AI LEGAL TECH · ISTANBUL, TÜRKİYE

Legal workflow automation, with human review.

I design one legal workflow with your team, build it into your existing systems and evaluate it through a measurable pilot. Permissions, human review and data handling are agreed in writing before work starts.

Asım Serdar Yılmaz · LEXSAS

Every step once. Every record kept.

One legal matter, worked end to end at a supervised desk A legal pad. Under a header that carries the matter number, loose sheets snap into a named FILE. Inside a dashed MANDATE cage three lines are written while the sources, memory and tools slots stand ready. The work crosses to a REVIEW sheet, a person signs, a compliance bar fills, and the run closes on the RECORD ledger. MATTER 2026-117 FILE TYPE OWNER CLOCK STATUS MANDATE SOURCES MEMORY TOOLS REVIEW COMPLIANCE RECORD EVERY STEP, ONCE

WHO IT IS FOR

Two desks, one operating standard

Two desks with their own workflows pass the same three controlsTwo lanes run left to right, the in-house legal team above and the law firm below, each carrying its own kind of work. Three gates cross both lanes at the same points: the mandate, the named lawyer and the record. Each lane meets each gate with the same square, green where the named lawyer signs.IN-HOUSE LEGAL TEAMEACH DESK, ITS OWN WORKFLOWSLAW FIRMMANDATENAMED LAWYERRECORDTHE SAME CONTROLS AT BOTH DESKS
The anatomy of a workflow: five stations, an agent lane and a person lane AGENT INTAKE A request arrives and gets a name FILE A type, an owner and a clock MANDATE What it may read, keep and do REVIEW A named lawyer signs it RECORD What ran, who signed, under which control PERSON
  1. Intake: a request arrives and gets a name.
  2. Named file: a type, an owner and a clock.
  3. Mandate: what the agent may read, keep and do; set by a person.
  4. Review: a named lawyer signs.
  5. Record: what ran, who signed, under which control.

WORKS ALONGSIDE

The tools you already run

LEXSAS resells none of them and claims no certified connector to any of them. What it designs is the workflow, the mandate and the record that run across whatever you have. If none of these tools exist, the workflow still runs; the file, the mandate and the record are then set up in your own environment, in a spreadsheet and the file system.

Türkiye, courts and e-government

  • UYAP, Avukat Portal
  • CELSE, e-Duruşma
  • UETS e-Tebligat, KEP, e-imza

Research

  • Lexpera, Kazancı
  • Legalbank, Kanunum
  • mevzuat.gov.tr, Yargıtay and Danıştay decision search
  • UYAP Emsal, Anayasa Mahkemesi decisions

Contract lifecycle

  • Ironclad, DocuSign CLM
  • Icertis, Agiloft, Sirion
  • Juro, LinkSquares

Documents

  • iManage, NetDocuments
  • SharePoint

Matter and spend

  • LawVu, Onit
  • SimpleLegal, Brightflag, Clio

AI assistants

  • Harvey, CoCounsel
  • Lexis+ with Protégé, Legora, vLex Vincent
  • Jupytr, LegalEngine, SmartHukuk, Harmonity AI

The record is the result. Provable is the standard.

THE RECORD

Annotated record schema: an example structure

WHAT THE RECORD CONTAINS

It shows how the fields are organised; it holds no real matter and no work result.

File identifier and type
Named before anything reads the file.
Mandate version in force
The version a person approved for this file type.
Sources actually read
Linked to the run that opened them.
Reviewer’s name and decision
Written after the review, with a timestamp.

Entries are written as the run happens and are append-only; a correction is a new entry naming the one it corrects. Section 5 of the operating standard says what that means in practice.

HOW THE RECORD GROWS

Four record entries stack in order while a correction names the first entry and a signature closes the last.

Append only record: four entries, one correction, one signatureFour ledger entries stack under matter 2026-117. Entry 3 names entry 1 as the one it corrects while entry 1 stays in place. A signature closes entry 4.MATTER 2026-117APPEND ONLYFILE OPENED09:41MANDATE V3 LOGGED11:03CORRECTS 0114:22REVIEWER SIGNS16:05OLD ENTRY STAYS

APPROACH

The working process

Every engagement runs the same four steps on one workflow; there is no separate licence to buy.

That is the difference a managed workflow makes: when an auditor or the board, or at a firm the client or the bar, asks afterwards, you can show who touched what, when, under which control. Whether the hours actually move is a question the pilot answers with your baseline, not a promise I make in advance.

One run of matter 2026-117, and where its record answers who, what, when and under which controlInside a dashed frame marked mandate v3, the agent reads three sources and assembles its output. The output crosses the frame to a named lawyer, who signs in green, and only then is it sent. Each step drops a square onto the record line with its time. The questions from the note sit on what answers them: under which control, mandate v3; what, the sources read; who, the named lawyer; when, the timestamp. The record is written as the run happens.MANDATE V3AGENTSOURCES READSENTNAMED LAWYERTIMESTAMPED11:1211:1916:0516:06RECORD · MATTER 2026-117WRITTEN AS THE RUN HAPPENSUNDER WHICH CONTROL?WHO?WHAT?WHEN?
  1. Scope

    One workflow, one call of about an hour. The matter type, the volume, the systems, the person who will sign, and the timing. No charge, no obligation.

    Output: the written scope.

  2. Design

    The stages, the agent’s mandate, the reviewer step, the record fields, the data handling and one measure are written down and corrected by you before anything is built.

    Output: the design brief and the evaluation set.

  3. Supervised pilot

    The workflow sends nothing without the approval of a named lawyer, and it runs against a baseline from your own work. The measure is read weekly; the critical error class is counted.

    Output: weekly readings and a review date.

  4. Handover and evaluation

    The evaluation set is rerun and the result is a pass or a fail. Continue, change or stop; all three are legitimate and the decision is yours.

    Output: the workflow definition, the playbook, the mandate register, the evaluation set and every run record, exportable.

The method, in twelve sections

Asım Serdar Yılmaz
Istanbul · EN / TR

FOUNDER

Who does the work

I am Asım Serdar Yılmaz, founder of LEXSAS. More than twenty years of legal and regulatory work, most of it in-house, including Amazon and eBay, after private practice at White & Case, sit behind this work. Inside a legal team I co-developed a generative AI tool on AWS Bedrock and ran its pilots. I write everything here as someone who has been through that sequence once: where to start, whether to build or buy, and how responsible adoption actually runs. Alongside workflows I advise on AI governance, regulated digital markets and legal operations.

  • Legal tech and AI workflow automation
  • AI governance and regulatory compliance
  • GenAI adoption for legal teams
  • Data protection and data sovereignty
  • E-commerce and platform regulation
  • Competition and digital markets

From intake automation to digital market governance, each engagement is built to end with controls the team can run day to day, without me in the room.

The six focus areas, in full

WRITING

Two essays to start with

All insightsAll LinkedIn posts

FAQ

Questions about cost, data and how this starts

Where the data sits: inside your environment, and kept out of model trainingA card marks your environment, in the country you choose. Inside it a spine runs from the sources, fixed in advance, through every run, which is logged, to the record, kept for the period agreed with you. A dashed path leaves the card and stops at a bar short of model training: provider terms and account settings keep the content out.YOUR ENVIRONMENTIN THE COUNTRY YOU CHOOSESOURCESEVERY RUNRECORDFixed in advanceLoggedKept for the periodagreed with youMODEL TRAININGKept out by provider termsand account settings

HOW IT STARTS

Built with you on a fixed design; there is no separate licence to buy. Each workflow has a fixed shape: the same stages, the same mandate structure for the agent, the same record at the end. That shape is the product. What is built with you is the fit: your matter types, your playbook, your systems and the people who sign. The result runs in your environment and stays yours.

Every engagement starts with one workflow, scoped in a short call: the matter type, the team, the systems it touches and the reviewer who will sign. Pricing follows that scope rather than a per-seat licence list, and the fee is agreed for each engagement, in writing, before any work begins. The call ends in a written scope, and no work starts before it is written.

Workflows are designed to run inside your own environment, and you choose which country that environment is in. If the data staying in Türkiye is a requirement, it is written into the scope before the pilot and we check together that the chosen provider meets it, as a decision made for each engagement rather than a global promise. The sources an agent may read are fixed in advance and logged on every run. The design brief names the provider terms and the account settings that keep your content out of model training, and the pilot does not start until they are in place and someone on your side has read them. Retention, log access and deletion are settled in the same document, so every record kept means kept for the period agreed with you, in your systems. This site itself sets no cookies, runs no analytics and loads nothing from a third party.

The scoping call ends with a written scope, a named reviewer, one measure agreed in advance and a date for the pilot review. During the pilot the measure is read weekly and the critical error class is counted; at the end the evaluation set, drawn from your own files, is rerun, so a pilot set up that way ends in a pass or a fail rather than an impression. The decision is yours: continue, change or stop. The duration follows the scope, and the date is written down during the call. Whatever the outcome, the workflow definition, the playbook, the mandate register, the evaluation set and the run records are yours, in an exportable form. The exit terms are written into the pilot rather than negotiated at the end.

WHAT THIS IS

LEXSAS designs, builds with your team and pilots legal workflows for in-house legal teams and law firms: intake, contract review, compliance operations, research and citation verification, drafting and AI governance. The market calls this legal automation. Legal automation usually describes handing a repetitive task to a machine. Legal workflow automation also defines where the work comes from, who reads it, where a lawyer’s signature is expected and what is recorded at the end: the routine path a matter takes, drawn as named stages with an owner, a clock and a record at each one. LEXSAS builds the second kind. Each workflow is built into the systems the team already uses, runs first as a supervised pilot and leaves a record that shows who decided what. What runs afterwards is yours, in your own systems.

For an in-house team, intake and triage, because it is the one that produces the baseline the other three in-house workflows are later measured against. For a law firm, research and citation verification, because a wrong reference is a professional problem before it is a client problem, and because the check is easy to measure. If a different queue is the one actually hurting, we start there instead. The rule is one workflow, not the right workflow chosen in advance by me.

No. LEXSAS is not a law firm, gives no legal advice and provides no legal representation; nothing on this site creates an attorney-client relationship. Your lawyers draft, decide and sign; the workflow assembles the material, applies the controls you set and keeps the record. Behind it is Asım Serdar Yılmaz, founder, based in Istanbul: more than 20 years in legal and regulatory work, most of it in-house, including Amazon and eBay, after private practice at White & Case. He founded LEXSAS in Istanbul in 2026. Inside a legal team he co-developed a generative AI tool on AWS Bedrock and ran its pilots; the detail is on the about page. LEXSAS also advises on AI governance, regulated digital markets and legal operations, in English and Turkish.

I design the workflow with your team and run the first pilot with you. Your lawyers do the legal work throughout, and nothing leaves a workflow unsigned. When an agent gets something wrong, the named reviewer is accountable for the output: the mandate says what the agent could read, keep and do, and the record says who signed and when, both written before the run, not reconstructed after it. LEXSAS is accountable for the design of the workflow and for saying plainly where it should not be used. What runs after the pilot runs in your systems, with your team.

DATA, LAW AND CONTROLS

Your organisation is the data controller and makes the compliance call. Lawful basis, minimisation, retention and logging are decided with the workflow, in the design brief, not in a review afterwards. Any cross-border transfer question is answered in writing, with the mechanism named, before a pilot starts. What the workflow adds is that the call is documented and repeatable.

This is no longer a theoretical question in Türkiye. In a Kısa Dalga interview of 17 June 2026, a lawyer described a petition filed at a first-instance court that carried Yargıtay citations with fabricated case numbers, and said the court wrote to the bar and the prosecutor the same day; those are the interviewee’s statements, not a court finding. Verification is therefore a gate, not a step. Only the allowed sources are read: the firm’s archive, legislation and the case-law databases the firm subscribes to. Every citation is checked against its own primary text before it reaches a lawyer; for court citations that is the decision’s own text, Yargıtay, Danıştay and Constitutional Court decisions included. The check and its result go into the run record. A citation that cannot be matched to a source the agent was allowed to read is flagged for the reviewer and does not leave the workflow on its own. Responsibility stays with the lawyer who signs; the log is what lets that lawyer show the check was made.

No. A LEXSAS workflow runs across the tools a team already has: UYAP and e-Tebligat on the Turkish side, and contract lifecycle, document management, matter management and AI assistant tools in a corporate stack. LEXSAS resells none of them and claims no certified connector; it designs the workflow, the mandate and the record that run across them. A team with none of those tools can still run the workflow, with the file, the mandate and the record set up in a spreadsheet and the file system in its own environment, and can still export everything it produced.

The Union of Turkish Bar Associations published its advisory guide on AI use by lawyers on 28 August 2026: professional secrecy, personal data, the client’s interest, final legal reasoning and professional responsibility cannot be delegated to AI. Those are the controls a LEXSAS workflow writes down before a pilot starts, with one addition: a written mandate for an agent that acts, not only a prompt that answers. On the EU side, the AI Act’s Article 50 transparency duties apply from 2 August 2026. The Digital Omnibus, Regulation (EU) 2026/1744, in force since 27 July 2026, moves stand-alone high-risk duties to 2 December 2027 and product-embedded ones to 2 August 2028. The register a team keeps for the first is the register the second will ask for.

CONTACT

Let’s talk.

The first step is a short call about one workflow. What to send is on the contact page.

serdar@lexsas.com

Advisory on AI governance, regulated digital markets and legal operations, and speaking invitations.