What your IT and Legal reviewers will ask

Contract records, uploaded documents and the nightly backups are stored in Cloudflare's European Union region. Documents are served only through the app, behind sign-in. Each client's data is kept apart from every other client's.

Everything is encrypted in transit (HTTPS only) and at rest (AES-256 for the database, documents and backups), and passwords are stored only as one-way hashes.

A backup of the database is taken every night and the document store is mirrored to it; restoring from a backup has been tested.

The app's AI features, the clause-by-clause review, the proposals of wording and the Ask screen, send the text each task needs to Anthropic's API, which runs the Claude models. No other AI provider receives your data.

Ask us for the processing details and our data processing terms before your review. If your policy requires another AI provider, we can work with that provider instead.

Two-step sign-in, by authenticator app or by a code sent by email, can be made mandatory for every user. A company can also sign its users in through its own identity provider, with single sign-on.

Every user has a role, Buyer, Legal, Sales or Administrator, and the server checks it on every request: a buyer cannot accept a clause the playbook rejects, and only Legal can record a sign-off.

A supplier's users see the clauses you send them in a round, with your proposed wording and your note, and where each other clause of their contract stands: accepted, or still under review. They never see your risk levels, your playbook, your template or your internal comments. The same rule applies to the Word file and the Excel worksheet a round can carry.

Every decision on a clause, every comment, approval and sign-off is recorded with who took it and when. Each negotiation and each contract keeps its own trail.

Connectors for e-signature through DocuSign, Adobe Acrobat Sign and Yousign, switched on per client with that client's own provider account. Word and Excel round trips with suppliers. A calendar export of every notice date and renegotiation window. A connection to your ERP, so that suppliers and contracts stay the same in both systems.