Security and privacy

Client documents, treated like client documents.

LexForge handles legal documents, so security comes first. This is how we protect files, where processing happens and what stays under your firm's control.

UK document storage & OCREEA-only structure analysisNever used to train AI

Document controls

How LexForge handles your documents.

01

Data residency & retention

Customer document storage and optical character recognition (OCR) run in Microsoft Azure UK South. Structure and layout analysis runs through the Azure OpenAI EU Data Zone within the EEA.

Azure OpenAI receives relevant full-page images and extracted text for structure and layout analysis in the EU Data Zone. Requests use storage disabled (store=false), so normal Responses API conversation state is not retained. Customer material is not used to train generative models. Microsoft performs automated abuse monitoring. Material flagged by the abuse-monitoring system, or identified as part of a potentially abusive pattern of use, may be stored in a Microsoft-controlled abuse-monitoring store and reviewed by authorised Microsoft staff. Documents and OCR remain in UK South.

Uploaded scans are scheduled for deletion from active storage two hours after upload. Azure Storage lifecycle rules make overdue source and standard extracted-text cache blobs eligible for deletion once they are more than one day old. Microsoft controls the exact lifecycle processing time. Deleted blobs may remain recoverable to authorised administrators for up to seven days under Azure soft delete.

Each workspace chooses how long converted outputs are kept: seven days by default, up to 30 days. They are then deleted automatically.

02

Wording and training

LexForge does not use customer documents to train any AI model.

LexForge checks the finished document against text read from the source. This confirms that the draft matches that reading. It cannot prove that a poor scan was read correctly, so uncertain words are marked for human review.

Two conversion paths use AI differently. On Reconstruct, the standard path, Azure Document Intelligence OCR supplies every word and AI decides structure and layout only. On Restyle, an experimental path a workspace chooses deliberately, an AI model transcribes the words directly from full-page images, including handwriting, and a second focused AI call may propose a correction to an individual disputed span. A correction is kept only when it exactly matches the independent OCR reading. Restyle wording is therefore AI-transcribed and OCR-corroborated, not OCR-transcribed, and every Restyle draft is held for human review rather than released as accepted.

During house-style setup, AI may suggest labels for a firm's own Word styles using style names and formatting only, never document content. A suggestion takes effect only after a person confirms it.

03

Automatic scan cleanup

Source scans are placed on the short-retention path as soon as they arrive. The application schedules active-storage deletion, with Azure lifecycle processing and soft-delete recovery described above.

Customer document text is not written to application logs.

04

Retention your firm controls

Your workspace controls the output-retention window. Downloads can be removed automatically after seven to 30 days, while source scans follow the separate short-retention process.

Billing, email and support metadata may be handled by listed providers under their own data-processing terms.

Illustrative change report

What the wording check proves.

Every conversion records the wording check and marks uncertain words for human review. This fictional example shows the information your team sees.

Change reportExample document · 14 pages
Ready for review
Pages checked
14 / 14
Words compared
9,412
Words flagged for review
3
Wording check
Matched
Human review remains required for flagged words.

Data flow

The path of a document

01

Upload

The document enters the protected LexForge service.

UK
02

Read

Azure Document Intelligence performs OCR.

UK
03

Understand structure

Approved AI analyses structure and layout. On the experimental Restyle path it also transcribes the words, corroborated against the OCR reading.

EU Data Zone · EEA
04

Return and retain

Editable Word is returned. Your workspace controls output retention.

UK-hosted service

Due diligence

Sub-processors

LexForge uses a small number of sub-processors for hosting, document processing, billing, transactional email, browser error monitoring and product analytics. Customer document storage and OCR remain in Microsoft Azure UK South. Structure and layout analysis runs through the Azure OpenAI EU Data Zone within the EEA. Azure OpenAI receives relevant full-page images and extracted text. Requests use storage disabled (store=false); the abuse-monitoring exception is described above.

ProcessorPurposeRegion
Microsoft AzureHosting, storage, database, Document Intelligence OCR and document-processing servicesUK South for document storage, database and OCR
Azure OpenAI ServiceDocument structure and layout analysis using relevant full-page images and extracted text. On the experimental Restyle path it also transcribes document wording from those images, corroborated against the independent OCR reading. Requests use storage disabled (store=false); Microsoft abuse monitoring may store and review material flagged by the monitoring system or identified as part of a potentially abusive pattern of use, as described above.EU Data Zone within the EEA; no United States transfer for this AI processing path, so standard contractual clauses (SCCs) are not required for it
StripePayment processing and billingEU/UK
MailjetTransactional email deliveryEU
ClerkSign-in and user accounts (names, work emails)EU
SentryBrowser error monitoring for product pages; no document text, filenames, email addresses, job IDs or tenant IDsEU
PostHogCookieless product analytics for coarse page and feature usage; no document text, filenames, email addresses, job IDs or tenant IDsEU

Security questionnaires

Need help with a data protection impact assessment (DPIA) or security questionnaire?

Send yours over, or request our security pack, and we will respond with the documentation you need.

Prefer email? support@lexforge.app
Typical response within two working days.

Do not include document text here. We will arrange a secure transfer if a questionnaire or Data Protection Impact Assessment (DPIA) is needed.

We use these details only to respond.

Request received.

Thanks — we will be in touch, usually within two working days.

Security review

Questions about security?

Request pilot access →