Lawyers: how to protect case files, client documents and digital evidence on your laptop
An advocate's laptop carries case files, client instructions, draft pleadings, and increasingly the evidence itself: WhatsApp exports, CCTV clips, call recordings, screenshots. Clients trust you with all of it, and Indian law protects professional communications. This guide shows how to keep those files encrypted on an ordinary laptop, and how to do it without disturbing the integrity of electronic evidence.
Why it matters
- Privilege: Section 132 of the Bharatiya Sakshya Adhiniyam, 2023 (which replaced Section 126 of the Evidence Act) protects professional communications between advocate and client. In 2025 the Supreme Court held that investigators cannot summon an advocate merely for advising or representing a client, and commentary on the ruling notes stronger protection for data on an advocate's digital devices.
- Professional conduct: the Bar Council of India Rules treat confidentiality as a core duty to the client.
- Evidence integrity: Section 63(4) BSA requires a certificate with the hash value of the electronic record (SHA-1, SHA-256, MD5 or another accepted algorithm). In 2026 the Supreme Court upheld this requirement in Pune Bar Association v. Union of India, describing a hash value as an electronic fingerprint.
- Everyday risks: a laptop left in a car or a court corridor, a junior's pen drive, a shared chamber PC, phishing.
Set it up
- Install Clavis Encrypt on your laptop (Windows 10 or 11, or Linux). No administrator rights or internet needed.
- Create a vault with a strong password, and keep the one-time recovery key in your office safe.
- Use a separate vault per matter or per client group (Clavis Pro), each with its own password.
- Encrypt case folders (Pro encrypts whole folders; Free encrypts files one at a time). File names are hidden too, so a folder listing doesn't reveal a client's name.
- Work on documents with Pro's Open: a pleading opens in Word, and your changes are saved back into the encrypted file when you close it.
Handling electronic evidence without breaking the hash
- Hash first. Before you encrypt, move or edit a piece of evidence, record its SHA-256 hash. In Windows PowerShell:
Get-FileHash "C:\Evidence\video.mp4" -Algorithm SHA256. Note the value in your file and on the certificate. - Encrypt the working copy. Clavis protects the file at rest; when you decrypt it, you get back the exact same bytes, so the SHA-256 hash is unchanged.
- Re-check before filing. Decrypt, run
Get-FileHashagain, and confirm it matches the recorded value. - Keep originals untouched. Leave the original phone, DVR or media sealed, as your court and expert require. Encryption is for your copies, not a substitute for proper custody.
- Clavis also detects tampering: every encrypted file is authenticated, and a changed or corrupted file is refused instead of opening silently.
What it does and doesn't do
| Need | Clavis Encrypt |
|---|---|
| Keep client files unreadable if the laptop is lost or stolen | Yes |
| Hide client names in file names | Yes (random names) |
| Send a file to a client or colleague securely | Yes: encrypt it for their Clavis ID (Premium); opening is free |
| Preserve evidence hash values | Yes: decryption restores identical bytes. Record the hash before encrypting. |
| Replace forensic imaging or chain-of-custody procedures | No |
| Practice management, diaries, billing | No (it protects the files those tools save) |
Questions
How should a lawyer store client case files on a laptop securely?
Keep them encrypted rather than in ordinary folders, use separate vaults per matter, and keep encrypted backups. A file-encryption app such as Clavis Encrypt seals each file with AES-256-GCM, hides file names, and works offline, so no client data goes to a cloud service.
Does encrypting electronic evidence change its hash value?
The encrypted file has a different hash, but decrypting it with Clavis Encrypt restores the exact original bytes, so the original SHA-256 hash matches again. Record the hash before encrypting, and re-check it after decrypting and before filing.
What hash value does a Section 63 BSA certificate need?
The Schedule certificate under Section 63(4) of the Bharatiya Sakshya Adhiniyam asks for the hash value of the electronic record and the algorithm used: SHA-1, SHA-256, MD5 or another legally acceptable standard. On Windows you can calculate SHA-256 with PowerShell's Get-FileHash.
Is attorney-client communication privileged in India?
Yes. Section 132 of the Bharatiya Sakshya Adhiniyam, 2023, which replaced Section 126 of the Evidence Act, protects professional communications between an advocate and client, with exceptions such as communications made in furtherance of a crime or fraud.
Can I share an encrypted file with a client without sending a password?
Yes. With Clavis Premium you encrypt the file for the client's Clavis ID (a public key); only they can open it, and opening shared files is free for them. No password is sent.
Sources
- SCC Online — Supreme Court upholds Section 63(4) BSA hash-value certificate (Pune Bar Association v. Union of India, 2026)
- AdvocateKhoj — Bharatiya Sakshya Adhiniyam, 2023 (text, including the Schedule certificate)
- K&S Partners — professional privilege under the Bharatiya Sakshya Adhiniyam (Section 132)
- Drishti Judiciary — Supreme Court on summoning advocates and Section 132 BSA (2025)
- Clavis Encrypt — security design (AES-256-GCM, Argon2id)
This guide explains general practice, not legal advice. Laws and rules change; check the current text or ask a lawyer for your situation.