NextStep LexIntelligent Immigration Case Processing System
Join the waitlistWaitlist
§ Security Vault

The controls behind
every case we touch.

NextStep Lex is built to the security standard immigration attorneys and their clients should expect. Our full control set is aligned to the AICPA’s SOC 2 Trust Services Criteria — with formal SOC 2 Type II attestation underway. Everything below is a control we’ve implemented or scoped for our launch cohort.

SOC 2-aligned
Controls mapped to the AICPA Trust Services Criteria
Encrypted in transit & at rest
TLS 1.2+ for every request, AES-256 for stored data
US-based cloud hosting
All infrastructure and data residency in the United States
Data deletion after approval
Case data auto-purged within 6 hours of final signature
117
Total controls
71
In place today
46
Planned
16
Control categories

Need to see more?

Full policy documents, sub-processor list, penetration test summary, and evidence artifacts are available under NDA for firms evaluating NextStep Lex.

Request the evidence pack →