Security & privacy
What is kept, what is not, and where it lives.
A-Numbers stay out of our application logs
An A-Number identifies a case. It is kept out of our application logs, analytics, and notification text — even when the court’s own system echoes one back in an error, it is redacted before storage.
Calendar tokens are encrypted at rest
Connecting Google Calendar or Outlook stores an access token, not a password, encrypted at rest (AES-256-GCM) and never logged.
Each firm's data is isolated at the database level
Case data, calendar connections, and acknowledgements are partitioned by firm with Postgres row-level security, enforced by the database for every firm-facing request.
Client acknowledgements are recorded, then frozen
A confirmation’s time, language, and network are recorded, and a certificate is generated once and frozen with a checksum — it does not change afterward.
Only what the court publishes, and what your firm adds
EOIR Tracker stores the A-Number, the court’s own public case data, and whatever your firm adds — a name, email, or phone for notices. No Social Security numbers, forms, or documents.
Questions
Write to info@eoirtracker.com.