How long AOMS keeps information, and what happens when something is deleted. "Office" means a law office's AOMS account.
While your account is active
| Information | Kept |
|---|---|
| Clients, cases, hearings, proceedings, invoices, payments, staff records | Until your office deletes them or closes the account |
| Deleted clients and cases | Hidden at once; kept with the office's history until the account is closed |
| Deleted documents | In the Recycle bin for 30 days (can be restored), then removed permanently |
| Original of a compressed document | 30 days after compression, then removed (the checked smaller copy stays) |
| Activity log and audit trail (who did what) | For the life of the account, so offices can investigate past actions |
| Sign-in records | 180 days |
| Email delivery records | 120 days |
| Client portal sign-in links / codes | Links expire after 7 days, codes after 10 minutes; used ones stop working at once |
| Payment receipts and subscription records | As long as needed for accounting and tax records [period to be confirmed by counsel] |
When an office closes its account
- The owner asks to delete the office (Account → Delete office).
- For 30 days nothing is removed, so a mistaken request can be cancelled by contacting us.
- After 30 days all office data — records, documents, users — is deleted permanently from the live system.
- Encrypted backup copies containing that data expire on their own: within 30 days on the server and within 90 days in off-site storage.
Payment records we must keep for accounting are kept separately, without the office's case or client data.
Backups and recovery
- A full encrypted backup of the database and documents is made every night. Backups can be read only with a key kept offline, not on the server.
- Recovery targets: at most 24 hours of data could be lost (RPO), and service restored within 4 hours of a major failure (RTO). Restores are tested.
- Backups are for disaster recovery of the whole service. They are not used to restore single records on request, except where we can do so safely and at our discretion.
Requests
To ask about or request deletion of information, write to support@aoms.pk. If the information belongs to an office (for example you are an advocate's client), we will pass the request to that office.