What is Lexa, in one sentence?+
A security document exchange: you publish your compliance documents once, grant access instead of emailing files, and collect the same documents from the vendors you rely on — with every grant on the record.
Which documents can I publish?+
Anything a security review asks for: SOC 1 and SOC 2 reports, ISO certificates, penetration test summaries, completed security questionnaires, DPAs, subprocessor lists, policies and insurance certificates. If it's a file you keep re-sending, it belongs here.
How is this different from a trust center?+
Lexa combines a published trust page with document requests, access rules and an access record. Requests route to an owner, and renewed reports become available to everyone with active access when you upload them. The same exchange also collects your vendors' documents.
Does Lexa answer security questionnaires for me?+
No. Lexa moves documents between companies; it doesn't fill in forms or write answers. You can publish a questionnaire you've already completed so you never send it twice, but there is no answer library or AI-drafting.
Is this a vendor-risk or GRC tool?+
No. Lexa has no risk scores, tiers, control mapping or assessments, and it isn't trying to replace your GRC platform. It collects your vendors' documents. When a vendor also publishes through Lexa, renewed versions become available through your active access. You decide how to assess and use them.
What does 'stop resending' actually mean?+
You don't have to email the same document again to someone who has active access in Lexa. When you upload a renewed report, they can view the new version there. Documents can also be downloaded as recipient-stamped copies, with downloads recorded in Lexa. A downloaded copy is separate from access to the document in Lexa.
Do my requesters or vendors need a Lexa account?+
No. Requesters view the documents you grant through a link tied to them. Vendors who aren't on Lexa can send documents through an upload portal without creating an account. When a vendor also publishes through Lexa, you get access to the documents they share with you, including renewed versions they publish while your access is active.
Who controls what gets shared?+
You do. Each document has access rules you set: open, request-to-view, NDA required, or approval by a named owner. You can set an expiry or revoke access in Lexa. Downloaded copies carry a stamp identifying the recipient they were issued to.
What if an auditor or customer insists on an actual file?+
They can have one. Where your access rules allow it, someone with active access can download a copy stamped with their name, and the download is recorded in Lexa. Access is the default because it stays current when you upload a renewed report; a downloaded copy is a snapshot of the document at that moment.
What does it cost?+
Early access is free. The first 100 companies on the waitlist lock launch pricing for their first year. We'll publish pricing before general availability; joining the waitlist doesn't commit you to anything.
What happens after I join the waitlist?+
We invite companies in small waves and email you when early access is available to your company. If you'd like to shape the product, mention the design-partner group when you sign up. It's a smaller, hands-on group with a direct line to the team.