Safe, secure and sovereign.
Client files, privileged advice and every AI question stay in South Africa. For attorneys, privilege, POPIA and confidentiality depend on knowing exactly where the data lives.
Where the data is
One server in South Africa, with Touchnet. The AI model runs on it; no client text is sent to any overseas AI service. Law look-ups go to Laws.Africa, a South African service, and only the question's legal topic is sent, never client details.
Who can see what
Each firm is isolated at the database level, with row-level security that fails closed. Within a firm, roles decide what each person sees. Ethical walls remove a matter completely for a walled person: lists, search, documents and AI.
Sign-in
Password plus a code from the person's phone for every user, no exceptions. Sensitive actions ask for the code again. A lost phone is handled by the firm admin with a one-time code; the old password and code stop working at once.
Devices and sessions
Sessions and devices are listed and can be ended; a compromised device can be cut off; the firm can limit access to its office addresses.
Audit
Every view, change, download, email and AI request is recorded in a hash-chained log that shows if anyone tampers with it. The firm's auditor and compliance officer roles can read it, and it can be exported.
System email is sent from a South African mailbox. Invites carry a link only; the activation code travels separately. Attorney email is never hosted by Lexor: with Microsoft 365 connected, mail is read live and only what you file to a matter is stored.
Backups
Nightly encrypted backups, plus an off-site copy in South Africa. A backup is taken before every release, and restore is tested.
Uploads
Every uploaded file is checked for viruses and unsafe content and held until it passes. Client ID documents are kept apart from matter documents, watermarked on download, and every view is logged.
Leaving
A firm's complete data can be exported as an encrypted archive and the firm deleted, with the audit log retained as required.
Lexor runs on Touchnet's Zadara Sovereign AI Cloud.
No offshore dependency. And the cloud underneath is proven: Zadara is an NVIDIA AI Cloud Ready validated partner, alongside Red Hat, Rafay, Mirantis, Spectro Cloud and OpenNebula.
Touchnet brings over fifteen years of building Africa's digital infrastructure. Lexor brings the whole practice. Together: sovereign legal AI.
Clear roles under POPIA.
Legal-Ai is the operator; the firm is the responsible party. The beta agreement and privacy notice set out processing, retention, breach notification and the Information Officer.
Pilot firms read the beta agreement and privacy notice before client data goes in.
Questions about security? Ask us.
We'll walk your firm's IT or compliance officer through how Lexor handles privileged data.