Snapshot 250837

Document
Security page
URL
https://legora.com/security
Fetched
HTTP status
200
Content type
text/html
Fetch mode
static
Size
510508 bytes
SHA-256 (raw)
5afa6f55f1c45d88b547cb2578e2af2a111abd614b51190d7ced8bc019acdfe8
SHA-256 (normalized text)
7d3c4609893de6e5e7fb67aceea62a1912dd40de6f64bd45d5843736d94de328

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Product
Solutions
Security
Customers
Company
Resources
Log in
Book a demo
Menu
Log in
certified & compliant
Legora is committed to maintaining compliance with the most rigorous international safety and security standards.
ISO 42001
ISO 42001 certified, our AI governance framework gives customers confidence in how we build and run AI.
ISO 27001
Legora is fully certified with ISO 27001, the internationally recognized standard for information security management.
SOC 2 Type II
An independent auditor has tested our security controls over time and issued a SOC 2 Type II report on controls relevant to Security. Request a copy.
GDPR
With our technical team based in Sweden, we operate under GDPR — the world’s strictest standard for data privacy.
Trusted data storage
Tiered Storage
Legora offers flexible storage options designed to match different data sensitivity levels and compliance needs.
EU-based and US-based support
Legora has both EU-based and US-based technical work forces, meaning we ensure a higher level of processing for local clients or businesses.
No foundation model training
Your confidential data remains secure and private to you. Legora will not use your data to train or fine tune any AI models.
Legal-grade security
Zero trust design principles
We follow Zero Trust architecture, meaning no user or system is inherently trusted — access is always verified, limited, and logged.
Your approval required
Access to customer data is strictly controlled and only granted to engineers with written customer approval for support-related issues.
Regular security audits
Legora undergoes semi-annual penetration tests covering the full platform scope and follows an “assume breach” methodology to proactively identify and mitigate risks.
Trusted infrastructure
Legora’s access control is built on the Zanzibar authorization system — the same proven infrastructure that powers Google Drive, YouTube, and other large-scale applications.
Full ownership and flexibility
Legora supports all common Single-Sign-On protocols, ensuring you are in full control over your end-users access to Legora. Via our enterprise security packages you are in control of where your data is stored, for how long it is stored, how the encryption key is managed, and you have full visibility over how your data is managed in through out the platform.
Your data. Your decisions.
You maintain control over your data at all times.
Data retention
Set and manage data retention periods to align with your internal policies and regulatory requirements.
Data governance
Legora’s Data Governance tools give you real-time insight into who’s accessing your data and when.
Encryption management
Manage your own encryption keys with our BYOK option to keep sensitive data protected at all times.
User authentication
SSO integration gives you complete control over user authentication and access management.
“Legora helps us strike a balance that allows us to delve into complex legal challenges with greater efficiency and precision.”
Fredrik Winroth
Managing Partner at Fylgia
“Legora helps us strike a balance that allows us to delve into complex legal challenges with greater efficiency and precision.”
Fredrik Winroth
Managing Partner at Fylgia
FAQ
How does Legora encrypt data?
At Legora, protecting your data is our top priority. All data is encrypted in transit using TLS 1.2 or higher, and at rest with AES-256 encryption. For customers who require additional control, we also offer the option to encrypt data with their own encryption keys. If this is of interest, please let us know.
How does Legora manage customer data?
Our customers entrust us with some of their most sensitive and confidential information — a responsibility we take extremely seriously. With Legora, you can be confident that your data is accessible only to your authorized users. Legora will never access your data without your explicit written consent.
How does Legora handle AI transparency and explainability?
Transparency is core to how we build AI. Every AI output generated in Legora can be traced back to the source data and prompt that produced it. This means you can always review the AI’s reasoning, examine the sources it relied on, and verify its conclusions.
What happens to our data when we stop using Legora?
Once your contract ends, all of your data — along with any dedicated storage resources associated with your account — is permanently deleted. Before this happens, you’ll have the opportunity to request a full export of your data to ensure you retain everything you need.
Serious about security?
Book a demo to see Legora in action.
Book a demo
Serious about security?
Book a demo to see Legora in action.
Book a demo
Serious about security?
Book a demo to see Legora in action.
Book a demo
Product
Legora aOS
Word Add-in
Outlook Add-in
Editor
Mobile app
Tabular Review
Workflows
Legal Research
Portal
Monitors
Agent
Lists
Skills
Intake
Integrations
Solutions
M&A
Litigation
Banking
Tax
Insurance
Law firms
Mid-sized firms
In-house
In-house SMB
Public sector
Private equity
Certified
GDPR
AICPA SOC
ISO 27001
ISO 42001
Trust Center
Resources
Introducing Legora BAR
October 2026
September 2026
Company
Careers
Blog
Engineering
Press
About
Contact
Terms of use
Privacy Policy
Cookie Policy
Security Policy
Cookie Settings
X
LinkedIn
Instagram
Youtube
© 2026 Legora. All rights reserved.
Product
▼
Solutions
▼
Certified
▼
Resources
▼
Company
▼
Legal
▼
Social
▼
© 2026 Legora. All rights reserved.