For IT and security teams
Security and data flow
Everything our software does happens on the user's computer. This page sets out, for LHT DMS and for LHT Reader, what, if anything, leaves it, and where it goes.
Last updated 8 November 2026.
Legal Hi Tech Limited makes two desktop applications, LHT DMS and LHT Reader. Both work entirely on the user's own computer. No document, case detail or password is sent to Legal Hi Tech Limited or to any cloud service.
Part A
LHT DMS
LHT DMS is a desktop application that works entirely on the user's own computer. No document, case detail or court-portal password is sent to Legal Hi Tech Limited or to any cloud service. More about LHT DMS.
What LHT DMS is
LHT DMS is installed and run on the user's own computer. It has no server component, and Legal Hi Tech Limited operates no service that receives or processes documents.
- Platforms: Windows 10 and 11 (64-bit); macOS 15.7.9 Sequoia or later, on Apple Silicon only.
- What it does: downloads the documents filed in the user's own cases from the court e-filing portals (EFS and EKSS in Malaysia, CE-File in England and Wales); compiles court bundles; builds the court index in Word; writes bundle page references into Word documents; and organises PDF pages and case folders.
- No generative AI. The software does not use generative AI. It uses optical character recognition (OCR), which runs on the user's computer, to make scanned pages searchable.
Documents and case data
Every document is read, processed and saved on the user's computer, in folders the user chooses. This includes OCR, compression, unlocking, compiling and indexing.
- No document, page image, file name or extract is sent to Legal Hi Tech Limited or to any third party.
- Where a feature changes an existing file, such as writing page references into a Word document or replacing pages in a bundle, the original is first copied to a backup folder on the same computer.
- The free web tools at legalhitech.com work the same way: files are processed inside the user's browser and are never uploaded.
Court-portal credentials
The user's portal username and password stay on the user's own computer. By default they are kept in two cells of the user's own Cases-Folders spreadsheet, an Excel file saved wherever the user chooses when creating it; the app records only where that file is. From version 1.0.21, the password can instead be kept in the computer's own credential store, as set out below. Either way, they are sent only to the court's portal, and only to sign in.
- The download signs in from the user's computer, as the user would by hand, and receives the documents directly from the court's servers.
- The download runs in a browser engine bundled with the app, without a visible window. Where the user opens a portal from the app, it opens in the user's own Chrome or Edge.
- Legal Hi Tech Limited never receives, stores or sees the credentials, the case numbers or the documents.
- It is the user who signs in. The app is a tool the user signs in with, as a browser is, or a password manager that fills in a login, or copy and paste. The user starts each download, with his own login; the app signs in only as him, sees only what his account can see, and files nothing.
- Whose login: in Malaysia, Order 63A rule 6 of the Rules of Court 2012, which applies in Sabah and Sarawak as it does in Peninsular Malaysia, requires every registered user of the e-filing service to keep his authentication code confidential, and not to divulge it to, or let it be used by, any other person. Each lawyer should therefore sign in to EFS or EKSS with his own login, not with a firm-wide one such as the managing partner's, and a clerk who downloads from EFS for a lawyer should sign in with his own EFS login, which the firm's EFS Administrator can create, never with the lawyer's.
- A spreadsheet shared on a server: where a firm keeps one Cases-Folders spreadsheet for everyone, its username and password cells should be left blank, so that no login sits on the server, and each person should save his own login on his own computer with 'Save login on this computer' (version 1.0.21 and later). The app then signs in with that person's own login.
- Password in the credential store (version 1.0.21 and later): 'Save login on this computer', on the EFS, EKSS and CE-File tabs, keeps the login in Windows Credential Manager or the Mac login keychain, which the operating system holds for the signed-in user and protects with that user's sign-in. On Windows the entry stays on that computer and does not roam to others. The password cell of the spreadsheet is then left blank, so that the spreadsheet holds no password at all.
- A firm's IT staff can add the entry themselves instead: on Windows as a generic credential in Credential Manager, on a Mac as a password item in the login keychain, named by the portal's address (efs.kehakiman.gov.my, ekss-cmsa.kehakiman.gov.my or efile.cefile-app.com). The app reads only that entry: nothing else in the store is read or listed, and the password is never written to the app's log.
- Password in the spreadsheet: the app does not encrypt the spreadsheet. It is protected by the computer's own controls: disk encryption such as BitLocker or FileVault, and folder permissions that let only the user open it. Versions before 1.0.21 keep the password in the spreadsheet only.
Network connections
The app makes the connections below and no others. Once the licence is activated, the download is the only feature that needs the internet.
| Connection | Destination | What is sent | Never sent |
|---|
| Court-portal download | The court's portal: EFS, EKSS or CE-File | The user's portal username and password; the case numbers being downloaded | Anything to Legal Hi Tech Limited |
| Licence activation and periodic check | Legal Hi Tech's licence database, hosted by Supabase in Ireland. The exact host name, for a firm's firewall allow-list, is given on request | Licence key; an identifier derived from the computer's hardware, used only to bind the licence to the computer. From 12 November 2026 also the computer's name, its operating system and version, and the app's version, so that a licence's computers can be told apart | Documents, case data, credentials |
| Update check | downloads.legalhitech.com (Cloudflare R2, Western Europe) | A request for the current version number. An update is fetched only from this address, and only if the user accepts it | Documents, case data, credentials |
| OCR languages (only when the user adds one) | raw.githubusercontent.com: the Tesseract OCR project's own language files on GitHub | A request for the language file | Documents, case data, credentials |
| LibreOffice (only if the user accepts the offer, on a computer without Microsoft Word) | download.documentfoundation.org: The Document Foundation, which makes LibreOffice | A request for the installer. Its signature is checked as The Document Foundation's before it runs | Documents, case data, credentials |
| Crash report (only if the user chooses to send one) | [email protected], by the user's own email. Nothing is sent automatically: the report is saved on the user's computer | Software version, operating system and the error | Documents, case data, credentials |
Every connection is HTTPS, checked against the computer's own certificate store, so a firm's inspecting proxy is honoured as it is for any other program. The software sets no cookies and collects no usage statistics.
Installation, licences and updates
Each licence runs on one computer at a time, and the user can move it to another computer from inside the app.
- Updates: when a new version is available, the app offers it. Nothing is installed until the user accepts. The update is fetched only from downloads.legalhitech.com, over HTTPS, and is checked as complete before it runs.
- Installation on Windows: from version 1.0.21, Setup asks whether to install for the signed-in user only or for everyone who uses the computer. For one user, the default, it installs in that user's own programs folder and needs no administrator rights. For everyone, an administrator installs it in Program Files, with its shortcuts for all users. The choice can also be made on the command line, with /CURRENTUSER or /ALLUSERS, together with the installer's silent-install switches, /VERYSILENT /SUPPRESSMSGBOXES. An update keeps the choice made at installation, and a copy installed for everyone is updated only with an administrator's approval. Versions before 1.0.21 install for the signed-in user only.
- Installation on a Mac: the notarised disk image is dragged into Applications.
- User data: settings, the licence and OCR languages are kept in each user's own application-data folder.
- Free period: the software is free for all of 2026. Annual per-user licences begin in January 2027.
Part B
LHT Reader
LHT Reader is a desktop application that works entirely on the user's own computer. No document, file name or anything written in a document is sent to Legal Hi Tech Limited or to any cloud service. More about LHT Reader.
What LHT Reader is
LHT Reader is installed and run on the user's own computer. Like LHT DMS, it has no server component, and Legal Hi Tech Limited operates no service that receives or processes documents.
- Platforms: Windows 10 and 11; macOS 15.7.9 Sequoia or later, on Apple Silicon only.
- What it does: opens PDF files, and opens Word documents, pictures and web pages as PDFs; marks them up with highlights, notes, bookmarks, redactions, page numbers, stamps and signatures, digital signatures among them; fills in PDF forms; reads pages aloud; and exports pages to Word, Excel, PowerPoint, text and pictures.
- No generative AI. The software does not use generative AI. It uses optical character recognition (OCR), which runs on the user's computer, to make scanned pages searchable.
- No key needed. The free version runs without a licence key and without registering. Registering a computer, by an email address, is optional.
Documents
Every document is opened, marked up and saved on the user's computer, in folders the user chooses. This includes OCR, redaction, signing and exporting.
- No document, page image, file name or extract is sent to Legal Hi Tech Limited or to any third party.
- Word documents are made into PDFs by Microsoft Word or LibreOffice, whichever is installed, on the same computer. Export to Word uses Word itself; the other exports are written by LHT Reader itself.
- No script in a PDF is run. The PDF engine in LHT Reader is built without a JavaScript engine.
- Files attached to a PDF are opened only if they are documents, pictures, sound or video of the usual kinds, and are first marked as having come from elsewhere, as a browser marks a download (on Windows, the mark of the web; on a Mac, quarantine). Programs and scripts attached to a PDF are never started: they can only be saved.
- Spell check and reading aloud use the computer's own spell checker and voices, those of Windows or of the Mac, offline.
- Digital signatures are made and checked offline: no time-stamp server is called, no revocation is looked up and no list of trusted signers is downloaded. The digital IDs trusted are the user's own and the certificates the user has chosen to trust.
- Signatures kept in LHT Reader are kept sealed, so that a copy of the file taken to another computer cannot be opened (on Windows, nor by another user of the same computer), and, if the user gives one, under a password of the user's own.
- Its own files: settings, the lists of recent documents, kept signatures and OCR languages are kept in the user's own account: on Windows in two folders named LHTReader, in AppData\Roaming and AppData\Local; on a Mac in Library/Application Support/LHTReader. A temporary folder of its own is deleted when it closes.
- Its log of what it does is kept in memory only, and is discarded when it closes. A record of a failed start or an unexpected end is saved in its own folder, and reaches Legal Hi Tech Limited only if the user sends it.
Web pages brought in
When the user brings in a web page by its address, LHT Reader connects directly to that website, and Legal Hi Tech Limited receives nothing of it.
- A PDF at the address is fetched as it is. Any other page is printed to a PDF by the browser already on the computer, Microsoft Edge, Google Chrome or Brave, run without a window.
- That browser runs on a temporary profile of its own, deleted at the latest when LHT Reader closes, so that the user's own sign-ins, history and other browsing data are neither used nor changed. Only public pages can therefore be brought in, and any cookie a website sets goes with the temporary profile.
- As with any download, the website receives the computer's internet (IP) address. The browser may also connect to its maker's own services, as it does when the user runs it.
Network connections
LHT Reader makes the connections below and no others. Opening, marking up, saving and exporting documents never needs the internet.
| Connection | Destination | What is sent | Never sent |
|---|
| Computer record (at a start, at most once a day, and when the user changes the computer's country) | Legal Hi Tech's licence database, hosted by Supabase in Ireland: the same as for LHT DMS | An identifier derived from the computer's hardware; the operating system and its version; the version of LHT Reader; the country chosen for the computer, if any. No licence key, email address or name of the computer | Documents, file names, anything written in a document |
| Registering a computer (only if the user chooses to) | Supabase's sign-in service, which sends a code of six digits to the email address through our email service provider; then the licence database | The email address and the code typed in; then the computer's identifier, the name the user gives it, its operating system and version, the version of LHT Reader and the country chosen | Documents, file names, anything written in a document |
| Licence check (a registered computer only: at each start, and when the user opens Licensing Information, renames the computer, or removes or switches its registration) | The licence database | Licence key and the computer's identifier; at a start, also the operating system and its version and the version of LHT Reader; the computer's name only when it is registered or renamed | Documents, file names, anything written in a document |
| Update check (at each start, and on Check for Updates) | downloads.legalhitech.com (Cloudflare R2, Western Europe) | A request for the latest version number. An update is fetched only from this address, only if the user accepts it, and is checked as complete before it runs | Documents, file names, licence details |
| OCR languages (only when the user adds one) | raw.githubusercontent.com: the Tesseract OCR project's own language files on GitHub | A request for the language file | Documents, file names, licence details |
| LibreOffice (only if the user accepts the offer, on a computer with neither Microsoft Word nor LibreOffice) | download.documentfoundation.org: The Document Foundation, which makes LibreOffice, or one of its mirrors | A request for the installer. It runs only if it is signed by The Document Foundation | Documents, file names, licence details |
| A web page (only when the user brings one in) | The website named, directly; a page that is not a PDF through the computer's own Edge, Chrome or Brave, as set out above | A request for the page, as a browser makes one | Anything to Legal Hi Tech Limited |
| Report Issue, EULA and Privacy Policy (only when the user clicks them) | legalhitech.com, opened in the user's own browser. The support page's form is provided by Tally | Nothing, by LHT Reader itself. On the support page, what the user writes in its form. A record of a fault reaches us only if the user emails it | Nothing is sent automatically |
Every connection LHT Reader makes of its own accord is HTTPS, checked against the computer's own certificate store, so a firm's inspecting proxy is honoured as it is for any other program. LHT Reader sends no analytics of what is done in it, and no error reports.
Installation, licences and updates
- Licences: no key is needed for the free version. A computer registered under a licence occupies a seat of it until its registration is removed, which can be done from inside the app, under Licensing Information.
- Updates: when a new version is available, the app offers it. Nothing is installed until the user accepts. The update is fetched only from downloads.legalhitech.com, over HTTPS, and is checked as complete before it runs.
- Installation on Windows: Setup asks whether to install for the signed-in user only, in that user's own programs folder and with no administrator rights, or for everyone who uses the computer, by an administrator, in Program Files. The choice can also be made on the command line, with /CURRENTUSER or /ALLUSERS, together with /VERYSILENT for a silent installation, such as from Intune or Configuration Manager. An update keeps the choice made at installation. A copy installed for everyone is updated only with an administrator's approval; the other users of the computer are told that a new version is available.
- Installation on a Mac: the notarised disk image is dragged into Applications.
For both
LHT DMS and LHT Reader
Personal data held by Legal Hi Tech
Legal Hi Tech Limited holds only what it needs to issue and manage licences. It is the data controller under UK GDPR and is registered with the Information Commissioner's Office (ZC222956).
- LHT DMS, when a download is requested: firm or chambers name, email address, country, jurisdiction and platform.
- LHT DMS, for the licence: licence key, type, status, issue and expiry dates, the hardware-derived identifier, the date the licence was last checked and, from 12 November 2026, each registered computer's name, operating system and app version.
- LHT Reader: downloading it asks for no details. For every computer on which it is used, the computer record set out in Part B. Only if a computer is registered: the email address, the licence and its seats, and each registered computer's name, operating system and app version; and the sign-in service's records of each code asked for and each sign-in made with one, with its time and internet (IP) address.
- Providers: the licence records of both are held by Supabase, in Ireland. LHT DMS's licence emails are sent through Make, in the EU; LHT Reader's registration codes are sent by Supabase's sign-in service, through our email service provider. The installers and updates of both are served from Cloudflare R2, in Western Europe. No document, case detail or credential reaches any of them.
- Retention: for the life of the licence and seven years after it ends, then deleted or anonymised. An LHT Reader computer record is kept for seven years after the computer was last reported in use; the sign-in service's records of codes and sign-ins are deleted within 90 days.
The full terms are in the Privacy Policy: Part A for LHT DMS, Part B for LHT Reader.
Software integrity
The Windows installers of LHT DMS and LHT Reader are signed with Legal Hi Tech Limited's code-signing certificate through Microsoft Azure, and their macOS builds are notarised by Apple.
- Each Windows build is submitted to Microsoft Security Intelligence when it is compiled.
- Every executable and library file in each installation is signed with the same certificate, as are the installers and the uninstallers.
- Third-party components, including the Tesseract OCR engine, are listed with their licences in THIRD-PARTY-NOTICES.txt (LHT DMS) and LHTReader_THIRD-PARTY-NOTICES.txt (LHT Reader), installed with each app.
Certifications
Legal Hi Tech Limited does not at present hold ISO 27001, SOC 2 or Cyber Essentials certification. Because no client document, case detail or credential is held on its systems, the firm's own controls on the user's computer govern that data throughout.
Questions from a firm's security or IT team are welcome, and a 15-minute video call can be arranged.
Legal Hi Tech Limited, registered in England and Wales, No. 17318354. Registered office: RA01, 195–197 Wood Street, London E17 3NU. Email: [email protected].
