Skip to content

Roll is in a limited private pilot with a small group of lawyers invited by MEGA ahead of the public launch. Request to join

Legal

Data processing & confidentiality

Draft — to be reviewed by the owner’s lawyer before public launch. Last updated: October 2026.

These terms govern MEGA’s processing of personal data on behalf of the subscribing law office (the “Office”) and supplement the terms of use.

1. Parties and roles

The Office is the controller and MEGA is the processor. MEGA processes data only on the Office’s documented instructions and solely to provide the service.

2. Professional secrecy

MEGA recognises that legal files are covered by professional secrecy. MEGA staff access case content and documents only where technically necessary and at the Office’s request, under written confidentiality obligations. The owner dashboard never shows the content of offices’ cases.

3. Security measures

  • Each office’s data separated in every query.
  • Role-based permissions; confidential cases visible only to people named by the partner.
  • An audit trail of every addition, change and deletion.
  • Files kept out of direct reach and opened via short-lived signed links.
  • Encrypted connections and backups.

4. Sub-processors

The hosting provider, the e-mail provider, and any WhatsApp/SMS provider if the Office enables that add-on. We will inform the Office of any material change. Hosting location and transfers outside Egypt will be settled on specialist advice and in line with Law No. 151 of 2020.

5. Incidents

MEGA notifies the Office without undue delay after becoming aware of an incident affecting its data, with the information available, and supports it in notifying within the legal deadlines.

6. Data subject requests

MEGA reasonably assists the Office in responding to access, rectification and deletion requests.

7. End of service

When the subscription ends, MEGA makes the data available for export and then deletes it within a reasonable period, unless the law requires retention.