We built LexCap.io because we lived the problem.

Our founding team has spent careers as Chief Legal Officers, Chief Compliance Officers, and corporate finance executives — helping companies grow from pre-seed through IPO, across every jurisdiction and deal type imaginable.

And every single time, the process was the same. Templates from one place. Compliance stack from another. A law firm on retainer for the deals. A consultant for the regulatory questions. A data room tool for due diligence. A separate tool for signing. And months — sometimes years — of fragmented, expensive, repetitive work that should have taken weeks.

Founders spend months closing rounds that should have taken weeks. We watched companies pay outside counsel rates for work that a well-configured platform could handle in minutes. We watched the legal and compliance space sit largely unchanged while every other business function got smarter, faster, and more integrated.

So we built the platform we wished had existed. One place for your templates, your compliance stack, your Playbook, your deals, your consultants, and your signatures — from day one to closing book. Contract lifecycle management, transaction management, compliance management, and human professional expertise — all in one place. No switching between tools. No retainers. No surprises.

We are a team of disruptors — tired of the lack of innovation in the legal and compliance space, and committed to building something that makes legal and compliance processes faster, smarter, and more accessible for founders and growing companies at every stage of their journey.

About Layla

Layla.ai was named after a real corporate law clerk — someone who spent decades doing exactly this work, behind the scenes of deals that shaped companies and careers.

The name is a reminder that behind every document, every deal, and every signature, there's a person who cares about getting it right. Layla.ai carries that standard into every draft, every review, and every closing.

What we believe

Legal and compliance should be a competitive advantage, not a cost centre. The companies that move fastest are the ones that have their legal house in order from day one — not the ones scrambling for outside counsel when the deal is already on the table.

AI and human expertise are better together. AI handles the speed and scale. Human professionals bring the judgment, the relationships, and the nuance that no model can replicate. LexCap.io is built on both.

One platform is better than many tools. Every time a founder has to switch between Word, a signing tool, a data room, a compliance tracker, and a separate CLM, they lose time, context, and money. We built LexCap.io to end that.

Get in touch

General enquiries: hello@lexcap.io

Legal and compliance: legal@lexcap.io

Privacy: privacy@lexcap.io

1. Who we are

LexCap.io is operated by LexCap Venture Advisory Group FZ LLE, a free zone limited liability entity incorporated in the United Arab Emirates. We are the data controller responsible for the personal data you provide when using the LexCap.io platform.

Privacy enquiries: privacy@lexcap.io
Data subject requests: privacy@lexcap.io

2. What we collect

Account data

When you register: full name, email address, password (stored as a salted hash — we never see your plain-text password), organisation name, and primary jurisdiction.

Platform usage data

As you use the platform: Layla.ai conversation history, documents you upload or generate, Playbook content, compliance policies, template content, signing envelope data, and credit transactions.

Technical data

IP address, browser type and version, operating system, log data (pages visited, features used, timestamps), and cookie data.

Consent records

Timestamp and IP address of your platform entry disclaimer acceptance, and the version of Terms of Use and Privacy Policy you accepted.

3. AI processing — important disclosure

Anthropic's infrastructure is located in the United States. This constitutes a transfer of personal data outside the UAE and, where applicable, outside the EEA. We have implemented appropriate safeguards including standard contractual clauses.

LexCap.io does not use your documents, Playbook, or conversation content to train any AI model.

If you include third-party personal data (such as counterparty details) in documents or conversations, you are responsible for ensuring you have an appropriate legal basis for processing that data and for informing those individuals that their data may be processed through AI systems.

4. How we use your data

Performance of contract

Creating and managing your account; processing Layla.ai requests; storing documents, Playbook, and policies; processing payments; facilitating consultant bookings and signing envelopes.

Legitimate interests

Security monitoring — detecting fraud, abuse, and unauthorised access; platform analytics to improve the product; error monitoring and debugging.

Legal obligations

Retaining records required by UAE law; responding to lawful requests from law enforcement or regulatory authorities; maintaining disclaimer and Terms acceptance records.

Consent

Marketing emails — you can withdraw consent at any time by clicking "unsubscribe" or emailing privacy@lexcap.io. Non-essential cookies.

5. Data sharing & processors

We share your data only with these processors, only to the extent necessary to provide the platform:

We do not sell your personal data. We do not share your data with advertisers.

6. Data retention

7. Your rights

Depending on your jurisdiction, you have the right to: access your data, correct inaccuracies, request erasure, restrict processing, receive your data in portable format, object to processing, and withdraw consent for consent-based processing.

Most data management is available self-service via Settings → Data & Privacy in your account. To exercise any right, email privacy@lexcap.io. We will respond within 30 days.

8. Security

We implement the following technical and organisational security measures:

• AES-256 encryption at rest for all stored documents and personal data
• TLS 1.3 encryption in transit for all data transmissions
• Row-level security in Supabase — your data is logically isolated from other users
• Bcrypt password hashing — we never store or see your plain-text password
• API keys stored as server-side environment variables — never in client-side code
• Regular security monitoring through Sentry
• Staff access to personal data restricted on a strict need-to-know basis

In the event of a personal data breach likely to result in risk to your rights, we will notify the relevant supervisory authority within 72 hours and notify affected individuals without undue delay.

To report a security issue: security@lexcap.io

9. International transfers

Your personal data may be transferred to and processed in countries outside the UAE and EEA, primarily the United States, in connection with our third-party processors (Anthropic, Stripe, Dropbox Sign, Sentry). We ensure all such transfers are subject to appropriate safeguards including standard contractual clauses and processor compliance programmes.

10. Cookies

Essential cookies (no consent required)

Session authentication cookies, CSRF protection tokens, and load balancing cookies. These are necessary for the platform to function and cannot be switched off.

Analytics cookies (consent required)

PostHog analytics — feature usage and anonymised session data to help us improve the platform.

Preference cookies (consent required)

Theme preference (light/dark mode) and UI preferences.

We do not use advertising cookies. We do not allow third-party advertising on the platform.

11. Contact & complaints

For privacy enquiries: privacy@lexcap.io

We aim to respond within 30 days. If you are not satisfied with our response, you have the right to complain to:

• UAE: UAE Data Office — dataoffice.ae
• DIFC: DIFC Commissioner of Data Protection — dataprivacy.difc.ae
• EU residents: Your local data protection authority