Security & Confidentiality

Built for work that must stay privileged.

LEXUP handles court recordings, arbitral proceedings, board minutes, and confidential documents every day. This page sets out how material submitted to AutoTranscript and AutoTranslate is protected, in specific and verifiable terms.

Last reviewed: 5 September 2026 · Applies to AutoTranscript & AutoTranslate

24 hours Files & documents permanently deleted
No accounts Session-based isolation, no customer login profile
No routine review Limited authorised access only when necessary
No card data Payments completed on DOKU’s hosted page
01 Data Lifecycle

Nothing lingers.

Retention is not a setting you must remember to change. Deletion is fixed, automatic, and enforced by the system itself.

Permanent deletion within 24 hours

Every uploaded recording and document, and every transcript or translation we generate, is permanently deleted from our servers and cloud storage within 24 hours of your order. An automated sweep enforces the rule every hour. The window is fixed and cannot be quietly extended.

Session-based isolation

There are no customer accounts and no logins. Each order is bound to a private session in your own browser, so your work is never linked to a stored profile and cannot be listed or browsed from another device.

Share links that expire

If you choose to generate a link to share a result, that link stops working within 24 hours, following the same lifecycle as the files themselves.

What remains after 24 hours

Limited order, billing, transaction, consent, security, support, and legal records may be retained separately for accounting, fraud prevention, disputes, and legal obligations. Automated-service files and Outputs are not part of those retained records.

02 AI Processing

Automated by default. Access tightly limited.

AutoTranscript and AutoTranslate use an automated pipeline with no routine human review. Limited exceptions are stated plainly below.

No routine human review

There is no transcriptionist queue or routine outsourced review. Limited authorised LEXUP staff may access content only when reasonably necessary for customer-requested support, security or fraud investigation, legal compliance, or a specific quality hold.

Customer Content is not used for training

LEXUP does not use Customer Content to train models or for LEXUP’s internal product or model improvement. Under our paid AI providers’ API terms, API content is not used to train their models.

Telemetry, not Customer Content

We may use operational or de-identified telemetry to improve reliability and the platform. We do not use the content of your recordings or documents for that purpose. The 24-hour lifecycle removes automated-service files and Outputs.

03 Infrastructure

Encrypted in transit. Encrypted at rest.

LEXUP runs on major cloud infrastructure that is independently audited. We attribute those credentials where they belong.

TLS in transit

Every connection is encrypted with TLS (HTTPS), from your browser to LEXUP and from LEXUP to cloud storage and AI processing.

AES-256 at rest

Files awaiting processing are held in Google Cloud Storage, and order records in a managed PostgreSQL database. Both encrypt data at rest with AES-256 by default.

Independently audited providers

The cloud platforms we build on maintain certifications such as ISO/IEC 27001 and SOC 2. Those certifications belong to our infrastructure providers, not to LEXUP.

Invisible abuse protection

Upload and payment endpoints are shielded by an invisible, privacy-preserving bot check (Cloudflare Turnstile), with no puzzles or CAPTCHAs to solve.

04 Private Sessions

Your work stays in your session.

You do not need to create an account to use LEXUP's automated services. Your order remains private to the browser session that created it.

No customer account required

There is no customer profile, password, or account history to maintain. Your software order is tied to the private session in the browser you use to create it.

A short, defined lifecycle

That private session is designed for a single order, and its files and generated documents are permanently removed within 24 hours.

05 Payments

LEXUP does not receive or store card details.

Payment happens with the payment specialist, not with us.

Hosted checkout by DOKU

Software orders are paid on DOKU’s secure hosted payment page for FPX online banking, credit and debit cards, and e-wallets. Card numbers are entered with DOKU and never pass through LEXUP’s servers.

What LEXUP receives

DOKU receives the payment and contact data entered at checkout. We receive signed transaction confirmation and limited billing details such as name, email, phone, amount, and payment status. We do not receive or store card numbers or security codes.

Governing documents: Privacy Policy · Dasar Privasi (BM) · Terms & Conditions · Cookie Policy

Ready when you are

Send the work. It will be gone by this time tomorrow.

Start Transcribing Start Translating

For Manual Services or an NDA, get in touch.