Built for sensitive matters. Described honestly.
Legal and financial matters are sensitive. These are the controls LexSalim is built around. They describe the platform's design and operating plan, not an external certification.
Nine controls
- SEC-01
Encrypted document storage
Documents are encrypted in transit and at rest. Encryption keys are managed separately from the files they protect, with per-document keys wrapped by a master key.
- SEC-02
Case-specific permissions
Access is granted per case. Organisation members see only the cases they are invited to; roles limit who can upload, approve or export.
- SEC-03
Audit trails
Uploads, views, agent actions, approvals and exports are recorded with who, what and when, and are included in case exports.
- SEC-04
Human approval
Agent findings and drafts are proposals until a person approves them. Agents never send correspondence or file anything.
- SEC-05
Source references
Findings carry references to the documents or sources they rely on, so they can be checked before they are used.
- SEC-06
Privacy-conscious processing
Case content is processed for your case only and is not used to train shared models. AI providers are used under terms that prohibit training on customer content.
- SEC-07
Strong sign-in
Verified email sign-in, multi-factor authentication, recovery codes and session controls are part of the application design.
- SEC-08
Isolation by design
Document processing runs on an internal network with no route to the internet; the marketing site and the application are separate services.
- SEC-09
Backups and recovery
Encrypted, off-site database backups with scheduled restore tests are part of the operating plan before real customer data is accepted.
Plain statements
No certifications are claimed.
ISO 27001, SOC 2, Cyber Essentials and similar are not claimed. If and when an assessment is completed, it will be stated here with its scope.
Not end-to-end encrypted.
Documents are encrypted at rest and in transit and decrypted by the service to process them. People you invite to a case, and the AI processing you request, can read them.
Not a regulated firm.
LexSalim is software from THYNKR SYSTEMS LTD. It is not a law firm or an accountancy practice and is not regulated as one.
Hosting and sub-processors.
The hosting region, sub-processor list and data-processing terms are published with the service documentation before real customer data is accepted.
Draft policies: privacy · terms · AI-use disclosure.
Ready to look at your matter more clearly?
Plans start at £29 per month in the UK, billed per workspace. Choose a plan now; checkout opens with the application.