NDPA Compliance & Data Processing

1. Compliance Commitment

LexCore is committed to fulfilling data processor requirements under the Nigeria Data Protection Act 2023 (NDPA), which superseded the Nigeria Data Protection Regulation 2019 (NDPR), together with general data security best practices. We ensure that all personal data processed on our platform is handled lawfully, transparently, and securely.

2. Data Processor Role

When law firms or in-house legal departments upload contract files containing personal information (such as party names, addresses, or identifiers), LexCore acts as a Data Processor, while our customer acts as the Data Controller. We process this information strictly under the controller’s instructions.

3. Security Standards

We implement strict Technical and Organizational Measures (TOMs) to secure data:

• AES-256 encryption for files stored in the document vault.
• Encrypted database fields and row-level tenant isolation.
• Automatic PII scrubbing to replace names, emails, and financial amounts with placeholders during AI analysis.

4. Data Audits & Contact

Data controllers can request records of our processing activities, sub-processor changes, and data protection impact assessments by contacting our compliance desk: compliance@lexcore.ng.