRA, your client records and files can be exported in full and handed back
The service is provided by L&C Consultant Limited, a company registered in England and Wales (company number 11153073).
QuestionsWhat clients and regulators
What clients and regulators
usually ask.
A specific security question?
Send us what you or your clients want to know and we'll answer in writing.