How SAR Law is designed to handle information.

Information collected at the public front door

SAR Law is designed to collect only the information needed to identify the person, understand the request, route the matter and determine the next step. Public intake should not be used for unnecessary high-risk identity, banking, signature or evidentiary information.

Sensitive information

When a matter actually requires sensitive information, the request should occur through the approved restricted workflow. Status information may be recorded in the ordinary matter system without unnecessarily copying the sensitive value itself into routine logs, notifications or analytics.

Matter-specific access

SAR Law’s access model is designed around explicit roles and matter/document grants. A person should not gain access to another matter merely because the matters belong to clients with similar profiles or because a user has a broad operational role.

Working drafts and final documents

Working drafts are internal preparation materials. They remain separate from client-facing final documents and are not treated as approved or deliverable merely because an automated process generated them.

Retention and deletion

Working retention periods are 12 months for unengaged inquiries and six years after closure for accepted matters, unless a longer period is required by law, contract, legal hold or operational need. Destruction, discard or deletion of records requires owner notification and documented authorization; automated systems may not independently destroy records.

Contact and corrections

Privacy, access, correction, records and information-handling questions may be directed to privacy@sarlaw.org. General routing assistance is also available through the Contact SAR Law page. Do not send highly sensitive records through ordinary email unless SAR Law specifically instructs you to use an approved method.