Skip to main content

​
Security and compliance

The Outlook Add-in follows the same security model as the rest of Legora:
  • The add-in uses the same backend, infrastructure, security guarantees, and data residency controls as the main Legora application.
  • Data that enters Legora is encrypted in transit with TLS and at rest with AES 256. Legora manages that data under your organization’s retention and role-based access policies.
These controls apply with the Agent on or off:
  • The add-in reads and writes the email a person is viewing or composing, including its attachments.
When the Agent is on, the add-in can search the connected mailbox:
  • Mailbox search uses Outlook Mail and Calendar. It is separate from the add-in. An admin turns the integration on for the organization. Each person connects their own Microsoft 365 account. The Agent searches only that person’s mailbox.
    • Each search returns up to 25 messages. The default is 10. A search can miss messages that match the request.
    • A result shows the subject, sender, date, and a short preview. The Agent can open a matching message and read the full text.
    • The Agent chooses the search words. There is no meeting filter. It can look for meeting invitations, proposed calls, and time changes.
    • The Agent can suggest meeting times for the attendees that person names. Suggestions use the calendar on that same account when Outlook Calendar is on.
When the Agent is off, the add-in uses that open email:
  • Drafts, summaries, and replies use the email a person is viewing or composing.
  • That includes the message, its attachments, and the thread shown in that email.
  • A draft also includes the subject, recipients, and attachment names.
  • The add-in does not search the rest of the mailbox.
  • It does not suggest meeting times for other people.

​
Admin deployment (organization‑wide)

The Admin can deploy the add‑in for everyone by following these steps:
  • Admin role: Global admin or Exchange admin in the Microsoft 365 admin center
  • Install via either
    • Microsoft 365 admin center → Settings → Integrated apps, or
    • Exchange admin center → Add‑ins
  • Search for Legora for Outlook (Global) in Microsoft AppSource.
    • Alternatively, it is also possible to install the Add-in via manual upload of the XML manifest.
    • Download the XML manifest, including the Global file, from Outlook Add-in manifests.
  • Choose who in the organization can access the add‑in, review permissions, and confirm deployment
  • If your network restricts outbound traffic, open connectivity.legora.com from your network to check that it allows the Outlook Add-in domains

​
Installation limitations

These limits apply when you deploy the Outlook Add-in for your organization. The published manifests require Mailbox requirement set 1.5 or higher to install. Mailbox requirement set 1.8 or higher is required to read and write email attachments. On a lower requirement set, the add-in runs with limited functionality and cannot use attachments. Exchange Online is the supported primary mailbox. A Gmail, IMAP, or POP primary mailbox cannot install or run the add-in. On-premises Exchange is not a supported primary mailbox. See the Outlook Add-in compatibility guide.

​
Where to find the add‑in

Regional add-ins are only for organizations that still sign in to a regional Legora site, such as app.eu.legora.com. If your organization does, install both Legora for Outlook (Global) and the regional add-in for your site:
Last modified on November 6, 2026