Role-based access
Assign permissions according to the people who maintain, review and approve records. Agree access boundaries across teams and legal entities.
Control access to records, reviews and approvals.
Lexa’s operating model separates data access, record ownership and decision authority. Deployment and processing arrangements are documented for your firm’s review.
Review and approval history
Retain who reviewed a record, the decision made and the material considered. Changes remain distinguishable from the previously approved position.
Tenant and deployment arrangements
Specify the hosting region, tenant model, access method and support responsibilities in the deployment proposal.
Data lifecycle
Agree the information held, retention periods, export requirements and return or deletion process at the end of the engagement.
AI processing controls
Identify the processing providers, permitted data and contractual terms. Review these arrangements alongside the firm’s information-handling requirements.
Operational responsibilities
Document backup, recovery, incident handling, service levels and the responsibilities of CoSure and the client.
PROCUREMENT REVIEW
Review the arrangements
before committing.
Ask for the deployment scope, data-flow description, provider and subprocessor information, security questionnaire response and proposed service terms for your environment.
Certifications and independent test reports are identified when available for the proposed service. This website does not claim ISO 27001, SOC 2 or Cyber Essentials certification.
Discuss procurement requirements