Security roadmap

This page lists controls CompleteLane is building or evaluating. For controls available today, see the security page.

Committed for 2026

Multi-factor authentication

Optional, and on some plans required, second-factor authentication for organization members. Today, sign-in uses email and password.

Anti-malware scanning on uploads

Server-side scanning of every uploaded file against known malware signatures, with automatic quarantine of detected threats.

Under evaluation

CompleteLane SOC 2 Type II audit

A formal SOC 2 Type II audit of CompleteLane's own controls and processes. Today, our underlying infrastructure providers are SOC 2 Type II audited; this roadmap item covers a CompleteLane-specific audit attestation.

External collaborator role

A scoped role for non-staff users who need temporary access to specific requests or uploads — for example, co-counsel or external reviewers. Today, sharing requires a full member seat or magic-link portal access.

Configurable retention controls

Per-client and per-request retention settings so customers can apply their own legal-hold and minimum-retention policies. Today, retention is uniform across an organization's data.