Security & Privacy

Donna365 keeps matter data, client records, privileged material, prompts, outputs and workflow intelligence inside the firm-controlled environment, by design and not as an afterthought.

Trust positioning

Closed legal AI for the most sensitive legal work.

Donna365 runs inside your firm's own Microsoft 365 environment. The boundary is the firm, the data stays put, and the governance you already trust applies to the AI as well.

Firm-controlled boundary

Matter data, client records, privileged communications and workflow intelligence remain within your firm's Microsoft 365 environment.

Closed architecture

No data leaves your tenant. No third-party AI training. No external data processing.

Microsoft 365 native

Built on your existing security, compliance and governance infrastructure, not a separate platform to secure.

Security architecture

Protection at every layer.

Each layer of the system carries its own controls, aligned with the obligations Australian legal practice already lives by.

Data
Encrypted at rest and in transit within Microsoft 365.
Access
Role-based permissions aligned with Microsoft Entra ID.
AI
Closed-loop intelligence. No external model training.
Audit
Complete activity logging for compliance and governance.
Compliance
Australian legal profession obligations built in.
Data sovereignty and governance

Your data stays in Australia, under lawyer control.

Australian data residency

Your data stays in Australia, governed by Australian law.

No offshore processing

Matter data, client records and privileged material never leave your jurisdiction.

Professional obligations

Designed to support legal professional privilege, confidentiality duties and trust accounting requirements.

Lawyer in control

AI outputs are assistive, not determinative. Lawyers review, approve and control all work product.

Source visibility

AI responses show their sources, the documents, emails, notes and precedents, so lawyers can verify and validate.

Audit trail

Every AI interaction is logged: prompts, sources, outputs, edits and approvals.

Product security

The controls behind the platform.

The same standards firms expect from enterprise software, applied to legal work end to end.

Authentication
Microsoft Entra ID (Azure AD).
Authorisation
Role-based access control.
Encryption
AES-256 at rest, TLS 1.3 in transit.
Logging
Comprehensive activity audit trail.
Backup
Microsoft 365 backup and recovery.
Updates
Automated security patching.
Compliance standards

Built for the obligations Australian firms answer to.

Donna365 is designed to support the professional and regulatory duties your firm already carries.

  • Australian Privacy Principles
  • Legal Profession Uniform Law obligations
  • Trust Accounting requirements
  • Professional Indemnity Insurance standards
  • Client confidentiality duties

Donna365 is designed for the most sensitive legal work. Security is not a feature. It is the foundation.

Contact

Book a discussion and demo.

Bring one real workflow and we will show how Donna365 can support matter work, governed AI, reporting and rollout inside Microsoft 365.

  • See the product flow, not a generic slide deck.
  • Talk through your firm size, practice area and current bottleneck.
  • Discuss design-partner fit, rollout path and next steps.
Discussion and demo

Tell us what you want to see

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Prefer email? Write to sales@lexoslabs.com.au. Do not include confidential matter detail in this form.