Document notifications
Explore how an unfamiliar document invitation can prompt a decision about trust.
A legal-document theme for authorized security awareness exercises. Helping people question unexpected correspondence before they follow a link or share information.
Explore our approach ↗Verify a messageTopLawyer is a simulation identity operated by Canary Trap. It provides the context for controlled document-sharing awareness exercises—not legal advice or a law firm’s services.
Explore how an unfamiliar document invitation can prompt a decision about trust.
Practice checking the destination and verifying a request through an established channel.
Authorized exercises may record visits and a simulated sign-in action, without collecting passwords.
An unfamiliar message deserves a moment of attention. Check with your organization’s security team or service desk using contact details you already know.
This is the public information site for TopLawyer, a security awareness simulation identity operated by Canary Trap. It describes our purpose and how to contact the operator.
No. This informational site has no account registration, login, payment, or document-upload service.
Contact your organization through an independently verified channel. You can also ask the operator at the address below. A familiar display name alone does not establish that a message is trustworthy.
No. Separately authorized exercises use dedicated campaign pages. Exercise interactions may be measured under the scope agreed with the commissioning organization.
This informational site does not ask for personal information and includes no advertising, analytics scripts, contact forms, or tracking pixels.
Cloudflare and the hosting infrastructure process technical request information, such as IP addresses and request metadata, to deliver and protect the site. The site itself sets no cookies; security services may apply their own protections.
If you email us, your address and message are used to respond and handle the enquiry. Keep your message limited to what is necessary. Ask the operator about retention or deletion of your correspondence.
Authorized campaigns may associate a recipient with a link visit or a non-sensitive interaction event. Real passwords, MFA codes, session cookies and authentication tokens must not be collected. Exercise retention is governed by the agreed engagement scope.
Privacy enquiries and requests: [email protected] · Updated November 1, 2026.
For message verification, privacy questions, or concerns about an exercise, contact Shawn Marriott at Canary Trap.