Security and compliance
The Legora Outlook Add-in operates using the same secure backend architecture, infrastructure, and platform safeguards—including security guarantees and data residency controls—as the main Legora application.
Crucially, the add-in is designed with limited permissions to operate only on the single email currently being viewed or composed, and it cannot read or modify any other items in the user's mailbox.
All data flowing into Legora is encrypted both in transit (TLS) and at rest (AES 256), and is managed according to your organization's standard retention and role-based access control policies.
Admin deployment (organization‑wide)
The Admin can deploy the add‑in for everyone by following these steps:
Admin role: Global admin or Exchange admin in the Microsoft 365 admin center
Install via either
Microsoft 365 admin center → Settings → Integrated apps, or
Exchange admin center → Add‑ins
Search for "Legora Outlook Add-in" in Microsoft AppSource, select the version that matches your processing requirements e.g. Legora Outlook Add-in (EU processing)
Alternatively, it is also possible to install the Add-in via manual upload of the XML manifest.
If you require XML manifest documents, please request them by reaching out to Legora.
Choose who in the organization can access the add‑in, review permissions, and confirm deployment
Installation Limitations
If your organisation is running an Exchange Online version 15.2 or lower, or Exchange on-premises, then it is unable to support API version 1.8 which required by the Legora Outlook Add-in. Please review our compatibility guide.
We are working on a version that will work with API 1.5 though there will be limitations to its functionality, specifically its ability to work with and provide attachments.
Where to find the add‑in
Microsoft AppSource:
Go to Legora Addin in Microsoft Appsource (EU), Legora Addin in Microsoft Appsource (APAC) or Legora Addin in Microsoft Appsource (US).