Lex security and data handling
This is the trust center for Gixo Lex: a buyer-facing summary of published security, AI-processing, retention, and professional-review commitments. Each claim below points to the underlying policy rather than implying an unsupported certification.
These are application and data-handling statements published by Gixo. They are distinct from certifications held by infrastructure providers.
Gixo's privacy policy says customer content is not used to train Gixo models. Prompts, uploads, and related inputs may be sent to external AI providers only to generate requested outputs, using provider-specific controls that can vary by service path. Read the policy.
Browser sign-in uses secure, HttpOnly application cookies in production. Storage controls depend on each hosting service and its configuration. Request service-specific encryption details for your security review. Read the policy.
Application administration is controlled by authorized roles and permissions. The policy also explains the limits of current administrative review practices. Read the policy.
Procurement teams should be able to tell which organization owns each assertion.
Gixo's security policy attributes SOC 2 Type II and ISO 27001 certified facilities, physical controls, and related infrastructure assurances to its cloud providers. This summary does not claim that Gixo itself currently holds SOC 2 Type II or ISO 27001 certification.
| Buyer question | Published answer | Source |
|---|---|---|
| Is content used to train Gixo models? | No. The privacy policy says Gixo does not use customer content to train Gixo models. | Privacy policy |
| Do external AI providers receive content? | They may receive prompts and related inputs to generate requested outputs. Gixo says provider-specific retention and training controls vary by provider and service path. | Privacy policy and subprocessors |
| How is data encrypted? | Browser sign-in uses secure, HttpOnly application cookies in production. Storage controls depend on each hosting service and its configuration. Request service-specific encryption details for your security review. | Security policy |
| What happens after cancellation? | The privacy policy says cancelling a subscription does not delete your content: it is kept until you delete it. You can delete a Lex matter, with the source copies Lex retained for it, at any time. Account deletion requests follow Gixo's deletion and anonymization workflow. | Privacy policy |
| Does Lex replace legal review? | No. Lex prepares work for review and does not provide legal advice, certify compliance, or replace professional review. | Lex review boundary |
Open the primary documents directly. Each policy page carries its own effective or last-updated date.
Start a Lex trial to inspect guided intake, drafting, deterministic Draft Checks, review, and export. Gixo does not replace legal counsel or certify compliance.
Updated
