Frequently Asked Questions
Everything you need to know about our secure MDL portal development services, security standards, compliance tiers, and engagement process.
What is the Iron Curtain privacy model?
The Iron Curtain is our proprietary data isolation architecture that ensures complete separation between plaintiff and defendant data in multi-party litigation. Unlike row-level security filters, the Iron Curtain uses separate database schemas, independent API endpoints, and partitioned audit logs so that cross-party access is structurally impossible — not just restricted by permissions.
What security compliance standards do you support?
We support four compliance tiers: Standard (industry-standard encryption and access controls), HIPAA (for pharmaceutical and medical litigation involving protected health information), SOC2 Type II (audited security controls with third-party verification), and Government-grade (FedRAMP-equivalent for government contracts or classified matters). Each tier builds on the previous one.
What types of litigation do you support?
We specialize in Mass Tort, Class Action, MDL (Multi-District Litigation), asbestos litigation, product liability, securities litigation, and complex single-case proceedings. Our platforms are purpose-built for adversarial multi-party cases where data isolation and role-based access are critical.
How long does it take to deploy a litigation portal?
Standard deployments take 2-4 weeks from initial consultation to go-live. Emergency deployments for court-ordered deadlines can be completed in under 2 weeks. Complex implementations with extensive data migration or custom integrations typically take 1-3 months. We'll give you an accurate timeline during the initial requirements discovery.
How much does a litigation portal cost?
Pricing depends on the complexity of your case, number of parties, user count, compliance requirements, and feature set. Our engagements typically range from $5,000-$15,000 for single-case portals, $15,000-$50,000 for multi-party MDL platforms, and $50,000+ for enterprise-scale deployments with dedicated infrastructure. We provide detailed proposals after understanding your specific requirements.
Can you migrate data from our existing systems?
Yes. We handle full data migration from legacy platforms including document repositories, case management systems, and email archives. Every migration includes integrity verification, chain-of-custody documentation, and parallel operation periods where both old and new systems run simultaneously until you're confident in the transition.
What happens to our data when a case concludes?
You have two options: complete data export in standard formats with verified chain-of-custody documentation, or secure destruction with certificates of deletion. We follow your retention policy and can accommodate court-ordered preservation requirements. Data is never retained beyond what your agreement and applicable regulations require.
How do you handle user roles and permissions?
Our role-based access control (RBAC) system supports granular permissions for every user type in litigation: Judges, Lead Counsel, Co-Counsel, Clerks, Paralegals, Expert Witnesses, Document Reviewers, and more. Each role sees exactly what they need — nothing more. Roles can be customized per case when proceedings require unique access configurations.
What is your uptime guarantee?
We guarantee 99.9% uptime backed by SLA with financial penalties if we fall short. Our actual track record exceeds this — the NYCAL platform, for example, has maintained 99.99% uptime over 25+ years of continuous operation. Our infrastructure includes multi-region deployment with automatic failover and disaster recovery with RTO under 4 hours.
Do you provide ongoing support after deployment?
Yes. Every deployment includes 30 days of dedicated support for onboarding and stabilization. After that, we offer ongoing maintenance plans that include security updates, compliance monitoring, user management, and priority support. Many of our clients have been with us for years — NYCAL has been running for over 25 years.
How do you ensure compliance with court orders?
Our portals are built to satisfy Case Management Order (CMO) requirements for document portals, communication protocols, and data handling in federal MDL proceedings. We review your specific court orders during the requirements phase and configure the platform accordingly. Complete audit trails ensure you can demonstrate compliance at any time.
Is my data stored in the United States?
Yes. All data is stored in US-based data centers with no offshore processing or third-country transfers unless you explicitly authorize it. For Government-grade compliance, we offer dedicated infrastructure with US-only personnel access and FIPS 140-2 encryption.