Security & Data Governance

Security and privacy built for legal practice.

Confidentiality, fiduciary duty, and data protection are fundamental to legal practice. Lexuno combines role-aware authorization, document integrity controls, and supported audit records to protect your firm’s workspace.

Data GovernanceCompliance-readiness tools

Policy-Controlled AIHuman-in-the-loop review

Transport SecurityHTTPS protection

Document CustodyIntegrity verification & history

Core Defense In Depth

Security architecture designed for legal workflows.

From network transport and database isolation to user authentication and document custody, explore how Lexuno secures your practice.

Compliance-Readiness Tools & Data Governance

Designed for South African legal practice. Features built-in data handling tools, configurable retention controls, and data management utilities to support your firm's governance obligations.

Structured data handling tools to support privacy and protection policies
Legal practice confidentiality and boundary safeguards
Configurable document and matter retention schedules
Data export utilities for firm records
Data minimization across public and client endpoints

Policy-Controlled AI & Human Review

AI features operate under policy controls: configured tools require provider activation and human attorney review.

Policy-controlled operation for supported AI actions
Isolated execution pipelines with enterprise provider adapters
Human attorney review required for AI suggestions
AI features require eligible access and provider activation
Firm-level controls to toggle AI tools on or off

Role-Aware Access & Fail-Closed Boundaries

Access adapts to firm memberships and assigned roles with server-side permission checks on supported actions.

Firm-scoped database access controls
Fail-closed permission checks on supported workspace mutations
Boundary enforcement across search and index lookups
Server-side authorization on supported resource lookups
Hardened API routes with schema validation

Configured Document Controls & Integrity

Maintain organized document custody for legal files. Track file versions, integrity hashes, and access permissions in one structured workspace.

SHA-256 cryptographic checksums generated upon upload
Document revision tracking and version history
Granular document visibility rules (Firm Internal vs Client-Visible)
Secure multipart chunked uploads with presigned token verification
Audit records on file upload, revision, and download events

Role-Based Access Controls (RBAC)

Give each legal professional precisely the context and tools their role requires—from Firm Owners and Managing Partners to Candidate Attorneys and Billing Staff.

Predefined legal hierarchy: Owner, Partner, Associate, Paralegal, Billing Admin
Granular record-level permissions per matter and client
Role hierarchy and access controls for staff accounts
Controlled delegation and role assignments
Immediate session revocation on user suspension or role change

Client Portal Boundary Separation

Invited clients access a completely separate portal interface. Clients only see what their legal team has explicitly marked as client-visible.

Portal boundary: clients only access records explicitly shared by the firm
Authentication via secure OTP and time-limited magic links
Controlled invoice viewing and consultation booking without workspace access
Restricted document download permissions with recorded access events
Single-click client portal access revocation at any time

Supported Audit Records & Operational Tracking

Maintain an immutable audit trail for supported administrative actions, status transitions, and user management events.

Timestamped logs for privileged operations and configuration changes
Actor attribution across administrative mutations
Correlated audit evidence for compliance reviews
Exportable activity reports for authorized administrators
Tamper-evident command receipt storage

Secure Cloud Infrastructure & Transport

All data is protected in transit with modern TLS/HTTPS encryption and stored on resilient, enterprise-grade cloud database infrastructure.

Strict HTTPS and TLS transport encryption
Automated continuous database backups and disaster recovery
DDoS mitigation and web application firewall protection
Tenant database schema isolation
Zero-trust credential and secret handling

Compliance-Readiness Tools for South African Law Firms

Lexuno provides configurable tools designed to assist South African legal practices in managing their records, intake, and governance workflows.

Privacy & Data Safeguards

Technical and organizational measures to assist firms in safeguarding personal and privileged information.

Intake & Due Diligence Records

Structured digital intake questionnaires and verification records supporting due diligence workflows.

Operational Ledger Separation

Strict operational boundary separating firm operational billing from trust account accounting and client balances.

Governance & Record Management

Built-in tools for client data exports, consent tracking, and lawful data retention schedules.

Security & Governance FAQ

Frequently Asked Questions

Details on tenant isolation, cryptographic custody, audit records, and client access boundaries.

Where is our law firm’s data hosted?

Lexuno leverages modern cloud infrastructure with firm-scoped access controls, regular backups, and data protection safeguards.

Can Lexuno staff or AI systems view our privileged legal files?

Lexuno enforces role-aware data protection. Client files and internal work product are scoped to your firm. Access to workspace data requires valid firm credentials.

How does Lexuno prevent unauthorized client access across matters?

Clients are restricted to the isolated Client Portal and can only see specific files, invoices, or events explicitly published to them by authorized firm members.

What administrative audit tracking is available for compliance reviews?

Lexuno generates recorded audit log entries for supported sensitive operations, status transitions, and user management events, complete with timestamps and actor attribution.

What happens to our records if we cancel our subscription?

You can export supported client, matter, and billing records from your workspace in accordance with your configured retention policies.

What authentication options are available?

Lexuno supports secure email authentication, password resets, session management, and time-limited magic links for client portal intake.

Ready to secure your legal practice operations?

Experience structured matter management, cryptographic custody, and fine-grained access control with Lexuno.

Start free trial Contact security team