Securing what matters the most to your business

We use multiple layers of data protection and comply with global privacy regulations to make sure your
confidential company data and other information is kept private and secure.

Learn more

We are committed to keeping your data secure

At Lexacon.ai we deeply share your desire to protect your confidential information and personal data.

We have worked hard to incorporate multiple layers of data security across our product stack and we comply with leading privacy regulations.

Data protection

Data encryption (at rest & in transit)

Privacy policies (GDPR)

Data protection officer

Permanent deletion of data on request

Private LLM instance

Isolated (closed, secure) instance

No data sharing

Compliant privacy settings

Threat detection

Intrusion detection systems

Web-app Firewall

Anti DDoS protection

Incident response plan

Access control

Strict role-based access

User access data logging

User access data auditing

Physical security

Disk encryption

Closed development environment

Highly secure hosting

Compliance

GDPR Compliant (UK based)

ISO 27001 (waiting approval)

Regular audits 

How we manage security and data privacy at Lexacon

Data protection and privacy

Encryption-at-Rest

All user data is encrypted when stored on Lexacon.AI  servers using industry-standard AES-256 encryption, ensuring that data remains protected even in the event of unauthorized access to storage systems.

Encryption-in-Transit

Lexacon.AI  uses TLS (Transport Layer Security) 1.2 or higher to encrypt all data transmitted between the client’s device and our servers, preventing eavesdropping or interception by malicious actors.

Privacy Policy

Our privacy policy outlines how user data is collected, used, stored, and protected. Users can access this policy at any time via our website (https://www.lexacon.ai/legal).

Cookies

Our software uses cookies to enhance user experience and track necessary metrics. Users are informed about cookie usage through a cookie banner and can manage their preferences. (https://www.lexacon.ai/legal ).

Data Privacy Officer (DPO)

We have appointed a DPO to oversee compliance with data protection laws and handle any user inquiries regarding their data privacy rights. Please email at legal@lexacon.ai.

Access control and user management

Role-Based Access Control (RBAC)

RBAC ensures that users only have access to the data and functionalities necessary for their role. Permissions are predefined based on user roles (e.g., Admin, User, Viewer), limiting the risk of unauthorized actions or data exposure.

Password Security

We enforce strong password policies, including minimum length, complexity requirements. Multi-factor authentication (MFA) is enforced encouraged on key services.

Data Access

Access to user data is strictly controlled and limited to authorized personnel. All access is logged and monitored for compliance.

Infrastructure and physical security

Secure hosting

Lexacon.AI's infrastructure is hosted on secure servers, using cutting-edge infrastructure for modern application hosting. Our hosting provides enables automatic scaling, globally distributed edge networks, and built-in security features, ensuring robust protection against threats.

Separate Production and Development Environments

Production environments are completely isolated from development and staging environments to prevent unauthorized access and data leakage during development or testing.

Disk Encryption

All disks used in our servers, including backups, are encrypted using AES-256 to ensure the safety of stored data.

Threat detection and incident response

Threat Detection

Our system is continuously monitored for threats using advanced tools, including Intrusion Detection Systems (IDS).

Web Application Firewall (WAF)

We implement a WAF to protect against common web vulnerabilities such as SQL injection, cross-site scripting (XSS), and other threats.

Anti-DDoS Protections

Our system is protected against Distributed Denial of Service (DDoS) attacks through the use of advanced traffic filtering, rate limiting, and third-party DDoS protection services.

Logging

Comprehensive logging mechanisms track user activity, administrative actions, and system events. Logs are reviewed regularly for unusual patterns and retained according to our data retention policy.

Incident Response Plan

A detailed incident response plan is in place to manage and mitigate the impact of security incidents.

Compliance and transparency

Regular Security Audits

Third-party security audits are conducted to identify and remediate vulnerabilities.

Backup and Recovery

Regular backups are taken and stored securely to ensure quick recovery in case of data loss or system failure.

Frequently asked questions

What is Lexacon?

Lexacon is an AI powered software that automatically analyzes construction contracts and flags points of concern, recommends potential changes, and gives you a marked up review of the contract so you can truly understand the implications and propose changes.

Can anyone use Lexacon?

Lexacon AI is currently designed to review and analyze only contracts for businesses that work in the construction industry. The AI model is built and trained for construction.

Anyone dealing with construction contracts - lawyers, sales teams, administration, business owners - can review contracts with Lexacon.

How much does Lexacon cost?

Lexacon AI costs a fraction of the cost of reviewing a contract manually. See pricing here.

Is it easy to onboard and integrate Lexacon?

Lexacon AI is a web-based software-as-a-service (SaaS) and does not require any integration or setup. Simply sign up and start using Lexacon for reviewing your contracts.

How much does Lexacon AI cost?

You can start using Lexacon AI starting from £499 for 10 contracts so £49 / contract.

View all our pricing plans here.

Does Lexacon require a contract commitment?

Absolutely not. Lexacon AI is a monthly subscription software. You can cancel your subscription anytime without any fees or obligations.

Can I easily change my subscription plan later?

Yes. You can easily change your plan anytime by simply going to your account settings and choosing the plan you want to upgrade or downgrade to. Your plan change will be effective immediately and will start a new billing cycle.

Do you offer training and onboarding services?

Yes, we are happy to help you get started with using Lexacon AI, onboard your team and and share best practices. Email us at contact@lexacon.ai to setup your onboarding call.

Which data security standards do you comply with?

Lexacon AI is fully compliant with global data security standards - GDPR, ISO 27001 and others.

Do you keep the contracts confidential?

We will keep your data strictly confidential and only use for the purpose which has been authorized by you explicitly.

Is my data kept private?

We operate using a private instance - meaning that your data does not go to our processing partners nor is it retained by them.

Where is Lexacon AI based?

We are fully registered and incorporated in The United Kingdom.

More questions?

Contact us anytime at contact@lexacon.ai and we will be happy to answer your questions.

Analyze your first contract
with Lexacon AI