Organization and case isolation
Access rules are enforced in the database. Staff access is scoped to their funeral home, and family access is scoped to the cases where they are named members.
Security & privacy
Private planning, with clear boundaries.
Legacy & Grace limits access by funeral home, case, role and—when needed—individual arrangement section. This page describes protections already implemented in the product.
Roles and section permissions
Staff roles and family roles are stored separately. A relative can be limited to viewing or editing only selected sections of a case.
Private file access
Case photos and documents are kept in private storage. Authorized people receive temporary links when a file needs to be displayed or downloaded.
Public memorial separation
A public memorial reads from a narrow, approved set of fields. Planning notes, documents, tasks, drafts, approvals and private albums are not part of that public response.
Version-specific approvals
An approval points to the exact obituary or item version reviewed. When a new obituary version is created, older approval requests are superseded.
Insert-only activity history
Case activity is recorded as new events. Client access does not allow those events to be edited or deleted after they are written.
Named sign-in
Staff use authenticated accounts. Invited relatives request personal one-time email links rather than sharing a family password or open portal link.
Suspension enforcement
When a funeral home is suspended, database access checks block its staff and family access, and its published memorial becomes unavailable.
What can be public
A memorial is separate from the portal.
After final review, an authorized director or primary contact may publish a memorial. The public view can include the approved obituary, selected service details, an approved portrait, configured flower or donation links, and approved guestbook messages.
What stays private
Planning information does not become a memorial.
Family members, private photos, documents, tasks, notes, comments, drafts, approvals and other planning details are not included in the public memorial data.
Access rules have been tested.
Legacy & Grace has been tested across staff, primary-contact, contributor, viewer, signed-out and cross-funeral-home scenarios. That testing is not a certification, legal guarantee or substitute for your own review.