POSTURE
Initial inquiries.
Inquiries submitted through this website are transmitted over TLS 1.3, stored encrypted at rest on infrastructure controlled by the firm, and reviewed personally by the principal. Until an engagement letter is executed, the firm treats inquiry content as carefully as professional responsibility permits, but no attorney–client privilege attaches to unsolicited communications. You should therefore describe the matter at the level of detail necessary to determine fit — the parties, the jurisdiction, the posture, the timeline — without disclosing privileged material.
Client portal — encrypted by default.
Once an engagement is established, communications and document exchange move to the firm’s client portal. The portal applies end-to-end encryption to documents using a firm-controlled master key; metadata is encrypted at rest; access is logged in an immutable audit trail; and authentication requires a one-time passcode plus, on sensitive actions, a step-up re-verification. The architecture is designed to satisfy the technology-competence duty articulated in California Rule of Professional Conduct 1.1 and the confidentiality duty in Rule 1.6.
Voice intake.
The firm operates a voice-intake channel that allows prospective clients to summarize a matter by phone. Voice recordings are transcribed, the transcript is encrypted at rest, and the original audio is retained only as long as necessary to validate the transcription. The transcript is reviewed personally by the principal before any follow-up.
Medical records and sensitive third-party material.
Where a matter requires the firm to obtain medical records on a client’s behalf, the firm complies with the California Confidentiality of Medical Information Act (CMIA). The firm is not a HIPAA covered entity and does not undertake business- associate engagements; this posture is described in the firm’s engagement letter where applicable.
Audit log.
Every authentication, document access, and significant agent transaction within the firm’s systems is recorded to an append-only audit log. The log is retained for the life of the matter plus the file-retention period required by California professional rules.
Compliance posture.
The firm’s practices reflect California Rules of Professional Conduct 1.1 (competence, including technology competence), 1.6 (confidentiality), and 1.18 (duties to prospective clients), together with California Code of Civil Procedure § 2018.030 (attorney work-product) and the California Confidentiality of Medical Information Act where applicable. Where state law and federal law diverge, the firm applies the stricter standard.
Reporting concerns.
Suspected confidentiality concerns, including any indication that this website has been compromised, may be reported directly to Ahmed M. Elmokadem at aelmok@centurypc.com or (858) 999-8103.