We're Serious about Security
Using security-by-design principles for all our advice and solutions.
As a company founded in part by information security professionals, LexMateria is serious about the security of our solutions. We maintain strict data security practices and only design and recommend solutions with enterprise-level security and privacy standards.
Data Encryption
Data that is shared with LexMateria is secured and encrypted, both at rest and during transit. All encryption uses open-source encrypting mechanisms, designed and implemented by information system security experts. Controls are designed to support applicable HIPAA and PCI DSS requirements and protect personally identifiable information.
• 256-bit AES encryption and TLS
• PKI for trusted key management
• ISO/IEC 27001 and NIST SP 800-53
• Data maintained in the U.S. or in client tenants
• Corporate and operational systems are segregated
• 256-bit AES encryption and TLS
• PKI for trusted key management
• ISO/IEC 27001 and NIST SP 800-53
• Data maintained in the U.S. or in client tenants
• Corporate and operational systems are segregated
Access Control
The LexMateria client portal and other systems used as part of our services are tightly controlled to ensure only authorized access.
• User- and role-based access
• Chain-of-custody and ACLs maintained
• Strong password and MFA policies enforced
• System time-out policies
• Access available only via HTTPS
• Hierarchical security paradigm
• Employee background checks
• Strict internal security policy enforcement
• User- and role-based access
• Chain-of-custody and ACLs maintained
• Strong password and MFA policies enforced
• System time-out policies
• Access available only via HTTPS
• Hierarchical security paradigm
• Employee background checks
• Strict internal security policy enforcement
Development Process
The Lex Materia founding team has been designing and building services, tools and methods for managing legal-related information in a defensible and cost-effective way for over two decades.
• Hybrid Agile development process
• Highly qualified U.S.-based development team
• Code review and automated testing
• Separation of duties
• Iterative release cycles
• Zero-downtime updates
• Well-documented issue tracking and resolution process
• Hybrid Agile development process
• Highly qualified U.S.-based development team
• Code review and automated testing
• Separation of duties
• Iterative release cycles
• Zero-downtime updates
• Well-documented issue tracking and resolution process
Contact Us
Join the Legal AI revolution – rely on LexMateria’s experts to help you add AI to your legal practice.