Trust Center
At Aderant, safeguarding customer information and maintaining trust are core responsibilities that guide how we operate and deliver our solutions to the legal and professional services market. Aderant remains steadfast in our commitment to delivering technology that law firms can depend on every day.
This Trust Center provides transparency into our information security, data protection, and compliance practices. Our security and privacy programs are built on industry-recognized best practices and frameworks and are continuously reviewed to protect the confidentiality, integrity, and availability of Client Data.
Product Questions? Visit: https://www.aderant.com/connect/
Subprocessors
Trust Center Updates
Node.js Security Vulnerabilities (October 2026)
On October 21, 2026, the Node.js Project disclosed ten vulnerabilities affecting the Node.js runtime: four rated High severity, three Medium, and three Low. The most significant of these, CVE-2026-111497 (commonly referred to as “HTTP2Shell”), is a flaw in the Brotli decompression library bundled with Node.js.
Aderant is aware of these vulnerabilities and is actively assessing our products, services, and internal systems to identify where Node.js is in use and determine whether any are affected. Where applicable, we are applying the security updates released by the Node.js Project. To date, we have found no evidence that these vulnerabilities have been exploited within Aderant’s environment.
We will continue to monitor the situation and will update this notice as our investigation progresses. If any action is required on your part, we will contact you directly.
PHP2Shell Status Update
On October 21, 2026, the PHP Project disclosed two critical vulnerabilities in the PHP runtime (also referred to as “PHP2Shell”) that could allow remote code execution. Fixes were released in PHP versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
Aderant has reviewed its products, services and internal systems to identify where PHP is in use. No vulnerable versions of PHP are running in Aderant’s products, services or internal systems, and we have found no evidence that these vulnerabilities have been exploited in Aderant’s environment.
We will continue to monitor the situation and update this notice as needed. If any action is required on your part, we will contact you directly.