LexBooksLexBooks: How your data is held
Version 2026-10-29. A short summary for attorneys. The binding commitments are in the Terms of Service and the Data Processing Agreement; if this page and those documents differ, those documents govern.
Where your data is
Your data is stored in the United States, with our database host (Supabase, Inc., AWS US East) and our web host (Vercel, Inc.). The full list of the companies we use, what each one does and when it applies, is in section 4 of the Data Processing Agreement.
How it is protected
- Data is encrypted in transit and at rest.
- Each firm's data is kept apart from every other firm's by rules in the database itself, tested on every change we make.
- Every user has their own account. Colleagues join only by invitation from a firm administrator.
- Two-step sign-in, with a code from an app on your phone, is required for the firm's administrators. The administrator decides whether colleagues must use it.
- Our staff reach a firm's data only to provide or support the service at the firm's request, to keep it secure, or when the law requires.
Backups
The database is backed up every day, and we test a restore every three months. Uploaded documents and logos are not yet included in our backups, so keep your own copy of any file you cannot lose.
AI
We do not use your data to train any AI model. AI features are off until your firm turns them on, and each AI result is a draft for a lawyer to review.
If something goes wrong
If a breach of security affects your data, we tell you without undue delay and within 72 hours of becoming aware of it, and we keep you informed as we learn more.
Your data when you leave
You can export your workspace at any time, including while it is read-only, and for 30 days after your subscription ends. After that we delete it, and copies in our backups are deleted as the backups age out.
Contact
- Security reports: security@lexbooks.app
- Support and questions about your firm's workspace: support@lexbooks.app