The mobile app on the stores
Android first, through a staged Play rollout; iOS after App Store review, which runs on its own clock. The app is with testers today, and every desk surface already has a phone screen.
Resources
Roadmap.
What we're building next.
Three horizons — what is in testing now, what is planned next, and what is named for later — each traced to a written plan. A statement of intent, not a commitment.
This page is a statement of intent, not a commitment. Order and dates move as we learn; nothing here is sold until it appears on the changelog. Reviewed 8 October 2026 · 28 items.
Now
In testingIn testing — built, in testers' hands, not yet released.
The update gate that ships with it
Each store build is told by the server whether it is current — a nudge for a normal release, an update-by date with a grace period when a change is coming, and only past that date a retired build — separately for Android and iOS, so one store's review never locks the other's users out.
Over-the-air fixes after the store launch
Once the first store build is out, a fix that touches only the app's code and assets can reach installed phones without a store release. Anything native still goes through the store, and the update gate stays.
Next
PlannedPlanned and sequenced. Each line is an outcome we intend to ship, not a promise of when.
Published jurisdiction profiles for GB, IE, US-CA, DE and the EU
The verification adapters exist and the profiles are generated; publication is a named reviewer signing off on what the product asserts about a country's law. Five reviewed profiles reach the product, one signature each.
Counsel review of the privacy law packs
Each of the fourteen law packs in Privacy & Data Protection read against the official text by counsel, item by item, and marked verified only then. Until a pack is reviewed it stays marked drafted, and the product says so.
Sign from the vault
E-signature wired properly — an envelope from the vault document, recipients, a verified webhook, the signed copy stored as the executed version and the contract moving to executed — or the connector comes off the page. A vendor decision comes first.
Legal hold on documents
A hold on a document or a matter that the retention purge respects. Per-category retention that purges is live; a hold on documents is not.
Client portal: watermarked downloads and view-only links
A document a client downloads from the portal carries a watermark, and a share can be opened to read without signing in. Asking for changes on a draft re-opens its drafting step.
Playbook redlining inside Word
The redliner as a Word add-in, so a negotiation happens in the document your counterparty sent.
One playbook
The negotiation ladder, the firm's house style and the confirmable checklist merged into a single playbook the redliner, the coach and the analysis all read.
The risk report as PDF or Word
The report you read on screen, exported with its evidence, for the person who does not have a login.
Share minutes and delete a recording from the desk
The PDF and Word export the phone already has, and Delete audio — which removes a recording and keeps the transcript, minutes and tasks — behind buttons on the desk meeting page. The retention setting that purges old audio is already live.
Meeting permissions and sharing
Choose who in the organisation can open a meeting, and share one deliberately rather than by default.
Tasks that repeat, and attachments on a task
A weekly filing as one task that comes back, and the file it needs on the task itself.
Your deadlines in your own calendar
An ICS feed of tasks and obligations first; calendar sync after.
A verdict on every citation the assistant emits
Verified, ambiguous or unresolved stamped server-side on copilot answers — not only on the hover card — and a reference that cannot be resolved refused rather than shown.
Provenance on every answer
The model and prompt version recorded on each copilot and Nexus answer, as the risk report already does; and tools on by default on the desk assistant.
A measured accuracy number, published
Evaluation sets for Vio, Nexus, task parsing and minutes run on every change, and the figure published per feature.
Your firm's prompt library inside Vio and drafting
The prompts your admins keep in AI Administration offered where you write — in Vio and the drafting studio. Today the library stores them; nothing reads them yet.
An assistant that acts, behind approval
Write tools behind an approving run step, so the assistant does the work and a person signs it before it lands.
Cancel that cancels, plan switch, annual billing, seats
Cancel from the billing page and it cancels at Stripe; switch plans without a dead end; pay annually; add seats on self-serve.
Backups on, with a rehearsed restore
The backup job that exists today (off by default) enabled as the second copy, a restore drill on record, and a published recovery objective.
Two-factor sign-in
A second factor at sign-in, which an access policy can then require. An access policy can record the requirement today; nothing enforces it yet.
An independent penetration test, then SOC 2
An independent assessment, SOC 2 Type I, then Type II; and a status page fed by real uptime.
Offline edits on the phone
A task created or changed without signal is queued and synced when the phone is back online.
Later
NamedNamed, not scheduled.
Vault ingestion from a Drive folder
Point the vault at a Google Drive folder and every new document is analysed as it arrives.
Slack and Teams delivery, with a daily digest
Alerts and a morning digest where your team already talks.
A meeting bot for Teams and Zoom
Invite LexVio to a call and the transcript, minutes and tasks follow.
Nothing on this page is shipped. What has shipped, dated, is on the changelog; an item moves there when it is in the product, not before.