UK data residency · zero model training

Built for firms where confidentiality is not optional.

LexForge handles legal documents, and the security posture reflects that. This page describes how we protect your files, where they are processed and stored.

Data residency

  • Customer document processing runs in Azure UK regions.
  • Billing, email and support metadata may be handled by listed providers under their own data-processing terms.
  • Sub-processors are listed below.

Wording and training

  • LexForge does not use customer documents to train any AI model.
  • No AI-authored wording in generated output — source text is preserved verbatim.
  • Customer document text is not written to application logs.
  • Verification reports are evidence of this, available for every conversion.

Certifications and retention

Cyber Essentials

UK Cyber Essentials certification in progress.

Data retention

Source and output documents are deleted within two hours of conversion. Verification-report retention, tenant deletion grace period and export rights are being finalised in customer terms ahead of general availability.

Sub-processors

LexForge uses a small number of sub-processors for hosting, document processing, billing and transactional email. Customer document-processing workloads run in Microsoft Azure UK regions. Some account, billing, email and support metadata may be processed by providers outside UK Azure regions under their applicable data-processing terms.

ProcessorPurposeRegion
Microsoft AzureHosting, storage, database and document-processing servicesUK regions for document workloads
StripePayment processing and billingEU/UK
MailjetTransactional email deliveryEU

Due diligence

Need help with a DPIA or security questionnaire?

We routinely complete data protection impact assessments, security questionnaires and vendor due-diligence for law firms and their clients. Send yours over, or request our security pack, and we'll respond with the documentation you need.

Prefer email? security@lexforge.app
Typical response within two working days.

    We use these details only to respond.
    Attachments are encrypted in transit.

    Request received.

    Thanks — we'll be in touch at the email you provided, usually within two working days.