Skip to content
XYCORA
Request a demo

Legal AI security and privacy Security, described plainly.

Written for lawyers, not engineers. Everything on this page is in place today unless it says otherwise.

  1. Sign-in.

    Your password is never stored in a form anyone can read, Xycora included. Sessions end on their own, and signing out ends them on every device. Two-step sign-in by email is available to every person, and a firm can make it compulsory.

  2. Access and permissions.

    Each person has a role: owner, admin, lawyer, paralegal or viewer. Each matter has its own permissions, set by the people who run it. What a person cannot see in Xycora, they cannot reach any other way. One firm's records are never visible to another firm, or to Xycora's own operators by matter name.

  3. Audit trail.

    Every sign-in, upload, download, share, role change and AI action is recorded, with who, when and on which matter. The record cannot be edited afterwards.

  4. Encryption and hosting.

    Your documents and data are encrypted on their way to Xycora and while they are stored, and the details the anonymiser hides are locked with a key that belongs to your firm alone. Xycora runs on Amazon Web Services, with continuous backups and protection against accidental deletion.

  5. The anonymiser.

    An automated step, run through one of the AI providers named in our privacy policy, finds the names, addresses and identifiers in a document and replaces them with placeholders in your firm's own word, before any engine answers questions about it, analyses it or drafts from it. You keep the original and a protected copy; colleagues see the protected copy unless they enter their password again, and every such reveal is recorded. Your confidential data never trains a model.

  6. Seal and sign.

    A document can be sealed so that only the people you name can open it, and a PDF can be signed with a key that belongs to the signer alone. Available to every firm.

  7. AI and your data.

    Three engines read your matter; none of them trains on your data, and nothing you upload trains any model. Treat every answer as a draft for your review before you rely on it.

  8. Reporting a concern.

    [email protected]. We reply the same day.

Questions about your firm's requirements?

Our team will walk you through how Xycora handles your data.

Request a demo