Organization Security Settings

Organization security settings allow Organization Admins to configure and enforce security controls across all projects in their Everlaw organization. From this page, you can, for example, standardize how users authenticate, manage access to machine translation, and control whether project and database admins can export user information, along with other organization-wide security options, helping you align Everlaw usage with your organization’s security and compliance requirements.

Requirements

You must be an Organization Admin to view and edit organization security settings.

Impacts on project settings

Editing organization settings that are also configurable at the project level automatically overrides project-level security settings. This allows you to enforce more restrictive settings. Projects within an organization with overridden security settings cannot adjust those settings in Project Settings.

However, if Organization Admins do not override projects’ settings, Project Admins can configure those settings at the project-level.

If an Organization Admin overrides a security setting and then toggles the setting off, all projects’ settings are restored to their setting before the override.

Access and edit security settings

To access an organization's security settings, go to Organization home > Projects & Users > Security Settings.

The following categories are available:

  • Email notifications for new messages
  • Multifactor authentication
  • SAML single sign on
  • Associated domains
  • Machine translation
  • User information exports
  • OA access on new databases
  • Production sharing
  • Parent organization

Override projects' settings for email notifications

In the Email notifications for new messages section, switch on or off Override all projects' settings to hide message contents in email notifications to enable or disable the setting.

Override project' multifactor authentication settings

In the Multifactor authentication section, switch on or off Override all projects' settings to require multifactor authentication to enable the setting.

Set up single sign on with SAML

To set up single sign on with SAML, follow the instructions in our Organization Admin: Single Sign-On article.

Define associated domains

Users with the specified email address domain(s) can automatically be added to your organization. These domains are listed under Associated domains.

Contact Everlaw Support to associate domains with your organization.

Select a machine translation provider

In the Machine translation section, you choose to override the translation provider for all projects in an organization, or disable translation entirely for those projects. To enable the override, select Override all projects' settings. Then from the dropdown menu choose between:

  • Google Translate (default)
  • AWS Translate
  • No translation

For more information about machine translation, including links to Google and Amazon’s privacy policies, please see our article on Language tools.

Enable/disable user information exports

In the User information exports section you can:

  • Enable or disable the Allow Project and Database Admins to export user information such as name, email, permissions, and other information setting. If enabled, any Project or Database Admins can export the list of users, their emails, title, and permissions from Project or Database settings, respectively. This setting is turned off by default for all organizations.
  • [If in a sub-organization] Enable or disable the Allow parent organization admins to export user information in this organization setting. This setting is applicable only to sub-organizations, and when enabled, prevents Organization Admins from exporting a CSV report of the sub-organization’s user data.

Note

Organization Admins with Database Admin permissions can still manually enable or disable OA access from the Projects tab of the Organization home page, even when this setting is toggled off. When you create a new database while the setting is toggled off, you are warned that OA access is automatically disabled.

Enable/disable OA Access on new databases

In the OA access on new databases section, enable or disable the Grant organization admins default access to new databases setting. 

Choose production sharing specifications

You can choose how users can share productions in existing and future productions in your organization’s projects. To do this:

In the Production sharing section, under Allow users with Admin or Share permissions on Productions to share productions to outside sources via field, choose between:

  • Download, email, and shareable link
  • Download and email
  • Download only

Note

Changing this setting does not revoke access to unexpired productions shared prior to adjusting the setting.

Enable/disable parent organization reporting via sub-organizations

In the Parent organization section, you can enable or disable the Add parent organization reporting to this organization setting. When this setting is enabled, all Organization Admins in the organization become Parent Organization Admins. This allows them to link any organizations they administer to be sub-organizations, and grants them access to the new multi-organization report.