open-legal-products gives Mike grown-up account controls

Mike is adding the security and privacy safeguards that make a legal AI workspace easier to trust with real matters.

securitycompliance

The maintainers have paired stronger sign-in protection with practical controls over what users can retrieve or remove from their accounts.

Authenticator-app MFA can protect sensitive actions and optionally be required at login.
Data exports cover chats, structured reviews, and account information, without exposing stored API keys.
Bulk deletion lets users remove chats, projects, and structured reviews, with project removal also clearing related material.
Sign-out now applies to the current device or session, rather than ending access everywhere.
Export and deletion requests require authentication, are rate limited, and error messages are scrubbed of provider-key-like details.

The work also expands profile controls and includes the supporting database changes, making careful recovery-flow testing important before deployment.

So what Firms and legal teams weighing Mike should care because account recovery, data portability, and defensible deletion are core operational requirements, not cosmetic extras.

View this fork on GitHub →

Spotted something wrong? Or know the PR text has fresher detail than the writeup above?

Commits in this thread

4 commits from open-legal-products/mike, oldest first. Source extracted verbatim from the harvested git log.

SHA	Subject	Author	Date
`3a109432`	feat: implement multi-factor authentication (MFA) setup and verification flow	willchen96	2026-06-10	↗ GitHub
commit body - Add SecurityPage component for managing MFA settings, including enrollment and verification. - Create MfaLoginGate to handle MFA verification state during login. - Develop MfaVerificationPopup for user input of verification codes. - Implement VerifyMfaPage for the MFA verification process after login. - Introduce reusable VerificationCodeInput component for entering verification codes. - Integrate Supabase MFA API for managing factors and verification. - Add loading states and error handling for a better user experience.
`444d1d38`	feat: enhance user profile management and MFA login flow	willchen96	2026-06-10	↗ GitHub
commit body - Refactor user profile loading and updating logic to improve state management and reduce unnecessary checks. - Update MFA login gate to streamline verification checks and improve user experience. - Ensure consistent handling of user ID across profile context and components. - Improve error handling and loading states in user-related API calls.
`a211b92f`	Merge pull request #172 from willchen96/feat/mfa-data-deletion-and-exports	cosimoastrada	2026-06-10	↗ GitHub
feat: implement multi-factor authentication (MFA) setup and verification flow and data deletion and export
`8a2dc051`	Merge pull request #178 from willchen96/feat/mfa-data-deletion-and-exports	cosimoastrada	2026-06-11	↗ GitHub
Refactor ProjectPageParts and ProjectPageHeader components

Capture this thread into my fork

Download a single Markdown prompt that tells Claude how to port every commit above into your working tree — adapting paths and structure to match your repo. Run it via claude -p < capture-thread-703.md from inside the repo you want the changes in.

⬇ Download capture-thread-703.md