Security is not a feature — it is how we build. Every document, message, and analysis is encrypted at rest and in transit.
All user-generated content — documents, analyses, chat messages, clauses — is encrypted with AES-256 before it hits disk. TLS 1.2+ protects data in transit. No plaintext at rest, ever.
All data is processed within the EU. We provide data processing agreements, honor right-to-erasure requests, and support full data portability. See our subprocessor list at /subprocessors.
Infrastructure and processes designed to meet SOC 2 Type II criteria. Continuous monitoring, access controls, and change management — with third-party audit on the roadmap.
Centralize access management with enterprise single sign-on. SAML 2.0 integration with your identity provider — Okta, Azure AD, Google Workspace, and others.
Every action is logged: who did what, when, on which document. Immutable records for compliance reviews, internal investigations, and regulatory reporting.
Choose where your data lives. EU data residency by default, with additional regions available for enterprise customers on request.
Read our security documentation or talk to our team about your requirements.
Start your trial