{"industry":{"id":"a7b3fdc7-1217-4f39-8fc5-2e8e3f73c3d7","slug":"legal-technology","label":"Legal Technology","description":"Practice management, e-discovery, and compliance"},"topic":{"slug":"immigration-law-software","label":"Immigration Law Software","description":"Case management, USCIS form automation, client intake, billing, and security for immigration law firms and nonprofit legal aid programs.","schemaKind":null},"answer":{"id":"af1fae7b-011b-407a-8421-f921930b0660","slug":"what-security-features-should-immigration-case-management-software-have","question":"What security features should immigration case management software have?","answerMarkdown":"An immigration file holds passport numbers, Social Security numbers and medical records, so the software that stores it needs eight things. It needs multi-factor sign-in that an administrator can require, role permissions that keep staff and portal clients to their own matters, and encryption in storage and in transit. It needs audit logs, backups that restore to an earlier point in time, offboarding that takes effect at once, a full data export, and a contract deadline for telling you about an incident. A feature name on a security page doesn't show how the control is configured, so for each one ask to see the setting or the contract term.","answerText":"An immigration file holds passport numbers, Social Security numbers and medical records, so the software that stores it needs eight things. It needs multi-factor sign-in that an administrator can require, role permissions that keep staff and portal clients to their own matters, and encryption in storage and in transit. It needs audit logs, backups that restore to an earlier point in time, offboarding that takes effect at once, a full data export, and a contract deadline for telling you about an incident. A feature name on a security page doesn't show how the control is configured, so for each one ask to see the setting or the contract term.","answerHtml":"<p>An immigration file holds passport numbers, Social Security numbers and medical records, so the software that stores it needs eight things. It needs multi-factor sign-in that an administrator can require, role permissions that keep staff and portal clients to their own matters, and encryption in storage and in transit. It needs audit logs, backups that restore to an earlier point in time, offboarding that takes effect at once, a full data export, and a contract deadline for telling you about an incident. A feature name on a security page doesn&#39;t show how the control is configured, so for each one ask to see the setting or the contract term.</p>\n","summary":"Immigration case management software needs multi-factor sign-in an administrator can require, role permissions for staff and portal clients, encryption, audit logs, point-in-time recovery, immediate offboarding, a full export and a contract deadline for incident notice. The published security pages of eImmigration and Docketwise show what vendors state and which settings to confirm in a demo and in the contract.","publishedAt":"2026-05-22T18:41:00","verifiedAt":"2026-10-09T21:56:02.534","editorialStatus":"APPROVED","lastReviewedAt":"2026-10-10T01:51:07.93","nextReviewDueAt":"2027-01-09T21:56:02.534","templateVersion":"v2","aliases":["What should immigration firms look for in case management software security?","Immigration case management software security checklist","What security questions should you ask an immigration software vendor?","Does immigration case management software need SOC 2?","Is immigration case management software HIPAA or GDPR compliant?","How do immigration firms meet ABA Rule 1.6(c) with cloud software?","What encryption should immigration software use?","Should immigration case management software have multi-factor authentication?","What breach notification terms should be in an immigration software contract?","Single-tenant vs multi-tenant immigration case management software","How do you vet a legal tech vendor's security claims?","Immigration legal aid case management software security requirements"],"confidenceScore":91,"confidenceLabel":"High","canonicalUrl":null},"contributor":{"id":"ec39deab-44fe-48d8-9029-fefe993ab85a","slug":"answer-stack","displayName":"AnswerStack","websiteUrl":null},"contributorOrganizationProfile":{"entityId":"ec39deab-44fe-48d8-9029-fefe993ab85a","legalName":null,"description":null,"websiteUrl":null,"imageUrl":null,"slogan":null,"subtitle":null,"facts":[],"coiNote":null,"foundingDate":null,"numberOfEmployeesText":null,"contactPoint":null,"address":null,"headquartersText":null,"organizationType":null},"contributorPerson":null,"sections":[{"id":"ad89caf1-a7dc-430e-be47-1b2e6d64fc72","sectionKey":"published_controls_comparison","sectionType":"table_section","heading":"What eImmigration and Docketwise publish about security","introMarkdown":null,"introHtml":null,"outroMarkdown":null,"outroHtml":null,"contentJson":{"rows":[{"cells":["Second factor","\"Optional MFA.\" 2FA and SSO is sold as a premium feature.","2FA on every pricing plan, mandatory once the trial ends"]},{"cells":["Permissions","Role-based permissions","Per-user permissions set by admins. Permission groups on the Advanced plan."]},{"cells":["Encryption","At rest and in transit. No algorithm named.","AES-256, served over HTTPS"]},{"cells":["Hosting","Microsoft Azure, with a single-tenant database for each customer","AWS"]},{"cells":["Backup","Continuous geo-replication, with loss limited to \"a few minutes\"","Snapshots about every five minutes across multiple availability zones"]},{"cells":["Testing","Annual penetration testing","Vulnerability scanning with third-party tools"]},{"cells":["Audit logs","\"Audit trails,\" in a June 2025 post","Not described on the security page"]}],"columns":["Control","eImmigration","Docketwise"]},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":10},{"id":"3ae369a7-deab-493d-9f5a-0cc4360d66c5","sectionKey":"sign_in","sectionType":"markdown_section","heading":"Sign-in: a second factor the firm can require","introMarkdown":"A phished or reused password puts every file that account can reach at risk, which makes sign-in the first control to settle. A second factor protects each account that has one, and requiring it for everyone removes the unprotected exceptions. So ask whether an administrator can require it, and whether your plan includes it.\n\nThe two vendors answer differently. Docketwise's [security page](https://www.docketwise.com/security) says 2FA is available on every pricing plan, and its [2FA help article](https://support.docketwise.com/en/articles/6387943-two-factor-authentication-2fa) says the second factor is mandatory once a trial ends. Users choose an authenticator app, a text message to a US mobile number, or email. Ask whether the firm can limit staff to the authenticator app, since a code sent by email is only as safe as the mailbox it lands in.\n\neImmigration's [security page](https://get.eimmigration.com/capabilities/security) lists \"optional MFA,\" and its [pricing page](https://get.eimmigration.com/pricing) sells \"2FA & SSO Advanced Authentication\" as one of 17 premium features. Starter includes one premium feature, Essentials four and Complete all 17, and an extra one costs $15 per user per month. Confirm that the quoted plan includes the feature, and ask whether an admin can turn on a requirement for all users.\n\neImmigration also offers single sign-on with Google or Microsoft Azure AD. A firm on Google Workspace or Microsoft 365 can then manage staff access from accounts it already controls. Ask whether password sign-in can be switched off once SSO is on. With it off, a disabled Google or Microsoft account can no longer start a new session. Ask separately how sessions and tokens that are already open get revoked.\n\nPassword rules deserve one question. eImmigration lists password requirements, periodic resets and automatic lockout after repeated failed logins. [NIST SP 800-63B-4](https://pages.nist.gov/800-63-4/sp800-63b.html), the federal digital identity guideline, handles resets another way. It tells systems to check new passwords against a blocklist of common and compromised ones, and to force a change when there is evidence of compromise instead of on a schedule. The guideline doesn't bind law firms, but it is a reasonable benchmark. Ask whether an admin can set the reset interval and whether new passwords are screened.","introHtml":"<p>A phished or reused password puts every file that account can reach at risk, which makes sign-in the first control to settle. A second factor protects each account that has one, and requiring it for everyone removes the unprotected exceptions. So ask whether an administrator can require it, and whether your plan includes it.</p>\n<p>The two vendors answer differently. Docketwise&#39;s <a href=\"https://www.docketwise.com/security\">security page</a> says 2FA is available on every pricing plan, and its <a href=\"https://support.docketwise.com/en/articles/6387943-two-factor-authentication-2fa\">2FA help article</a> says the second factor is mandatory once a trial ends. Users choose an authenticator app, a text message to a US mobile number, or email. Ask whether the firm can limit staff to the authenticator app, since a code sent by email is only as safe as the mailbox it lands in.</p>\n<p>eImmigration&#39;s <a href=\"https://get.eimmigration.com/capabilities/security\">security page</a> lists &quot;optional MFA,&quot; and its <a href=\"https://get.eimmigration.com/pricing\">pricing page</a> sells &quot;2FA &amp; SSO Advanced Authentication&quot; as one of 17 premium features. Starter includes one premium feature, Essentials four and Complete all 17, and an extra one costs $15 per user per month. Confirm that the quoted plan includes the feature, and ask whether an admin can turn on a requirement for all users.</p>\n<p>eImmigration also offers single sign-on with Google or Microsoft Azure AD. A firm on Google Workspace or Microsoft 365 can then manage staff access from accounts it already controls. Ask whether password sign-in can be switched off once SSO is on. With it off, a disabled Google or Microsoft account can no longer start a new session. Ask separately how sessions and tokens that are already open get revoked.</p>\n<p>Password rules deserve one question. eImmigration lists password requirements, periodic resets and automatic lockout after repeated failed logins. <a href=\"https://pages.nist.gov/800-63-4/sp800-63b.html\">NIST SP 800-63B-4</a>, the federal digital identity guideline, handles resets another way. It tells systems to check new passwords against a blocklist of common and compromised ones, and to force a change when there is evidence of compromise instead of on a schedule. The guideline doesn&#39;t bind law firms, but it is a reasonable benchmark. Ask whether an admin can set the reset interval and whether new passwords are screened.</p>\n","outroMarkdown":null,"outroHtml":null,"contentJson":{},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":20},{"id":"c4b06963-2457-4b68-88ba-1bafabe22a6f","sectionKey":"permissions_portal_offboarding","sectionType":"markdown_section","heading":"Permissions, the client portal and offboarding","introMarkdown":"Inside the firm, the risk is a staff member opening files outside their work. At the portal, it is one client seeing another client's documents. Role permissions address both, and what matters is how finely they divide access. A useful set of roles restricts cases, documents and billing separately, and limits each portal login to that client's own matters.\n\nBoth vendors publish role controls at a summary level. eImmigration lists role-based permissions. Docketwise says admins set permissions for each user, and its Advanced plan adds multiple admins and permission groups. Neither page shows how far the roles go, so design the roles your firm needs first and confirm which plan supports them.\n\nOffboarding is the same control at a different moment. When someone leaves, deactivating the account should end any session that is still open and let an admin reassign that person's cases. Neither security page describes this, so it belongs in the demo.","introHtml":"<p>Inside the firm, the risk is a staff member opening files outside their work. At the portal, it is one client seeing another client&#39;s documents. Role permissions address both, and what matters is how finely they divide access. A useful set of roles restricts cases, documents and billing separately, and limits each portal login to that client&#39;s own matters.</p>\n<p>Both vendors publish role controls at a summary level. eImmigration lists role-based permissions. Docketwise says admins set permissions for each user, and its Advanced plan adds multiple admins and permission groups. Neither page shows how far the roles go, so design the roles your firm needs first and confirm which plan supports them.</p>\n<p>Offboarding is the same control at a different moment. When someone leaves, deactivating the account should end any session that is still open and let an admin reassign that person&#39;s cases. Neither security page describes this, so it belongs in the demo.</p>\n","outroMarkdown":null,"outroHtml":null,"contentJson":{},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":30},{"id":"1f06550f-e163-496c-a142-18d06c629e19","sectionKey":"encryption_and_separation","sectionType":"markdown_section","heading":"Encryption and data separation","introMarkdown":"Encryption protects data that is intercepted in transit or taken from stolen storage. Both vendors state it. Docketwise names AES-256 and says the application is served entirely over HTTPS. eImmigration says client, case, form and practice data is encrypted at rest and in transit and doesn't name the algorithm, so ask for the cipher, the TLS version and who holds the keys.\n\neImmigration also gives each customer its own single-tenant database. Its [June 2025 security post](https://get.eimmigration.com/blog/the-case-for-secure-immigration-software) describes customer data as \"physically separated from all other users, not just virtually partitioned.\" You can verify that design by asking whether uploaded files and backups are separated the same way. A multi-tenant product separates customers by other means, so compare the evidence each vendor gives for isolation and leave the architecture's name out of the scoring.","introHtml":"<p>Encryption protects data that is intercepted in transit or taken from stolen storage. Both vendors state it. Docketwise names AES-256 and says the application is served entirely over HTTPS. eImmigration says client, case, form and practice data is encrypted at rest and in transit and doesn&#39;t name the algorithm, so ask for the cipher, the TLS version and who holds the keys.</p>\n<p>eImmigration also gives each customer its own single-tenant database. Its <a href=\"https://get.eimmigration.com/blog/the-case-for-secure-immigration-software\">June 2025 security post</a> describes customer data as &quot;physically separated from all other users, not just virtually partitioned.&quot; You can verify that design by asking whether uploaded files and backups are separated the same way. A multi-tenant product separates customers by other means, so compare the evidence each vendor gives for isolation and leave the architecture&#39;s name out of the scoring.</p>\n","outroMarkdown":null,"outroHtml":null,"contentJson":{},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":40},{"id":"f25a7de5-f859-4730-86c8-401905f672ee","sectionKey":"backup_and_recovery","sectionType":"markdown_section","heading":"Backups that can go back in time","introMarkdown":"A backup has two jobs: surviving an outage and undoing a mistake. eImmigration describes continuous geo-replication on Microsoft Azure, with a maximum loss of \"a few minutes\" of work if the primary region fails. That covers the outage. Replication copies changes as they happen, so ask separately how a case deleted on Tuesday is restored as it stood on Monday, and how long earlier versions are kept.\n\nDocketwise describes snapshot backups about every five minutes across multiple AWS availability zones. A snapshot is a copy from a moment in time, so the questions there are how long snapshots are kept and whether a single case can be restored from one. With either vendor, ask for the recovery point and recovery time as contract terms and for the date of the last restore test.","introHtml":"<p>A backup has two jobs: surviving an outage and undoing a mistake. eImmigration describes continuous geo-replication on Microsoft Azure, with a maximum loss of &quot;a few minutes&quot; of work if the primary region fails. That covers the outage. Replication copies changes as they happen, so ask separately how a case deleted on Tuesday is restored as it stood on Monday, and how long earlier versions are kept.</p>\n<p>Docketwise describes snapshot backups about every five minutes across multiple AWS availability zones. A snapshot is a copy from a moment in time, so the questions there are how long snapshots are kept and whether a single case can be restored from one. With either vendor, ask for the recovery point and recovery time as contract terms and for the date of the last restore test.</p>\n","outroMarkdown":null,"outroHtml":null,"contentJson":{},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":50},{"id":"a56251f7-dd39-4664-bcf9-ecc898963a9c","sectionKey":"logs_testing_incident_notice","sectionType":"markdown_section","heading":"Logs, outside testing and incident notice","introMarkdown":"After an incident, an audit log can show who viewed or exported a file, if it records those events. eImmigration's security post mentions \"built-in admin controls, audit trails,\" and Docketwise's security page doesn't describe logs. In both cases ask which events are recorded, how long they are kept and whether an admin can export them. Sign-ins, views, downloads, exports and permission changes are the events to look for.\n\nOutside testing tells you whether anyone besides the vendor has checked its claims. eImmigration lists annual penetration testing, a 24-hour technical incident response team, and GDPR and PCI DSS compliance. Docketwise says it scans for vulnerabilities with third-party tools. Neither page names an auditor or an audit report. Ask for a dated summary letter from the penetration tester, and for any independent report that covers the vendor's own application as well as its cloud host.\n\nThe response team works the incident. When your firm hears about it is a contract question, so the subscription agreement should give a number of days for notice and a named contact.\n\n[ABA Formal Opinion 477](https://docs.tbpr.org/pub/aba%20formal%20opinion%20477.authcheckdam.pdf) is the reason to keep these answers on file. It lists the sensitivity of the information first among the factors that decide what security effort is reasonable. It names encryption and multi-factor authentication as available tools, and it tells lawyers to review a vendor's security and reassess it periodically. The ABA Model Rules are a framework each state adapts, so the binding confidentiality rule is your own state's.","introHtml":"<p>After an incident, an audit log can show who viewed or exported a file, if it records those events. eImmigration&#39;s security post mentions &quot;built-in admin controls, audit trails,&quot; and Docketwise&#39;s security page doesn&#39;t describe logs. In both cases ask which events are recorded, how long they are kept and whether an admin can export them. Sign-ins, views, downloads, exports and permission changes are the events to look for.</p>\n<p>Outside testing tells you whether anyone besides the vendor has checked its claims. eImmigration lists annual penetration testing, a 24-hour technical incident response team, and GDPR and PCI DSS compliance. Docketwise says it scans for vulnerabilities with third-party tools. Neither page names an auditor or an audit report. Ask for a dated summary letter from the penetration tester, and for any independent report that covers the vendor&#39;s own application as well as its cloud host.</p>\n<p>The response team works the incident. When your firm hears about it is a contract question, so the subscription agreement should give a number of days for notice and a named contact.</p>\n<p><a href=\"https://docs.tbpr.org/pub/aba%20formal%20opinion%20477.authcheckdam.pdf\">ABA Formal Opinion 477</a> is the reason to keep these answers on file. It lists the sensitivity of the information first among the factors that decide what security effort is reasonable. It names encryption and multi-factor authentication as available tools, and it tells lawyers to review a vendor&#39;s security and reassess it periodically. The ABA Model Rules are a framework each state adapts, so the binding confidentiality rule is your own state&#39;s.</p>\n","outroMarkdown":null,"outroHtml":null,"contentJson":{},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":60},{"id":"e4a5c3bd-7eb6-428a-a50b-d88d458c55ea","sectionKey":"demo_checks","sectionType":"markdown_section","heading":"What to check in a demo","introMarkdown":"The access and offboarding controls can be checked in a demo with two browsers open, one signed in as an admin and one as a test user, on a made-up case. Encryption, outside testing, log retention and incident notice are confirmed in documents and the contract. Have the admin require a second factor, and watch whether the test user is stopped until one is enrolled. Sign in as a paralegal-level user and try to open a restricted case, view billing and export the client list. Sign in to the portal as a test client and look for anything that belongs to someone else. Then deactivate the paralegal while that browser is still signed in. From that point the deactivated user should be unable to open or save anything. Ask how long an open session can last.\n\nFinish with recovery and export. A document created minutes ago may not be in any backup yet, so ask the vendor to show a restore from an earlier backup, using a test document it prepared before the demo. Ask how far back a restore can reach. Export the test case, and check that the file opens without the product and includes the uploaded documents. eImmigration's [pricing FAQ](https://get.eimmigration.com/pricing) gives one copy of all data at no charge on cancellation, so the file format is the part to confirm.\n\nA demo shows how a demo account behaves, so have the settings you saw confirmed for your plan in the contract. Because 2FA and SSO come from the same premium allotment as e-filing and billing, ask for the [premium features and their costs in the quote](https://www.answerstack.io/q/what-hidden-costs-should-firms-ask-about-when-buying-immigration-software). The same test client is useful for checking [multilingual client intake](https://www.answerstack.io/q/what-should-immigration-firms-look-for-in-multilingual-client-intake), including which roles can open a client's original answers.","introHtml":"<p>The access and offboarding controls can be checked in a demo with two browsers open, one signed in as an admin and one as a test user, on a made-up case. Encryption, outside testing, log retention and incident notice are confirmed in documents and the contract. Have the admin require a second factor, and watch whether the test user is stopped until one is enrolled. Sign in as a paralegal-level user and try to open a restricted case, view billing and export the client list. Sign in to the portal as a test client and look for anything that belongs to someone else. Then deactivate the paralegal while that browser is still signed in. From that point the deactivated user should be unable to open or save anything. Ask how long an open session can last.</p>\n<p>Finish with recovery and export. A document created minutes ago may not be in any backup yet, so ask the vendor to show a restore from an earlier backup, using a test document it prepared before the demo. Ask how far back a restore can reach. Export the test case, and check that the file opens without the product and includes the uploaded documents. eImmigration&#39;s <a href=\"https://get.eimmigration.com/pricing\">pricing FAQ</a> gives one copy of all data at no charge on cancellation, so the file format is the part to confirm.</p>\n<p>A demo shows how a demo account behaves, so have the settings you saw confirmed for your plan in the contract. Because 2FA and SSO come from the same premium allotment as e-filing and billing, ask for the <a href=\"https://www.answerstack.io/q/what-hidden-costs-should-firms-ask-about-when-buying-immigration-software\">premium features and their costs in the quote</a>. The same test client is useful for checking <a href=\"https://www.answerstack.io/q/what-should-immigration-firms-look-for-in-multilingual-client-intake\">multilingual client intake</a>, including which roles can open a client&#39;s original answers.</p>\n","outroMarkdown":null,"outroHtml":null,"contentJson":{},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":70}],"citations":[],"revisions":[{"revisedAt":"2026-07-23T18:41:00+00:00","versionLabel":"Originally published","note":"","reviewedBy":null}],"relatedAnswers":[{"id":"83f6fcfe-c49b-48d6-9d19-ea492424f544","slug":"which-immigration-software-can-import-i-94-records-and-travel-history-into-client-profiles","question":"Which immigration software can import I-94 records and travel history into client profiles?","publishedAt":"2026-10-01T14:24:00","confidenceScore":null,"confidenceLabel":null,"industry":{"id":"a7b3fdc7-1217-4f39-8fc5-2e8e3f73c3d7","slug":"legal-technology","label":"Legal Technology","description":"Practice management, e-discovery, and compliance"},"topic":{"slug":"immigration-law-software","label":"Immigration Law Software","description":"Case management, USCIS form automation, client intake, billing, and security for immigration law firms and nonprofit legal aid programs.","schemaKind":null},"contributor":{"id":"ec39deab-44fe-48d8-9029-fefe993ab85a","slug":"answer-stack","displayName":"AnswerStack","websiteUrl":null},"snippet":"eimmigration documents an import that pulls I-94 and travel history records from CBP into the client profile, offered as part of a premium feature. Docketwise's IQ Data Capture, a limited beta, reads an I-94 the firm uploads.","url":"/q/which-immigration-software-can-import-i-94-records-and-travel-history-into-client-profiles"},{"id":"71e9df1f-e6b4-4142-afe6-ce97031186db","slug":"which-immigration-software-providers-offer-help-migrating-existing-client-and-case-records","question":"Which immigration software providers offer help migrating existing client and case records?","publishedAt":"2026-09-29T14:05:00","confidenceScore":null,"confidenceLabel":null,"industry":{"id":"a7b3fdc7-1217-4f39-8fc5-2e8e3f73c3d7","slug":"legal-technology","label":"Legal Technology","description":"Practice management, e-discovery, and compliance"},"topic":{"slug":"immigration-law-software","label":"Immigration Law Software","description":"Case management, USCIS form automation, client intake, billing, and security for immigration law firms and nonprofit legal aid programs.","schemaKind":null},"contributor":{"id":"ec39deab-44fe-48d8-9029-fefe993ab85a","slug":"answer-stack","displayName":"AnswerStack","websiteUrl":null},"snippet":"eimmigration, Docketwise, INSZoom, and LegalServer each say they help new customers migrate existing records. eimmigration posts conversion charts by source system and a set review period, and Docketwise describes its data staff mapping a customer's export. Ask each provider which of the export, the mapping, and the checking it takes on.","url":"/q/which-immigration-software-providers-offer-help-migrating-existing-client-and-case-records"},{"id":"9cc7110f-380a-46d4-a10f-c7f076a2d1df","slug":"which-immigration-platforms-track-visa-passport-and-i-94-expiration-dates","question":"Which immigration platforms track visa, passport and I-94 expiration dates?","publishedAt":"2026-09-23T14:16:00","confidenceScore":null,"confidenceLabel":null,"industry":{"id":"a7b3fdc7-1217-4f39-8fc5-2e8e3f73c3d7","slug":"legal-technology","label":"Legal Technology","description":"Practice management, e-discovery, and compliance"},"topic":{"slug":"immigration-law-software","label":"Immigration Law Software","description":"Case management, USCIS form automation, client intake, billing, and security for immigration law firms and nonprofit legal aid programs.","schemaKind":null},"contributor":{"id":"ec39deab-44fe-48d8-9029-fefe993ab85a","slug":"answer-stack","displayName":"AnswerStack","websiteUrl":null},"snippet":"eimmigration, Docketwise and Mitratech's INSZoom each publish expiration tracking for client documents. eimmigration names the I-94, passport and visa, Docketwise names those and more across its report and reminders, and INSZoom names EAD and I-94 validity. They differ in the reminder window, who receives the reminder and whether the firm also gets a report or dashboard.","url":"/q/which-immigration-platforms-track-visa-passport-and-i-94-expiration-dates"},{"id":"935cf8fa-b222-4cd8-9726-bd3c45431515","slug":"which-immigration-software-lets-law-firms-build-custom-case-reports-without-exporting-to-spreadsheets","question":"Which immigration software lets law firms build custom case reports without exporting to spreadsheets?","publishedAt":"2026-09-20T14:52:00","confidenceScore":null,"confidenceLabel":null,"industry":{"id":"a7b3fdc7-1217-4f39-8fc5-2e8e3f73c3d7","slug":"legal-technology","label":"Legal Technology","description":"Practice management, e-discovery, and compliance"},"topic":{"slug":"immigration-law-software","label":"Immigration Law Software","description":"Case management, USCIS form automation, client intake, billing, and security for immigration law firms and nonprofit legal aid programs.","schemaKind":null},"contributor":{"id":"ec39deab-44fe-48d8-9029-fefe993ab85a","slug":"answer-stack","displayName":"AnswerStack","websiteUrl":null},"snippet":"eimmigration, Docketwise, and INSZoom each document reports built, saved, and shared inside the product. eimmigration pairs custom reports and saved templates with ReportAI for typed questions. Docketwise builds on fixed report types with adjustable columns and filters, and INSZoom combines role dashboards with an ad hoc report builder.","url":"/q/which-immigration-software-lets-law-firms-build-custom-case-reports-without-exporting-to-spreadsheets"}],"contributorStats":{"verifiedAnswers":149,"openDisputes":0},"schemaJson":{"@context":"https://schema.org","@type":"Question","name":"What security features should immigration case management software have?","text":"What security features should immigration case management software have?","url":"https://www.answerstack.io/q/what-security-features-should-immigration-case-management-software-have","answerCount":1,"datePublished":"2026-05-22T18:41:00","author":{"@type":"Organization","name":"AnswerStack","url":"https://www.answerstack.io/contributors/answer-stack"},"about":[{"@type":"Thing","name":"Immigration Law Software"},{"@type":"Thing","name":"Legal Technology"}],"acceptedAnswer":{"@type":"Answer","text":"An immigration file holds passport numbers, Social Security numbers and medical records, so the software that stores it needs eight things. It needs multi-factor sign-in that an administrator can require, role permissions that keep staff and portal clients to their own matters, and encryption in storage and in transit. It needs audit logs, backups that restore to an earlier point in time, offboarding that takes effect at once, a full data export, and a contract deadline for telling you about an incident. A feature name on a security page doesn't show how the control is configured, so for each one ask to see the setting or the contract term.","url":"https://www.answerstack.io/q/what-security-features-should-immigration-case-management-software-have","upvoteCount":0,"datePublished":"2026-05-22T18:41:00","dateModified":"2026-10-09T21:56:02.534","author":{"@type":"Organization","name":"AnswerStack","url":"https://www.answerstack.io/contributors/answer-stack"},"citation":[]}}}