Skip to content

Security

The questions your partners will ask. Answered plainly.

Forward this page to your IT lead. It says what we do, in plain language, and we will answer your security questionnaire in writing.

Where is our data?

LexRing runs on Microsoft Azure in Germany (Germany West Central, Frankfurt).
Each firm has its own database.
Documents you file to SharePoint or OneDrive stay in your own Microsoft 365.
E-mails and attachments that LexRing processes are also stored in LexRing.
LexRing AI runs on dedicated servers at AWS in Frankfurt.

Who can get in?

Sign in with your firm’s Microsoft 365 accounts.
Two-factor sign-in with an authenticator app is available.
Roles, plus access rights per client and per case.
A case can be restricted to named people or teams.

How is data protected?

Connections to LexRing are encrypted with TLS.
Data at rest is encrypted by Microsoft Azure’s storage encryption.
AI keys your firm connects are stored encrypted.
Application errors are monitored.

What is recorded?

LexRing records who changed what and when.
The history shows on clients, cases, case items and invoices.
Sign-ins are logged.

How do you support AML duties?

PEP and sanctions screening of people and companies, with ongoing monitoring (MemberCheck).
Remote identity verification by e-mail invitation (Veriff).
Results stay with the client, with a PDF record.

What happens when we leave?

Your documents stay in your Microsoft 365 throughout.
After the contract ends we keep your data for 3 months.
On request you get one export in that time. Then the data is deleted.

Who else is involved

The main companies that process data for LexRing. Those marked optional are used only if your firm uses that feature.

Company	Purpose	Where
Microsoft	Hosting, storage, sign-in, Microsoft 365 connection	Germany; your own Microsoft 365 tenant
Amazon Web Services	Servers for LexRing AI	Frankfurt
OpenAI	AI, if your firm uses leading models	United States
Anthropic	AI, optional in the e-mail assistant	United States
MemberCheck	PEP and sanctions screening, optional	EU endpoint
Veriff	ID verification, optional	EU

Got a security questionnaire?

Send it to us and we answer it in writing, including anything this page does not cover.