LexCor AI is built for criminal-defence work where confidentiality is not optional. This notice explains what we process, why, and how we protect it.
LexCor AI is a professional criminal defence case management, workflow and AI-assisted productivity platform. The service includes the LexCor AI web platform, mobile applications, associated APIs, notifications and related services.
The service is operated by:
LEXCOR AI LTD
Registered office: 20 Wenlock Road, London, England, N1 7GU
Company number: 17143603
Email: info@lexcorai.com
Website: https://lexcorai.com/
In this Privacy Notice, "LexCor AI", "we", "us" and "our" refer to LEXCOR AI LTD.
This Privacy Notice explains how personal information is processed when LexCor AI is accessed or used. LexCor AI is intended primarily for authorised legal professionals, employees, agents and other approved professional users. It is not a public legal advice service.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, the Data (Use and Access) Act 2025 and other applicable privacy and electronic communications legislation.
The Data (Use and Access) Act 2025 made amendments to the United Kingdom's existing data protection framework. References in this Privacy Notice to the UK GDPR and Data Protection Act 2018 should therefore be understood as referring to those laws as amended from time to time.
LEXCOR AI LTD may act either as a data processor or a data controller, depending on the information involved and the reason it is being processed.
Where a law firm or other subscribing organisation uses LexCor AI to manage its clients, criminal matters, documents, evidence, hearings, deadlines, correspondence, disclosure and related information, that organisation will normally determine the purposes for which the information is processed.
In those circumstances, the subscribing law firm or organisation normally acts as the data controller, and LEXCOR AI LTD normally acts as a data processor, processing that information on behalf of and in accordance with the instructions of the subscribing organisation.
The relevant organisation remains responsible for determining the lawful basis for its processing, its retention requirements, the information it collects and how it uses information in connection with its legal work.
LEXCOR AI LTD may act as a data controller where we determine why and how personal information is processed for our own purposes, including:
The information processed through LexCor AI depends upon the user's role, the organisation using the system and the information entered into a particular matter. Because LexCor AI is designed for criminal defence work, information processed through the platform can be highly sensitive.
We may process information including name, business email address, telephone number, employing or associated organisation, job title, professional role, user ID, account status, access permissions, assigned matters, authentication information, multi-factor authentication information, login history and security information associated with the account.
Information held within a criminal matter may include client names, addresses, dates of birth, contact details, matter and case reference numbers, allegations, offences, charges, police information, arrest information, custody information, bail information, remand status, court information, hearing dates, procedural stages, case outcomes, client instructions, correspondence, attendance notes, conference notes, call notes, deadlines, tasks, court directions, case chronology and other information relevant to the conduct of a criminal matter.
The platform may process information concerning alleged criminal offences, investigations, arrests, charges, prosecutions, convictions, sentences, bail, custody, related court proceedings and associated security measures. Such information constitutes criminal offence data and is afforded specific protection under UK data protection legislation.
Case material may contain special category personal data, including information concerning physical health, mental health, disability, racial or ethnic origin, religious or philosophical beliefs, biometric information, genetic information, sexual orientation, sex life and other information protected as special category data under applicable law.
Where LexCor AI acts as processor, the relevant subscribing organisation remains responsible for determining the applicable lawful basis and additional processing condition.
LexCor AI may process documents and evidence including witness statements, police documents, prosecution material, defence documents, court documents, disclosure, unused material, forensic reports, expert reports, exhibits, photographs, correspondence, interview records, electronic evidence and other files uploaded or associated with a matter.
Case records may contain information concerning individuals other than the client, including witnesses, alleged victims, co-defendants, family members, police officers, solicitors, barristers, experts, interpreters, court personnel, prosecution representatives and other individuals connected with a matter.
When LexCor AI is accessed, we may process technical information including IP address, device type, operating system, application version, browser information, session identifiers, login date and time, authentication events, security events, device identifiers where required for application functionality, push-notification tokens, error information, application diagnostic information and crash or performance information where the relevant diagnostic service is enabled.
LexCor AI maintains audit and activity records. These may record user identity, date and time, login activity, matter accessed, action performed, documents accessed, information created or amended, task activity, correspondence activity, approvals, AI-assisted activity and other security or operational events. Audit logging supports security, accountability and traceability within the platform.
Information processed through LexCor AI may be obtained from:
LexCor AI may also generate operational information automatically, such as audit records, task history, security events and system timestamps.
Where LexCor AI acts as processor, information may be processed at the direction of the subscribing organisation for purposes including:
Where LexCor AI acts as controller, we may process information to:
Where LEXCOR AI LTD acts as a data controller, the lawful basis for processing depends upon the activity concerned. We may rely upon:
Processing may be necessary to enter into or perform contractual obligations relating to the LexCor AI service.
We may process information where necessary for legitimate interests including operating LexCor AI, maintaining platform security, preventing fraud or misuse, administering professional user accounts, providing technical support, protecting our systems and users, and establishing, exercising or defending legal rights. We consider whether those interests are overridden by the rights and interests of affected individuals.
We may process information where necessary to comply with an obligation imposed upon us by law.
Where another lawful basis is required or more appropriate, we will rely upon that basis in accordance with applicable law.
Where LexCor AI acts as processor for criminal case information, the subscribing data controller is responsible for identifying the appropriate lawful basis and, where required, the additional condition for processing special category or criminal offence data.
LexCor AI includes or may include AI-assisted functionality designed to support authorised professional users. Functions may include summarising documents, summarising case information, extracting relevant information, identifying information within disclosure, preparing draft correspondence, structuring case information, assisting with document triage, identifying potentially relevant material and presenting information for professional review.
AI is used as an assistive tool. AI-assisted output does not replace professional legal judgement.
Where AI generates or assists with content, the output should be reviewed by an authorised user, users remain responsible for assessing accuracy and relevance, substantive legal decisions remain with the legal professional, correspondence requiring professional approval should not be treated as approved merely because it has been generated by AI, and professional users remain responsible for the use made of AI-generated information.
LexCor AI does not independently determine guilt or innocence, criminal liability, sentence, case strategy, whether a plea should be entered, what legal advice should be given or other substantive legal outcomes.
Confidential client or case data is not sold to advertisers. LexCor AI does not use one subscribing law firm's confidential matter data to train a general-purpose AI model for the benefit of unrelated organisations. Where approved third-party infrastructure is involved in providing AI-assisted functionality, processing is subject to applicable contractual, confidentiality, security and data-protection controls.
LexCor AI uses deterministic rules and configured workflows to support functions including deadline calculation, reminders, task generation, escalation, procedural alerts, hearing awareness, custody and bail monitoring, and risk indicators. These systems support professional users rather than replace professional decision-making.
LexCor AI does not make solely automated decisions intended to determine an individual's criminal liability, guilt, sentence or legal rights without appropriate professional involvement.
The LexCor AI mobile application is a secure companion to the main LexCor AI platform. It is intended primarily to provide authorised users with awareness and access to important case information while away from the desktop environment.
Depending on permissions and application configuration, users may be able to:
The mobile application is not intended to provide legal advice to members of the public.
LexCor AI may use mobile push notifications to alert authorised users to important events. Notifications may concern matters such as hearings, tasks, deadlines, Custody Time Limits, matter status changes, disclosure and other authorised workflow events.
Push-notification services require technical identifiers, such as a device or notification token, to deliver messages to the relevant device. LexCor AI is designed to minimise unnecessary disclosure of confidential information through notifications. Users remain responsible for securing their device and configuring lock-screen notification settings appropriately.
The primary LexCor AI platform and case-management infrastructure are hosted using Amazon Web Services ("AWS") in the Europe (London) Region, eu-west-2, United Kingdom. This environment is used for core LexCor AI application infrastructure and primary case-management data.
AWS provides cloud infrastructure supporting application hosting, databases, secure data storage, document storage, system services, backup and resilience functions, and related infrastructure required to provide LexCor AI. Where LexCor AI acts as a processor, AWS may act as a subprocessor supporting delivery of the service.
Appropriate technical measures are used to protect information, including encryption in transit and encryption at rest where applicable. Access to production systems and case information is restricted according to operational need and authorised permissions.
LexCor AI uses Google Firebase in connection with selected mobile application and supporting technical functionality. Depending upon the Firebase services enabled within a particular version of LexCor AI, Firebase may be used for functions such as mobile push notifications, application security, authentication-related functionality, application configuration, technical diagnostics, crash reporting, performance monitoring and other supporting mobile services.
Only the Firebase services actually configured within the LexCor AI application will process information for those purposes. Firebase is operated by Google.
Firebase is not treated as the primary storage environment for LexCor AI's core case-management database. However, Firebase services do not all operate exclusively from the United Kingdom. Some Firebase services operate on Google's global infrastructure, while particular products may offer specific regional configuration. Certain services may therefore process technical or personal information outside the United Kingdom.
The location and nature of Firebase processing depends upon the particular Firebase product being used. Where an international transfer occurs through Firebase, LexCor AI relies upon appropriate contractual or other recognised transfer safeguards where required by UK data protection legislation.
LEXCOR AI LTD may engage carefully selected third parties to provide technology or operational services necessary to operate LexCor AI.
Amazon Web Services
Purpose: primary cloud hosting and infrastructure.
Primary LexCor AI region: Europe (London), eu-west-2, United Kingdom.
Google Firebase
Purpose: selected mobile application and technical services such as notifications, application security and other configured Firebase functionality.
Processing location: depends upon the Firebase service used and may include processing outside the United Kingdom.
Other service providers may be used where necessary for email delivery, SMS delivery, security, communications, technical support, monitoring, infrastructure or other LexCor AI functionality. Where a provider processes personal information on our behalf, appropriate data-protection obligations are imposed where required.
A subscribing organisation may request further information concerning material subprocessors by contacting info@lexcorai.com.
The primary LexCor AI case-management environment is hosted in the United Kingdom using AWS Europe (London), eu-west-2. Some supporting services, including certain Firebase functions, may process information outside the United Kingdom.
Where personal information subject to UK data protection legislation is transferred to a country outside the United Kingdom, we apply an appropriate legal transfer mechanism where required. Depending upon the circumstances, this may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to recognised standard contractual clauses, contractual safeguards provided by an approved processor or subprocessor, or another lawful transfer mechanism recognised under UK data protection legislation. We also consider appropriate technical and organisational safeguards where required.
Personal information may be disclosed only where necessary and authorised. Recipients may include:
LexCor AI does not sell personal or criminal case data to advertisers. We do not permit unrelated organisations to use confidential criminal case material for their own advertising purposes.
Criminal case information requires a high degree of confidentiality. LexCor AI therefore uses technical and organisational measures designed to protect personal information against unauthorised access, accidental disclosure, unlawful disclosure, alteration, loss, destruction and misuse.
Measures may include:
Security is a shared responsibility. Users and subscribing organisations must also maintain suitable security controls over accounts, devices and exported information.
LexCor AI is designed to minimise unnecessary persistent storage of sensitive criminal case information on mobile devices. The application may retain limited information where technically necessary for authentication, session management, application configuration, notifications, security or normal operation of the application.
Users must protect mobile devices used to access LexCor AI against unauthorised access. Where confidential information is downloaded, copied, photographed, exported or otherwise removed from LexCor AI by an authorised user, the user's organisation becomes responsible for securing that information in accordance with its professional and data-protection obligations.
Where LexCor AI acts as processor, case information is retained according to the instructions of the subscribing data controller, configured retention requirements, the relevant service agreement, applicable professional obligations, applicable legal obligations and legal hold requirements where relevant. The appropriate retention period may differ between organisations and matters.
Where LexCor AI acts as controller, account, technical, security, audit and support records are retained only for as long as reasonably necessary for their respective purposes, including account administration, security, fraud prevention, dispute resolution, contractual requirements, regulatory requirements and establishment, exercise or defence of legal claims.
At the end of the applicable retention period, information will be deleted, anonymised or otherwise dealt with in accordance with applicable law and contractual obligations. Backup copies may remain for a limited period as part of controlled backup and disaster-recovery systems.
LexCor AI is primarily an organisation-managed professional application. An individual user's account will normally have been created or authorised by the user's law firm or subscribing organisation.
A user may request account closure by contacting the administrator of their subscribing organisation or by emailing info@lexcorai.com.
Closing an individual user account does not necessarily delete underlying criminal matter information. Matter information belongs within the records controlled by the subscribing organisation and may need to be retained because of ongoing legal proceedings, regulatory requirements, professional obligations, client-file retention requirements, evidential requirements, audit requirements or establishment or defence of legal claims. Security and audit records may also be retained where their continued retention is lawful and necessary.
Depending upon the circumstances, individuals may have rights including:
These rights are subject to applicable legal conditions and exemptions. In particular, rights may be restricted in circumstances involving legal professional privilege, legal proceedings, criminal investigations, prevention or detection of crime, establishment, exercise or defence of legal claims or other statutory exemptions.
Where your information forms part of a matter managed by a law firm or other organisation using LexCor AI, that organisation will normally be the controller. Requests concerning that information should therefore normally be made directly to that organisation. LEXCOR AI LTD will assist the relevant controller in responding to valid requests where required by law and our contractual obligations.
For information for which LEXCOR AI LTD acts as controller, requests may be sent to info@lexcorai.com.
If you have concerns about the way personal information is being processed, you may contact:
LEXCOR AI LTD
20 Wenlock Road, London, England, N1 7GU
Email: info@lexcorai.com
Where the complaint concerns information controlled by a subscribing law firm, we may refer you to or assist the relevant organisation. We maintain procedures for handling data-protection complaints in accordance with applicable law.
You may also have the right to complain to the United Kingdom's data-protection regulator:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
Website: https://ico.org.uk/
LexCor AI is a professional application and is not intended to be used independently by children. Criminal cases may nevertheless involve children or vulnerable individuals. Information concerning those individuals may be processed where relevant to a legal matter and where the subscribing organisation has an appropriate lawful basis to process it. Such information remains subject to the same security, confidentiality and access-control requirements applicable to other case information.
The LexCor AI website and web application may use cookies, local storage or similar technologies that are necessary for authentication, security, session management, user preferences, application functionality and service reliability. Where non-essential analytics, tracking or similar technologies are introduced, appropriate information and choices will be provided where required by law. A separate Cookie Notice may be published where appropriate.
The LexCor AI application may be distributed through third-party application stores including Apple App Store and Google Play. Those platforms may independently process information concerning app downloads, purchases where applicable, devices, store accounts, application installation, application updates and store usage. That processing is governed by the relevant platform provider's privacy terms.
LEXCOR AI LTD is responsible for accurately declaring the data practices of the LexCor AI application itself through the relevant App Store privacy disclosures and Google Play Data Safety disclosures.
We may update this Privacy Notice where necessary to reflect changes to LexCor AI, new functionality, changes to infrastructure, changes to service providers, changes to AI functionality, changes in law or regulatory guidance or changes to the ways in which personal information is processed.
The latest version will be published at https://lexcorai.com/privacy. The effective date will be shown at the beginning of the notice.
For privacy enquiries, data-protection requests or questions about this Privacy Notice, contact:
LEXCOR AI LTD
20 Wenlock Road, London, England, N1 7GU
Company number: 17143603
Email: info@lexcorai.com
Website: https://lexcorai.com/
