Activity log
Admins see the whole firm's log. Everyone else sees their own actions.

Offices, departments and roles are part of the model, so people see the work that belongs to them and nothing else.
Organisation, then offices, then departments. Two offices can each run an Intellectual Property department without their work mixing.

Every request is checked against the person's role and departments. Deactivate someone and they are out on their next click.
| Role | What they can do | What they see |
|---|---|---|
| Admin | Everything, including offices, departments and other admins | The whole firm |
| Sub-admin | Admin reach, except removing an admin, creating offices or departments, or granting admin control | The whole firm. Accounts only if an admin grants it |
| Authorized member | View, create and edit | Their own departments |
| Restricted member | Edit only what they own. Cannot create | Only the cases assigned to them |
| Client contactPortal login | Read their matters, talk in the client thread, see their own meetings | Their own client's cases, and cases they follow |
A client contact gets a login only when someone in the firm sends it. They cannot give themselves access.

Every create, update and delete on cases, tasks, proceedings, meetings, clients, projects, IP applications and team members is written to the activity log. Entries are never edited.
Admins see the whole firm's log. Everyone else sees their own actions.
Every accounts change keeps a snapshot of before and after.
Each task keeps its field-level change history and every deadline move.
New people get a welcome email with a set-password link that expires in 24 hours.
Try it for five days in a full workspace, already furnished with sample data. No card, nothing to cancel.