Matter Access Security

There are several important fundamentals of access control in the Tracker system.
Three layers of access security
  • Each user must have an individual, unique user ID and password to sign in to the system.
  • Users must be granted access to individual matters.
  • Every user who has access to a matter is assigned a matter role, which specifies the user's rights and permissions in the matter.
A user does not have access to a matter unless they are specifically given access
The security features built into Tracker are designed to enable you to protect attorney-client privileged data in the system. The general rule is that a user does not have access to a matter unless the user is given access.
For example, if Sally Lawyer is an outside counsel working on three matters for your company, she will see and have access to those three matters, but she will not have access to any of the other matters that your company has on the system. Moreover, the firm administrators at Sally Lawyer's firm do not have access to Sally's matters or any other matters unless access is granted separately.
Just as in the world of paper documents, the security protections built into the system are effective only if you use them appropriately. If you have any questions about who should have access to matters in this system, contact your Tracker Coordinator.
note
Users with the system role of Firm Administrator, Firm Office Administraotr, Firm User + Billing or Third-Party Biller can view financial information for all matters.

A user can be given access to a matter by three methods

The default rule is that a user does not have access to any matters. The only exception is Company System Administrators who have access to all matters.
  • Direct matter participant:
    The user is the lead company person or lead outside counsel for the matter or is specifically added to the matter on the Participants page.
  • Delegate:
    The user is a delegate of a direct participant. This method is commonly used to grant matter access to a law firm secretary or paralegal as a delegate of the lead outside counsel for the matter.
  • Client Responsible User (All Matter Access)
    : Your firm can identify certain Client Responsible Users for each client, and request that these users be given all matter access (access to all matters that your firm has with the client). Howeer, your company must explicitly decide to grant such access.
note
  • Special matter access cannot be delegated to another user.
  • Access to a Limited Access Matter is only granted directly (delegate and special matter access is not allowed).
Users with access to a matter also have access to report information about that matter. All of the users who have access to a matter are listed on the Participants page for that matter.
Thomson Reuters does not verify the identity of users who are given accounts in Tracker by company or firm system administrators.
note
Security note When you invite a user to a matter in Tracker, you are responsible for confirming that the user's email address (which is used to notify the user) is correct and valid. If you have any doubt, verify the correct email address with the user by phone and correct it in the system if necessary before inviting the user.
Thomson Reuters does not verify the identity of users who are given accounts in Tracker by company or firm system administrators.

Related Content