Last updated August 16, 2026
Security & Data Handling
A customer-facing summary of the controls and boundaries that matter to a law firm. Sensitive configuration and vulnerability details are intentionally not published.
Organization access
Stillroot uses authenticated firm accounts, organization membership, product access, and role checks to separate customer work. Court credentials and integration settings are limited to authorized organization owners. Members cannot retrieve saved credentials.
Court credentials
An authorized organization owner submits the firm's court username and password through a write-only workflow. The values go to dedicated secrets storage and are not displayed after saving or written into customer activity records. A credential check signs in and out without searching cases or downloading documents.
Dropbox and documents
Dropbox is connected through customer-authorized OAuth, so Stillroot does not receive the firm's Dropbox password. The organization chooses and tests its destination folder. Court documents are processed for delivery to that destination; Stillroot is not the firm's document system of record or long-term document vault.
Job controls and records
Manual runs require an authenticated request, and an organization owner must explicitly enable a daily notification schedule. Runs are tied to a user or schedule, kept within one organization, and recorded with a terminal result so failures remain visible and operator-remediable.
Service providers
Stillroot uses established providers for hosting and authentication, subscription billing, Dropbox delivery, and Iowa Courts access. Data is shared with those providers only as needed to operate the requested workflow. Additional information is available during reasonable firm security review without publishing sensitive implementation details.
Shared responsibility
Firms must use only accounts and matters they are authorized to access, protect their users and connected accounts, and remove access when it is no longer appropriate. Stillroot supplements rather than replaces review of official Iowa Courts dockets, notices, documents, and deadlines. No internet-connected service can guarantee uninterrupted availability or perfect security.