Built for sensitive legal information.

Arkivia handles sensitive legal data with security and regulatory compliance built into the platform.

GDPR

eIDAS

BankID

arkivia — Security Status

LIVE

Data Retention

Authentication

BankID

Access Log

Active

The Swedish Bar Association's requirements

Complied with

AI training on customer data

Never

01 — Regulatory Compliance

Arkivia is built to comply with requirements for data protection, identity, and access control.

GDPR

We comply with the GDPR — the EU General Data Protection Regulation for the processing of personal data.

EU data retention

All customer data is stored and processed exclusively within the EU. No data is transferred to third countries, and it is never utilized for training AI models.

BankID

All users log in using BankID — an approved e-ID with two-factor authentication built in.

eIDAS

Electronic signatures comply with the requirements of the eIDAS Regulation for advanced electronic signatures. Legally binding throughout the EU.

The Swedish Bar Association

Swedish Bar Association

We operate in compliance with the Code of Professional Conduct of the Swedish Bar Association and the information security requirements applicable to law firms.

We operate in accordance with the Swedish Bar Association’s Code of Professional Conduct and the information security requirements applicable to law firms.

02 — HOW WE PROTECT YOUR DATA

Protection of sensitive data.

Bank-grade encryption

All data is protected throughout the entirety of the proceedings.

Role-based access control

Access permissions are displayed by role and case, utilizing BankID authentication. This ensures only authorized personnel have access to the relevant information, strictly on a need-to-know basis.

EU Infrastructure

Operations and storage are conducted in data centers within the EU, featuring redundancy and continuous backups. No transfer to third countries.

No AI training on your data

Your and your clients' information is never used to train AI models. The AI features operate solely on the case data, nothing more.

Security as a process

Security is not a one-time project. We continuously test, update, and audit our systems, maintaining clear procedures for incidents and vulnerabilities.

Full traceability

Every action is logged and can be
traced back to its source in the file.
A complete audit trail is available for
both the firm and regulatory oversight.