Security

Sub-processors

EU-only processing partners used for LexIndex first deployments.

Current posture

Case files, the index and the audit log are stored on the server in the office, controlled by the office. Answers are produced either on that server or on our own bare-metal server at Hetzner in Germany, depending on the office's needs. LexIndex uses EU-headquartered infrastructure partners for hosting and operations; remote services process only what is required for a single answer or for operations.

Production list

The signed DPA contains the binding sub-processor list for your deployment. The standard first-deployment pack is EU-only and excludes US-controlled cloud providers from the client data path.

  • Processing: on the office's edge server, or on our own bare-metal server at Hetzner Online GmbH, Germany. Hosting: EU data centers only.
  • Operations access: outbound-initiated, metadata-minimized.
  • No model training on client case data.
  • Sub-processor changes require advance notice under the DPA.