Lexanon runs on your computer: here is how local security, encryption and isolation work.
Because Lexanon runs locally, workstation security is decisive: if the machine is compromised, its documents may be too. This perimeter is not specific to Lexanon; it forms part of the customer's overall information security policy.
Mapping tables enabling re-identification are encrypted locally using AES-256-GCM, which protects confidentiality and verifies integrity. Decryption requires the cryptographic secrets used by the application.
Distinct secrets for each organisation or firm are being introduced to strengthen isolation between customer environments while enabling secure collaboration within one organisation.
