Security & compliance
Privilege deserves more than a password.
Your clients' files are protected by layers of security, from AWS infrastructure to permissions for each person. Click a ring to see what's inside.
2FA required, passkeys supported
Every staff account must use two-factor sign-in. Passkeys and a list of active sessions add more protection.
Controls at every level.
Two-factor sign-in, required
Required for every staff account. Admins can reset it when someone gets a new phone.
Passkeys
Sign in with Face ID, Touch ID or a security key instead of a password.
Active sessions
See every signed-in device and sign out the ones you don't recognize.
Permission templates
Set up roles like Paralegal or Intake once and apply them in a click.
Restricted workspaces
Limit a user to the specific modules they need.
User approval & suspension
Admins approve invites and can suspend access instantly.
Encrypted file storage
Documents are encrypted at rest. Shares expire and require a one-time code.
Audit logs
A history of actions taken across the firm.
Export & deletion
Export on close, a 90-day retention option, and approved deletions.
Your data, your call
If you ever leave, your data leaves with you.
- Export everything. Download a full export of your firm's data when you close your account.
- Keep it for 90 days, or delete it now. You choose what happens to the data after you close.
- Client deletion requests. Deletions wait out a retention period, and an admin must approve them.
Security questions, answered.
Where is Clienty's data hosted?
Clienty runs on Amazon Web Services (AWS). The database is deployed across multiple availability zones with automated backups, and an encrypted backup copy is kept in a second AWS region.
Is my firm's data encrypted?
Yes. Data is encrypted in transit with TLS and at rest with AES-256. Documents are stored in encrypted Amazon S3 storage, and the storage only accepts encrypted connections.
Can one firm ever see another firm's data?
No. Every request is scoped to your organization on the server, and that includes the requests Lexi makes on your behalf.
How is AI used with client data?
Lexi runs on Anthropic's Claude and asks for approval before she saves anything. Admins can switch her off firm-wide, suspend her for individual people, and review a full activity log and a weekly summary.
What happens to our data if we leave?
When you close your account you choose to download a full export, keep the data for 90 days, or delete it right away.
Have a security questionnaire from a client or carrier? Contact us and we'll walk through it with you. Sharing files outside the firm? See secure file sharing.
Lexi follows your firm's rules.
Every change needs approval. There's a firm-wide switch, per-person suspension, an acceptable-use policy, a full activity log and a weekly admin summary.