End-to-end encryption, a zero-knowledge architecture and automatic deletion of your documents. Every layer is designed to keep your information protected at all times.
256-bit
AES encryption at rest
TLS 1.3
Transit protocol
0
Human access to your contracts
0 h
Original file retention
— Encryption —
Your contracts travel and are stored protected by the highest industry standards.
All traffic between your device and LexyAi is protected with TLS 1.3, HTTPS enforced via HSTS and SHA-256 certificates.
All stored data is encrypted at rest with AES-256, one of the strongest encryption standards available.
Documents are processed in memory during analysis and are never indexed or stored in plain text permanently.
— Infrastructure —
Multiple independent layers of protection, so no single weak point can expose your information.
Row-Level Security at the database level: every record is tied to your account and inaccessible to any other user.
We verify the real type of every file by its magic bytes —not its extension— and sanitize the filename before processing it.
Protection against abuse and brute force with per-user and per-IP request limits on every sensitive endpoint.
Every piece of data going in and out is validated against strict schemas to neutralize injections and malicious input.
Every session is validated on the server and access to your contracts requires secure authentication: only you can get into your account.
Web application firewall and automatic mitigation of denial-of-service (DDoS) attacks at the edge.
— Protection —
Additional measures that protect your account, your payments and every analysis you run.
Payments are processed securely through Stripe. We never store or have access to your card details.
Your contract's text is processed in isolation and every analysis is validated before it's shown to you, preventing content manipulation.
We continuously monitor the platform to detect and respond to any suspicious activity that could affect your information.
Each part of the service accesses only what is strictly necessary to function, protecting your information.
— Artificial Intelligence —
We process your contract with cutting-edge AI in an isolated, ephemeral way, so your data is never used outside your analysis.
Your contract's content is used solely to generate your analysis and never for any other purpose.
The AI provider we use does not employ your content to train, fine-tune or improve its models.
Each analysis is completely independent. There is no shared context between different users or between sessions.
What happens to your contract?
You upload your contract
It travels encrypted
AI analyses it
You get your report
Your data is deleted
— Retention —
Every piece of data has a purpose and an expiry. When it is no longer needed, it is deleted.
Your contract travels encrypted with TLS 1.3. The filename is automatically sanitized before any processing.
Text is extracted directly into RAM. The original file is never written to permanent disk during the process.
The text is sent to the AI model in an ephemeral, isolated session. It is neither reused nor retained by the provider.
Only the structured report is stored encrypted. The extracted text of the contract is not stored permanently.
The original file is deleted from servers immediately upon completing the analysis, in less than 5 minutes.
If extracted text persists temporarily, it is automatically purged within a maximum of 2 hours.
You can delete any analysis at any time. Account deletion erases all your data in cascade, irreversibly.
— Privacy —
Designed so you always have full control over your contracts and your information.
Only you can access your analyses. Neither other users nor the LexyAi team can see your contract history.
Your information is not shared with third parties or used for advertising purposes. Your privacy is not the product.
Delete any analysis or your entire account at any time from settings. Deletion is executed immediately and irreversibly.
Generated reports are private by default. They are only shared if you explicitly choose to do so.
— Commitments —
Six privacy commitments that apply to every analysis you run on LexyAi, no exceptions.
$ lexyai --privacy-audit --verbose
— Frequently asked questions —
Start analyzing your contracts knowing your data is protected by the same level of security used by the most demanding companies.