Security & compliance
Lexcraw is built for the confidentiality that legal work demands. Security isn't a setting you configure — it's how the product is designed.
Your own private environment
Every client is provisioned in a dedicated, single-tenant cloud account. Your documents, knowledge base, and database live only in your environment — never co-mingled with another client's. From a compliance standpoint this gives you a clean isolation boundary: there is no shared, multi-tenant datastore to reason about in a vendor security review.
Encrypted everywhere
All data is encrypted in transit with modern TLS and at rest with AES-256. The storage that holds your documents blocks public access by default, so nothing is ever exposed without authenticated access.
Access on a need-to-know basis
There is no public sign-up. Accounts exist only for the people your administrators invite, protected by strong password policies and short-lived, revocable sessions.
Your data stays yours
We use your content only to answer your questions and produce your documents. Your data is never used to train models, and it remains yours to export or remove.
Built on trusted infrastructure
Lexcraw runs entirely on Amazon Web Services, whose platform maintains SOC 2, ISO 27001, and FedRAMP certifications. By default your environment and data are hosted in the US (N. Virginia) region, and we can deploy in other regions where data residency or other requirements call for it.
Compliance & confidentiality
Single-tenant isolation makes it straightforward to support your confidentiality and privilege obligations. A Data Processing Agreement is available on request, and we're glad to walk your team through a security review.