How LexFlo protects your firm's data

One page for law firms. Last updated September 30, 2026.

Your data stays inside your firm.

Every record carries your firm's ID. The database refuses to show one firm's rows to anyone from another firm (row-level security), and the server checks that you belong to the firm on every request. Browsers can only read; every change goes through the server. Staff can view matters; owners and attorneys make decisions such as approving time.

Encrypted everywhere.

• In transit: every connection uses HTTPS.
• At rest: the database and stored documents are encrypted by our database provider, Supabase (US East).
• Body cam video and audio recordings are kept on our own server and encrypted file by file with AES-256-GCM, under a key stored separately from the files. A changed or damaged file is refused, never played.
• Connection tokens for your CRM are encrypted before they are saved.
• Backups run daily, are encrypted with AES-256-GCM, and have been restored in a test.

Private files, short-lived links.

Discovery files are never public. When you open a file, you get a link that expires after 60 seconds. Recordings have no link at all: the server plays them only after checking that you are signed in to the right firm.

Language and transcription providers.

Anthropic and Deepgram never train their models on your firm's data, and they delete what we send through their APIs after 30 days. A formal zero-data-retention contract is planned as we reach enterprise scale.

• Anthropic (Claude) reads your documents and call transcripts to write summaries, sort statements, and score new leads.
• Deepgram transcribes recordings. Every request also opts out of Deepgram's model-improvement program.
• CourtListener (Free Law Project) receives only the fact description you type into case law search. Leave out names and other details that identify your client.

What the software gives you, and what it doesn't.

Summaries, stance tags and extracted statements are drafts for your review, with a page or time cite so you can check the source. Case law results are real published opinions from CourtListener, never software-generated cases or citations. Verify good law in Lexis or Westlaw before citing.

You stay in control.

• Deleting a discovery file removes the stored file first, then its transcript and every passage taken from it. If the file cannot be removed, nothing is deleted and you can try again.
• Deleted data ages out of our on-server backups on a rolling schedule: seven daily and four weekly copies. An encrypted off-site copy of each backup is kept for disaster recovery; a deleted file's off-site copies expire 90 days after your firm deletes it.
• If a subscription lapses, the firm keeps read-only access to its records and can still delete them.
• Uploads are limited in size, and each firm has a storage quota, so no single upload can take the service down.

Questions or a security concern?

Write to the support address in your account. We answer security questions from firms before they sign.