Cloud Security in RelativityOne

Single and Multi-Factor Authentication

RelativityOne supports OpenID Connect and SAML2 protocols, two-factor authentication, and single sign-on.

---

24/7 Monitoring

Our threat intel platform continually monitors each RelativityOne instance for suspicious events. More than 200 intel feeds search for specialized indicators—logon events, new users, alerts from Azure, etc.—to distribute to endpoint protection, including next-generation firewalls, anti-malware, anti-spam, and EDR solutions.

---

Encryption At-Rest and In-Transit

High standards of cryptography ensure that all data in RelativityOne is encrypted at-rest and in-transit at every endpoint.

---

Secure Coding

We adhere to a secure software development lifecycle to ensure that security is central to feature design. All our developers are required to take courses in security awareness and secure coding practices, and our security engineers are involved in every feature’s design and development. Secure development is our culture.

---

Penetration Testing

We perform regular and exhaustive internal and third-party penetration tests to identify and remediate software vulnerabilities before they can be exposed by malicious actors. With regular updates to your RelativityOne environment, your data is always secure.

---

Vulnerability Management

Our security team collaborates with our engineers to ensure security is central to feature design. We’re vigilant in patching emerging vulnerabilities in any third-party infrastructure components, helping us maintain a 360-degree view and remediate weaknesses before they're exploited.

---

Customer Lockbox

A customer lockbox prevents administrators (our teams included) from seeing your data unless you say so. RelativityOne also provides discrete user permissions so you can customize varying levels of security for users.

---

Customer-Managed Keys

We can provide you with the ability to manage your RelativityOne environment’s encryption key for increased control of your data.

---

Shared Security Logs

If requested, we can provide the relevant security logs from your RelativityOne instance, so you can perform an independent security analysis and monitor your own environment.

---

Secure Operations

We’ve built a robust protocol for all RelativityOne operations, including:

• Regular rotation of certificates, keys, and passwords
• Multi-factor authentication across all company systems
• Privileged access assigned on a need-to-know basis with the rationale recorded for monthly review
• Segregated environments for design, implementation, testing, and hosting

---

Incident Management

Our security team responds to critical alerts 24x7, identifying and remediating issues no matter when they pop up.