Alexi | Security

Complete compliance assurance for every matter, every time. Alexi is privately deployed to maximize security and meet your governance and configuration requirements.

Book a Consultation

Request Consultation

Total Privacy by Design

Your firm’s data stays completely yours. It’s never accessed, shared, or used to train shared models. Each environment is securely isolated to uphold client confidentiality and ethical obligations.

Firm Controlled Deployment

Private cloud deployment ensures zero firm data travels over the public internet, or is accessible by Alexi. Choose a data residency location, and integrate Alexi with your existing tech stack without bending your IT policy.

Access Control That Scales

Grant or restrict access to features and documents by user, role, team, or matter type. With role based access controls, audit logs, and SSO, your team stays productive while maintaining security or oversight.

Procurement-Ready Compliance

Alexi is fully SOC 2 compliant. It’s equipped to pass vendor reviews quickly, so legal teams can start using it faster.

Full Operational Visibility

Track who’s using Alexi, for what, and when. Centrally manage workflows, enforce review gates, and retain outputs for audit, legal hold, or internal QA.

Security Review Ready

Built for enterprise standards with regular pen testing, 24/7 monitoring, and full support for security reviews—so you can move from evaluation to deployment with confidence.

Built for trust. Backed by proof.

Security and compliance aren’t add-ons – they’re foundationally built into every layer of Alexi. From enterprise-grade data privacy to firm-controlled deployment options, Alexi provides legal teams the confidence to move fast without compromise.
‍
We design our systems to exceed industry standards like SOC 2 by default. Beyond certifications, what sets Alexi apart is the total control and visibility it gives your firm: where your data lives, how it’s deployed, and how it’s used—always up to you.
Explore detailed documentation, audit reports, and policies anytime at the Alexi Trust Center, powered by Vanta.

Security FAQ

How do you ensure the security of customer data?

We use industry-standard encryption methods, such as TLS 1.2+ for data in transit and AES-256 for data at rest, to secure all customer data. Access to sensitive information is restricted to authorized personnel only, and our systems are regularly audited to identify and mitigate potential vulnerabilities.

Where is your data stored?

Our data is hosted on Amazon Web Services, which complies with all major security standards like ISO 27001, SOC 2, and GDPR. Data is stored in geographically diverse locations to ensure availability and resilience.

Will our data be in compliance with the requirements of professional governing bodies around confidentiality of client data?

Yes, we prioritize compliance with governing professional associations and other legal regulations concerning client data confidentiality. Our platform is designed to help law firms adhere to professional and legal standards regarding data protection, confidentiality, and secure communication.

How long will our data and documents be stored?

Data and documents are stored according to our data retention policy, which can be customized based on your requirements. By default, data is retained for the duration of the service agreement and is securely deleted upon request or at the end of the service term. Backup copies may be kept for a limited time to ensure data recovery in case of a disaster, in accordance with industry standards.

Will our data be used to train any AI models?

No, your data will not be used to train any AI models. We understand the importance of data privacy and confidentiality, particularly for sensitive information. Our systems are designed to ensure that customer data remains private and is not utilized for training or improving machine learning models without explicit consent.

Will our data get sent to any third parties?

We may send data to third-party cloud providers, such as AWS and Azure, both of which are ISO27001, SOC II, and GDPR compliant, to leverage their secure infrastructure for enhancing our proprietary AI platform's performance, reliability, and scalability.

How do you manage user access and authentication?

We use strong password policies and multi-factor authentication (MFA) to secure user accounts. Role-based access controls (RBAC) are in place to ensure users only have access to the information they need for their roles.

Do you monitor for security threats and vulnerabilities?

Yes, we continuously monitor our systems for potential threats and vulnerabilities using a combination of automated tools and manual reviews. We also have an incident response plan in place to quickly address and remediate any security incidents.