Open surfaces,
not a connector catalogue.
LexVio integrates the way infrastructure does — a REST API, signed webhooks, your identity provider, and a deployment target you choose. Everything on this page is a shipping capability with its own feature page, not a logo wall.
- ✓REST over HTTPS, Bearer-token auth
- ✓HMAC-signed webhook payloads
- ✓SAML 2.0 + SCIM 2.0 against your IdP
- ✓Air-gapped on-prem option
Developer
Move data in and out of LexVio from your own systems.
Per-org API key. Programmatic access to scanning, search, and reporting.
Standard REST, Bearer-token auth, JSON in and JSON out. Per-key scopes (read-only, scan-only, full), rate limiting per key, and an OpenAPI spec.
Outgoing webhooks on key events — scan-complete, alert-fired, deadline-hit.
HMAC-signed JSON POSTed to an HTTPS endpoint you register. Failed deliveries retry with exponential backoff for 24 hours, then wait in a replay queue.
Immutable record of every action across the workspace.
Enterprise plans support outbound webhooks for audit events — wire into any HTTP endpoint your SIEM exposes.
Identity & SSO
Your directory stays the source of truth for who has access.
SAML 2.0 single sign-on against any compliant identity provider.
Tested with Okta, Azure AD, Google Workspace, Auth0 and OneLogin. Just-in-time provisioning, force-SSO enforcement, and domain-based auto-routing.
Automated user creation, updates, and deprovisioning from your IdP.
SCIM 2.0 endpoint with bearer-token auth and rotation. IdP groups map to LexVio workspaces; leaver events deprovision the same day. Runs with or without SAML.
Channels
Reach the AI from where the document already is.
Forward a contract clause from WhatsApp; get a risk read in seconds.
One-time number linking in settings. Worth knowing: messages traverse Meta's infrastructure, so for full confidentiality use the app directly.
Voice queries to the AI from desktop or mobile. Indian-English and Hindi.
Text response by default, with a toggle for synthesised audio. Transcripts are stored in your conversation history under the same retention policy as other content.
Right-click any PDF or Gmail attachment and send it to the scanner.
Chrome, Edge and Firefox. Not built yet — scope and permissions will be documented here before it ships.
Deployment
Where LexVio runs, and whose name is on the output.
Air-gapped install via Helm chart. No outbound telemetry when AIR_GAPPED=true.
Runs inside your own Kubernetes, licensed by periodic RS256-signed heartbeats. Inference can route to a self-hosted LLM instead of Anthropic.
Apply your firm's logo, colours, and footer to exported risk reports.
Configured once per workspace, applied to every later export in PDF and DOCX. Enterprise plans can drop the 'powered by LexVio' footer entirely.
What is not on this page
There is no marketplace of one-click app connectors. If you need LexVio inside an existing matter-management, ERP, or ticketing system, the route is the Intelligence API plus webhooks — you subscribe to the events you care about and we POST signed JSON to your endpoint.
The identity providers named above are the ones our SAML and SCIM implementations are tested against. Anything SAML 2.0 or SCIM 2.0 compliant should work; tell us what you run and we will confirm before you commit. See security and trust for the controls behind these surfaces, and the full feature inventory for everything else LexVio ships.
Wiring LexVio into something?
Start with the API.
Per-org keys, scoped access, and outbound webhooks on every event that matters.