Access enforced at the database
Admin, attorney, paralegal and support roles are enforced by row-level security policies, not just hidden buttons. A support account cannot read a record it isn't entitled to even outside the app UI.
Security
Immigration files are sensitive. The system is built that way.
Case records contain A-numbers, passports, medical and persecution history. Compass Legal treats access control, reversibility and auditability as core features rather than settings.
Client-visible vs. internal
Work product stays internal by default. Only documents explicitly marked client-visible are ever exposed through a portal link, and portal links expire.
Archive, don't delete
Removing a document moves it to an archive with a stated reason and is reversible. Permanent deletion is restricted to firm administrators and requires an explicit confirmation.
Audit trail on every file
Stage changes, document actions, hearings and notes are recorded to a matter timeline so you can reconstruct exactly who did what and when.
Deploy on your own cloud
The application is built against portable storage and AI seams, so a firm can run it on its own infrastructure rather than a vendor tenancy.
Bring your existing cases
A migration tool imports clients, matters and documents from an existing system with stable external identifiers, so re-runs never duplicate records.
This page describes product behaviour, not a certification. Firms remain responsible for their own professional-responsibility and data-protection obligations.