How we protect your contracts, access, and infrastructure.
24/7Monitoring & alerts
Role-BasedAccess permissions
EncryptedIn transit and at rest
We apply layered controls to keep your legal documents protected at every stage,
from upload and processing to storage and access management.
Data Protection
Encrypted transfer, encrypted storage, and secure backup retention.
Access Control
Role-based permissions, session controls, and account verification.
Infrastructure Security
Monitoring, threat detection, patch management, and network controls.
Incident Response
Defined response runbook, impact assessment, and user notification flow.
Security FAQ
Access is limited to your authenticated account and tightly scoped platform services required to run analysis and keep the product operational. We use least-privilege controls and do not sell or share your uploaded contract content with advertisers or data brokers.
Contract data is protected in transit and at rest with layered controls around storage, access, and infrastructure monitoring. We also maintain access logging and operational safeguards to reduce unauthorized access risk and support incident investigation if needed.
Your documents are not shared with third parties for marketing, resale, or advertising. Limited subprocessors may be used only to provide core platform functionality under contractual confidentiality and security obligations.
When you delete an analysis from history, the related document and report are removed from your account view and scheduled for deletion from active storage. After removal completes, the file is no longer available for reopening through the product interface.
Contact our security team at security@clauseonai.com with reproduction steps and impact details. We review responsible disclosures, prioritize verified issues, and follow a documented response process.
