Security

Leygo is a product of Agendos LLC, a company registered in Wyoming, USA. Questions about this page: privacy@leygo.ai.

Encryption

TLS 1.2+ in transit. Encryption at rest, covering the database, object storage and backups.

Tenant isolation

Each firm’s data lives in a logically isolated tenant. Every read and every write is scoped to the firm that made it, at the service boundary rather than in the user interface, so there is no cross-tenant access to reach for.

AI

No firm or client data — conversations, documents, emails, voice notes or knowledge bases — is ever used to train, retrain, fine-tune or improve any AI model, ours or a third party’s. Leygo uses enterprise AI endpoints under commercial terms that prohibit the use of your data for model training.

Access controls

No Leygo staff access your firm’s data without your permission for a specific support request, and every such access is logged. Production credentials are segregated, and Customer data is never copied into a development or test environment.

Subprocessors

We notify Customers before adding or replacing a subprocessor that processes Customer data.

Data residency

Customer data is stored in the United States.

Export and deletion

Export everything on demand, in standard formats (ZIP / PDF / JSON), at any time.

You have a 30-day window after cancellation to export everything. All Customer data is then permanently deleted from active systems within 14 days after your export completes, or 45 days after cancellation at the latest — whichever comes first. Backups are purged on a rolling basis within 35 days thereafter, and written confirmation of deletion is provided on request.

Responsible disclosure

Report a vulnerability to security@leygo.ai. We will acknowledge a report within 3 business days. Please give us a reasonable window to fix an issue before disclosing it, and do not access, modify or delete data belonging to anyone else while investigating.