Product and intended use
Define the configuration, people, information and tasks being assessed.
Plan and modules
Public claim only
The homepage offers an account with a 21-day free trial including 60 minutes. The privacy policy describes a licence for the online transcription platform. No named enterprise plan was published.
Ask: What applies after the 60 included minutes, and is there a firm plan with an admin console?
Deployment and hosting
Public claim only
The homepage says data is hosted on Australian servers. The privacy policy says Oracle API transcription is hosted in Australia for processing only, and names Stripe, Formspree, and Vercel for website delivery. It says that where providers process outside Australia, GDPR-compliant safeguards are used.
Ask: Which parts of a transcript stay in Australia, and which providers may process account or payment data elsewhere?
Product surfaces
Public claim only
The homepage describes recording audio, producing a transcript and a structured first draft, then downloading it. It says the product is trained for Australian legal terminology and that audio and transcripts are deleted after download.
Ask: What does the structured draft contain, and is the lawyer required to edit it before it leaves the product?
Jurisdiction and legal content
Public claim only
Australian legal terminology is the only legal-content claim. No primary-law database is named. The privacy policy relies on the Privacy Act 1988 (Cth).
Ask: Is 'trained for Australian legal terminology' a speech-model claim, a drafting claim, or both, and which corpus was used?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Client authority and client-facing use
Not confirmed
The pages do not say whether a client must be told that a consultation is transcribed, or whether the draft is client-ready.
Ask: What notice do you expect us to give a client before audio is sent to Lexoris?
Model providers
Public claim only
The privacy policy names Oracle API transcription hosted in Australia for processing only, plus Stripe, Formspree and Vercel. No other model provider is named.
Ask: Is Oracle the only transcription processor, which Oracle region is used, and does Oracle retain audio?
Subprocessors
Public claim only
The privacy policy lists Stripe for payments, Oracle API transcription hosted in Australia for processing only, Formspree for early-access forms, and Vercel and hosting infrastructure for website delivery. It says those providers receive only what they need and are bound by confidentiality obligations.
Ask: Provide the current locations for Stripe, Formspree and Vercel, and the Oracle region used for transcription.
Training on customer content
Public claim only
The privacy policy says personal information is used to provide and improve the transcription service, and that data is not sold or shared for marketing. It does not say whether audio or transcripts are used to train a model. The homepage separately says the product is trained for Australian legal terminology.
Ask: Confirm that customer audio and transcripts are not used to train Lexoris or Oracle models, and what 'trained for Australian legal terminology' refers to.
Feedback and secondary use
Not confirmed
The pages read on 2026-10-10 (the Lexoris homepage and the privacy policy effective 1 November 2025) do not state a position on feedback and secondary use.
Ask: What is the written position on feedback and secondary use for the deployment we would buy, and which contract or policy states it?
Retention
Public claim only
Transcription audio and text are processed temporarily and deleted after download. The homepage says that once downloaded, transcripts and audio are automatically deleted. Account details such as name, email and firm name are collected for the licence and are not given a deletion period.
Ask: How soon after download are audio, transcript and backups deleted, and how long are account records kept?
Deletion and export
Public claim only
Audio and transcripts are deleted after download. The privacy policy also says a person may request access to personal information, possibly in writing, and Lexoris reserves a right to charge a fee for that search. It does not describe a deletion certificate.
Ask: Can we delete audio before download, and is deletion from Oracle and from backups confirmed in writing?
Human access to customer content
Not confirmed
The pages read on 2026-10-10 (the Lexoris homepage and the privacy policy effective 1 November 2025) do not state a position on human access to customer content.
Ask: What is the written position on human access to customer content for the deployment we would buy, and which contract or policy states it?
Access control
Not confirmed
The privacy policy describes an individual licence and account details. It does not mention SSO, MFA or firm-level roles.
Ask: Can a firm administer users, require MFA and see an audit log of downloads?
Encryption
Not confirmed
The pages read on 2026-10-10 (the Lexoris homepage and the privacy policy effective 1 November 2025) do not state a position on encryption.
Ask: What is the written position on encryption for the deployment we would buy, and which contract or policy states it?
Assurance and certifications
Not confirmed
The pages read on 2026-10-10 (the Lexoris homepage and the privacy policy effective 1 November 2025) do not state a position on assurance and certifications.
Ask: What is the written position on assurance and certifications for the deployment we would buy, and which contract or policy states it?
Contract, DPA and liability
Not confirmed
The privacy policy is the only legal document read. It is effective 1 November 2025 and says Lexoris may amend it at any time. No customer terms, liability cap or governing-law clause was published.
Ask: Provide the licence terms, including governing law, liability and how the privacy policy can be changed.
Cross-border transfers
Public claim only
Oracle transcription is described as hosted in Australia for processing only. Where other providers process outside Australia, the policy says Lexoris ensures GDPR-compliant safeguards. The safeguards are not named, and the Australian Privacy Principles are not cited beyond the statement that Lexoris is bound by the Privacy Act.
Ask: Which transfers leave Australia, and what contractual safeguard applies under APP 8?
Incidents and breach notice
Not confirmed
The pages read on 2026-10-10 (the Lexoris homepage and the privacy policy effective 1 November 2025) do not state a position on incidents and breach notice.
Ask: What is the written position on incidents and breach notice for the deployment we would buy, and which contract or policy states it?
Changes to terms and models
Public claim only
Lexoris reserves the right to amend the privacy policy at any time. If the user objects, they should not access the site or platform. No notice period is stated.
Ask: Will we be notified before a change to retention, processors or training, and can we export and leave if we object?
Exit, return and deletion
Not confirmed
The pages read on 2026-10-10 (the Lexoris homepage and the privacy policy effective 1 November 2025) do not state a position on exit, return and deletion.
Ask: What is the written position on exit, return and deletion for the deployment we would buy, and which contract or policy states it?
Connectors and external tools
Not confirmed
The pages read on 2026-10-10 (the Lexoris homepage and the privacy policy effective 1 November 2025) do not state a position on connectors and external tools.
Ask: What is the written position on connectors and external tools for the deployment we would buy, and which contract or policy states it?
Web search and open-web grounding
Not confirmed
The pages read on 2026-10-10 (the Lexoris homepage and the privacy policy effective 1 November 2025) do not state a position on web search and open-web grounding.
Ask: What is the written position on web search and open-web grounding for the deployment we would buy, and which contract or policy states it?
Actions the system can take
Not confirmed
The pages read on 2026-10-10 (the Lexoris homepage and the privacy policy effective 1 November 2025) do not state a position on actions the system can take.
Ask: What is the written position on actions the system can take for the deployment we would buy, and which contract or policy states it?
Human review of output
Public claim only
The homepage says the speech becomes a structured first draft ready for the user to refine. It does not describe an in-product approval step.
Ask: Is there a required review step before a transcript can be downloaded or sent?