Bankovní úroveň zabezpečení spojená s architekturou nulových znalostí. LexAI jsme vytvořili tak, že ani my nemůžeme přistupovat k Vašim důvěrným právním datům.

Na rozdíl od tradičních cloudových služeb používá LexAI architekturu nulových znalostí inspirovanou Proton Mail. Vaše data jsou šifrována ještě před odesláním z Vašeho zařízení pomocí klíčů, které kontrolujete pouze Vy. Ani naši vlastní inženýři nemají přístup k Vašim důvěrným právním informacím.
Your data is encrypted on your device before transmission. Only you have the decryption keys.
Architecture designed to maintain privilege. No third-party access to your confidential communications.
Same security principles used by Proton Mail, trusted by journalists and activists worldwide.
Our security model is documented and can be independently verified by security researchers.
Jediný hlavní klíč, který vlastníte pouze Vy, odemyká Váš šifrovaný trezor. Bez něj zůstávají Vaše data trvale nepřístupná – i pro nás.
Your master password generates a unique cryptographic key using PBKDF2 with 600,000+ iterations. This key never leaves your device and is never transmitted to our servers.
Military-grade encryption standard used by governments worldwide. The same encryption protecting classified information now protects your legal work.
Each document has unique encryption keys derived from your master key. Compromising one document doesn't compromise others.
If you lose your master key, we cannot recover your data. This is a feature, not a bug—it proves no one else can access your data either.
Session keys are ephemeral and rotated regularly. Even if a key is compromised, past and future sessions remain protected.
Support for hardware security keys (YubiKey, etc.) for additional authentication layer and protection against phishing attacks.
Flexibilní možnosti autentizace od jednoduchého 2FA po hardwarovou biometrii
TOTP authenticator apps (Google Authenticator, Authy) with encrypted secrets and replay protection for an extra layer of security.
Face ID, Touch ID, Windows Hello - passwordless login via WebAuthn with phishing resistance and hardware-backed credentials.
Automatic logout after inactivity with 2-minute warning, desktop notifications, and configurable duration for enterprise control.
8 single-use recovery codes, SHA-256 hashed, for account recovery when your 2FA device is unavailable.
FIDO2 hardware keys (YubiKey) for maximum protection against credential theft and phishing attacks.
Instant notifications of new logins with device and location info so you always know when your account is accessed.
Kompletní kontrola nad životním cyklem relace s pokročilými varováními před vypršením, bezpečnými procedurami čištění a komplexním monitorováním aktivity.
Stay logged in with password or biometric re-verification without losing your work.
Complete session cleanup with token invalidation, cache clearing, and worker termination.
View and revoke sessions across all devices from your security dashboard.
Smart activity monitoring resets timeout on keyboard, mouse, and touch interactions.
Vaše data nejsou náš produkt
Mnoho "bezplatných" AI služeb zpeněžuje uživatelská data prostřednictvím reklamy, trénování AI modelů nebo prodeje třetím stranám. LexAI je jiný. Jsme předplatitelský byznys – naše jediné příjmy pocházejí z poskytování vynikajících služeb, ne z využívání Vašich důvěrných právních informací.
We never sell, license, or share your data with any third party. Your data stays yours.
Your documents are never used to train our AI or any third-party models. Ever.
Zero ads. Zero tracking for ad purposes. We make money from subscriptions, not surveillance.
We collect only what's necessary to provide service. Less data = less risk.
Architektura nulových znalostí není jen bezpečnostní funkce – je to záruka, že advokátní mlčenlivost zůstává nedotčena.
Even if we wanted to—which we don't—we technically cannot access your encrypted conversations and documents. Your privilege stays protected.
Zero AccessFull compliance with EU data protection regulations. Data stored in Supabase's Frankfurt data center, processed on Hetzner servers—both in Germany. No data leaves the EU.
EU Data OnlyWe don't verify your identity. No IP logging for regular use. Payments via Stripe—we never see your card. We know almost nothing about you.
Privacy FirstVětšina cloudových AI služeb nebyla vytvořena s ohledem na právní důvěrnost. Zde je, co se obvykle děje – a proč my děláme věci jinak.
We built LexAI because we believe lawyers deserve AI tools that respect the same confidentiality standards they uphold with their clients. Our business model is simple: you pay for a subscription, and we provide a private, secure service. We have no incentive to monetize your data—and our architecture makes it impossible anyway.
Vaše data jsou uložena v datovém centru Supabase ve Frankfurtu – u důvěryhodného poskytovatele databází s SOC 2 certifikací. AI zpracování probíhá na našich vlastních Hetzner GPU serverech, také v Německu. Žádná citlivá data nikdy neopustí EU.
Upřímné odpovědi o tom, jak chráníme Vaše data a k čemu máme (a nemáme) přístup.
Zobrazit všechny FAQ
No. Due to our zero-knowledge architecture, your data is encrypted with keys that only you possess. Even with physical access to our servers, our employees cannot decrypt your data. This is mathematically guaranteed by our encryption design—we literally cannot access your information.
If you lose your master key without a backup, your data cannot be recovered—by you or by us. This is intentional: it proves no one else can access your data either. We strongly recommend using our secure recovery key feature and storing backups in a safe location.
Here's exactly what we could provide: encrypted data we cannot decrypt, plus the username you chose during signup (which we don't verify—it could be fake). That's it. We don't log IP addresses during normal use, we don't verify identities, and payments go through Stripe so we don't have your card details. Even if compelled by law, we simply don't have useful information to hand over.
Even in a breach scenario, attackers would only obtain encrypted data. Without your master key (which is never transmitted to us), your data remains protected. This is the core benefit of zero-knowledge architecture—it protects you even if we fail.
No tracking during normal use. We only log IP addresses when our security systems detect potential threats—like brute force attacks or suspicious activity. Legitimate users going about their work will never have their IP logged. We don't use analytics trackers, we don't build user profiles, and we don't monitor what you do in the app.
Náš bezpečnostní tým je zde, aby odpověděl na Vaše dotazy a poskytl dokumentaci pro Vaše compliance kontroly.
For urgent security concerns, email security@lexaitechnologies.com directly.
English or Czech / Anglicky nebo česky