In response to recent guidance from federal courts—including notices from the Administrative Office of the U.S. Courts and the Standing Order of the Eastern District of North Carolina—we want to clearly communicate ECFX’s position and practices regarding the confidentiality and security of sealed documents and restricted information.

• ECFX does not store attorney credentials for PACER accounts.
• ECFX does not store attorney credentials for PACER accounts. Sealed documents must still be downloaded manually by those with access to the credentials. ECFX does not download sealed documents from PACER.
• ECFX is not added as a secondary recipient on CM/ECF accounts.
• ECFX does not resell or republish court documents or case information.

With ECFX, your court documents remain secure, confidential, and accessible only to your authorized team.

ECFX has successfully completed a SOC 2® Type II examination covering the design and operational effectiveness of our security controls based on the AICPA’s Trust Services Criteria for Security.

Our compliance ensures that:

• Security protocols are fully documented and consistently applied.
• All data in transit and at rest is encrypted using TLS 1.2 and AES-256-GCM.
• Access is managed with multi-factor authentication and strict role-based permissions.
• Security scans are executed on every code commit during development.
• System and infrastructure monitoring is continuous, with alerts addressed in real time.
• Daily backups include point-in-time recovery and are regularly tested.
• Third-party audits and penetration testing validate the effectiveness of our controls.
  
  

This certification affirms that ECFX maintains strong, continuously operating safeguards to protect sensitive legal data.

Because ECFX never publishes your documents, you will never need to request that ECFX claw back or take down a sealed document or other inadvertent filing from public access.

With ECFX, your documents remain exclusively yours at all times.

At ECFX, client data is logically separated within a secure multi-tenant environment to ensure isolation and confidentiality. Access to all systems is tightly controlled and continuously monitored, allowing only authorized personnel to interact with sensitive information. All sessions are encrypted over HTTPS, and system activity is fully logged to support auditability and transparency. We maintain formal policies that govern acceptable use, incident management, vendor security, and data retention, ensuring that security best practices are embedded throughout our operations. To safeguard business continuity, ECFX also maintains and tests disaster recovery and business continuity plans on an annual basis.