Your lawyer uses Mandato. Here is what that means
If you have been invited to a portal to follow your matter, upload a document or view an invoice, you are in the right place. This page is written for you, not for your firm.
Sign in with the email address your firm sent the invitation to. If you cannot find the message, check your spam folder before asking for another.
What Mandato is, in two sentences.
Mandato is the software your firm runs its matters on: the case files, the deadlines, the documents and the billing. We are not your lawyers, we play no part in your case and we make no decisions about it. We are the tool they use to run it.
The portal is the part of that tool opened up to you. It exists so you can see how your matter is going without ringing and waiting for someone to be free, and so that sending a document means uploading it somewhere secure instead of emailing it or sending it over WhatsApp.
Your firm decides which parts of the portal to switch on. They may have the message thread open and invoices off, or the other way round. If something mentioned here is missing, that is their decision, and they are the ones to ask.
Who sees what.
This is the question actually being asked by someone who has just been told to upload their passport. The short answer: you see your matter, and nobody else sees it except the firm running it.
- The status of your matter and what is coming next.
- The documents your firm has shared with you, and the ones you still owe them.
- The message thread with your firm, if they have it switched on.
- Your invoices, if they have them switched on.
- No other client sees your file, or knows it exists.
- No other firm using Mandato can reach your data: the separation is enforced in the database itself.
- Inside the firm, a matter can be marked confidential and restricted to the lawyer carrying it.
- Our team only accesses your data when it is needed to resolve a support issue, with permission, and it is logged.
How to get in.
Look for the invitation from your firm
Access is created by the firm, not by you: there is no public sign-up. The invitation arrives by email, at the address you gave your lawyer. If you cannot find it, check spam or the promotions tab before asking for another.
Sign in with that same address
You sign in at app.mandato.es with the address the invitation went to. If you have signed in before and cannot remember the password, you can reset it from the sign-in screen itself.
Upload what they ask for through the portal
If your matter has documents outstanding, they appear as a list of what is missing. Uploading there is safer than sending by email or messaging app, and it also records that you handed it over, and when.
Ask in the thread, not by phone at eleven at night
If your firm has messages switched on, what you write stays attached to your file and is seen by whoever is carrying it — it does not get lost in a personal chat. They are notified when you write.
For anything to do with your matter — how it is going, what is missing, what a document means, when they charge — speak to your firm: they are the ones running it and the ones who can answer you. We have no access to the content of your case and cannot act on it. If what is broken is the access itself (the invitation never arrives, the password will not reset), tell your firm that too: they can resend the invitation and, if necessary, contact us.
Frequently asked questions
Is it safe to upload my passport or my deeds here?
Documents travel encrypted and are stored encrypted on servers in the European Union — the database is in Ireland — with every access logged. In practical terms it is considerably safer than emailing them or sending them over WhatsApp, which is the real alternative. The details are on the security page and in the privacy notice.
Can Mandato read my file?
The content of your matter belongs to your firm, not to us: we act as processor on their behalf. Our team only accesses it where necessary to resolve a support issue, with the corresponding permission, and that access is written to a log that cannot be deleted.
Is what I upload used to train artificial intelligence?
No. Neither we nor the model providers we use train models on a firm's documents. They are processed to answer what the firm asked for, and for nothing else.
The invitation has not arrived. What do I do?
Write to your firm and ask them to resend it, checking the email address they hold for you. Only the firm can create access; we cannot register you or verify your identity, because we are not part of the relationship between you and your lawyer.
Do I have to pay anything to use the portal?
No. The portal is for the firm's clients and costs you nothing. The firm is the one that subscribes to Mandato, and their plan is their business.
Can I ask for my data to be deleted?
You can exercise your rights with your firm, who is the data controller. Bear in mind that the law obliges them to keep certain records for years — ten for Ley 10/2010 due-diligence documentation, six for billing records — so in many cases the right step is anonymisation rather than deletion. The privacy notice explains it.
