Cyber Security & Regulatory Compliance at ALS

We understand that the integrity of your legal operations depends entirely on data security and evidence admissibility. Because our service of process platform, Rocketserve, handles sensitive litigation data, we maintain a rigorous, multi-layered security framework designed to protect your agency, your clients, and your evidence against modern threats.

Real-Time Threat Prevention

Every hosted server in the RocketServe fleet runs CrowdSec, a modern, collaborative intrusion prevention system. CrowdSec continuously analyzes infrastructure logs to detect hostile behavior—such as brute-force login attempts, credential stuffing, and vulnerability scanning—and automatically blocks offending IP addresses in real time.

Unlike traditional static firewalls, RocketServe benefits from a global collaborative intelligence network. When a malicious actor is detected anywhere in the world by the CrowdSec community, that intelligence is instantly shared. This early-warning system allows RocketServe to block attackers at the network edge before they ever reach our application.

Uncompromising Evidence Integrity

Because your work product is used directly in legal proceedings, RocketServe goes a step further than typical SaaS platforms:

• Cryptographic Signatures: Every photo captured through the RocketServe mobile app is cryptographically signed at the point of capture using HMAC-based tamper detection.

• Admissibility Protection: This digital seal allows us to mathematically demonstrate that a photograph, its location data, and its timestamp have not been altered since the moment they were taken—insulating your agency against evidence challenges in court.

Encryption, Storage, & Redundancy

Your data is protected both when moving across the internet and when stored in our architecture.

• Data in Transit: All traffic between your browser or mobile device and RocketServe is encrypted using high-grade Transport Layer Security (TLS). Data moving internally between our own systems—including database replication—travels strictly over isolated, secured channels.

• Data at Rest: All customer data, case files, and captured evidence are fully encrypted at rest.

• Continuous Redundancy: To guarantee high availability, we maintain two real-time replicas of our database infrastructure—one located in Detroit and one in New Jersey.

• Rigorous Backup Schedule: We protect against data loss with full daily backups supplemented by 2-hour incremental backups, ensuring your operational history is always recoverable.

Network and Host Security

RocketServe enforces strict operational boundaries to keep your data isolated and secure.

• Default-Deny Architecture: Host-level firewalls are configured on a default-deny basis, exposing only essential services. Firewall rules are regularly audited across the entire fleet.

• Role Segmentation: Application servers, database servers, and supporting infrastructure are strictly segmented by role. A compromise of an edge component does not grant access to the underlying database tier.

• Hardened Administration: Administrative access to servers is restricted, key-based, and entirely hidden from the public internet.

Vulnerability & Lifecycle Management

We proactively defend our stack against emerging threats:

• Rapid Patching: We continuously track Common Vulnerabilities and Exposures (CVEs) affecting our software stack. Security patches across our operating systems, web servers, and database tiers are applied promptly—frequently within the same week a vulnerability is published.

• Independent Validation: We maintain an independent penetration testing program to routinely challenge and validate our defenses against simulated real-world attacks.

Secure Financial Processing

ALS achieves top-tier financial security by completely separating our process serving software from your sensitive payment data. All billing and payment processing is handled securely by Stripe, a PCI-DSS Level 1 certified provider. RocketServe or ALS never sees, transmits, or stores credit card numbers on its own infrastructure.

Monitoring & Incident Response

Our platform logs are monitored continuously around the clock. In the potential event of a security incident impacting customer data, RocketServe operates under a strict policy of prompt, completely transparent notification alongside immediate remediation steps.