Security, Privacy & Trust• 4 min read
Your data controls: export, deletion & MFA
The table-stakes controls a data-privacy review expects — version history, export, permanent erasure, account purge, and step-up MFA.
- Version history & diff — documents are versioned; you can see and compare prior versions.
- Export — user-driven export of your data for portability.
- Permanent erasure — delete a document permanently, or purge an entire account/tenant to answer a data-subject erasure request under the NDPA.
- Step-up MFA — sensitive actions require a second factor at the moment you perform them, not just at login.
What is retained by design
Append-only legal records — the audit log and financial ledgers — survive an account purge on purpose: the audit log keeps the record that a deletion occurred, and ledgers must persist for compliance. Everything else is removed.
Related technical documentation
Data privacy & the no-training policy
Your documents are never used to train public models, and Nigerian data-protection handling (NDPA 2023) is built into the platform.
Security architecture: isolation, encryption & access
Tenant isolation enforced at both the app and database layers, AES-256 encryption with KMS key sourcing, and role- plus MFA-gated access.
Verification Guarantee: LexCore rejects any AI assertion it cannot mathematically trace to character offsets within the source agreement. It serves as a mechanical review assistant and does not constitute formal legal advice. For technical architecture details, see the Security & Trust Center.