The privacy is the product.
Lexpactum only works if people can speak freely. So confidentiality isn’t a feature bolted on. It’s how the system is built, and what we test it against.
Positions are private by default
A partner’s positions and copilot thread are theirs. No other partner, and no facilitator, can read them. The default is closed, not open. There is nothing to misconfigure.
Visibility is enforced on the server
What a person may see is decided from the rules on the server, never in the browser. Before a round closes, the system holds no readable position content for anyone, a property we test for, not just claim.
Anonymity has a floor
Aggregated results are only shown once enough distinct people have contributed, so a position can’t be traced back by elimination. Below that floor, nothing is revealed.
Cases are isolated
Every record is scoped to its case and organization. One case cannot reach another’s positions, messages or reports. Isolation is applied on every query, not left to the caller.
Sign-in without passwords
You enter through a single-use link sent to your email. There is no password to reuse or leak; a link expires quickly and works once.
No real data where it doesn’t belong
Demonstrations run on synthetic data. Real case content, credentials and transcripts never enter source control, screenshots or logs.
Lexpactum is early. We describe what the system does today, not badges it hasn’t earned. As the platform moves toward wider use, formal controls and audits will be added and named here honestly.