Security and confidentiality

Last updated 14 November 2026. MediationPal is in beta and run by LawPal (Pvt) Ltd, Sri Lanka.

Closed by default

A case is visible only to the people named on it and to the centre's administrators. There is no firm-wide default.

Every open is logged

Each time someone opens a case, the time and the person are written to an access log that cannot be edited.

Records that cannot change

Mediator disclosures, signatures and the access log are append-only in the database. A signature carries a fingerprint (SHA-256) of the exact text signed.

Passwords and links

Passwords are stored as salted scrypt hashes. Sign-in sessions and party links are random tokens; only their hashes are stored.

No transcripts

MediationPal never records or transcribes a session. Notes record that a step happened, not what was said.