Data Integrity
Your contracts. Your data. Full stop.
Enterprise legal work demands impeccable data handling. ContractIQ is built on clear data-protection parameters.
Enterprise legal work demands impeccable data handling. ContractIQ is built on clear data-protection parameters.
Analysis and Cedric run on Anthropic's Claude model through Amazon Bedrock, in AWS data centres in the UK and the EEA — never the cheaper worldwide route. Amazon Bedrock does not use what is sent to the model for training, and the model's developer never sees it. We have switched on Amazon's zero-data-retention setting in five of the seven regions the EU route can use; the Legal Centre names them. Your original files never leave your browser at all.
In meeting transcripts, names, email addresses and phone numbers are replaced with labels — Participant A, Participant B — in your browser, before the transcript is saved or analysed. The key that puts the names back stays in your browser tab and is never saved or sent.
An Enterprise option for compliance-focused environments. Normally the text read from your documents is saved to your workspace so contracts can be searched and re-analysed. With Zero-Retention on, it is never saved at all: it stays in your browser tab for the analysis, and only the extracted detail and the analysis are kept. The database itself refuses to store it.
Nothing you upload — documents, playbook rules, revisions or metadata — is used to train, refine or evaluate any AI model. The AI runs on Amazon Bedrock, which does not use what is sent to it for training and does not pass it to the model's developer, Anthropic. The sub-processor list names everyone who handles your data.
AES-256 encryption at rest and TLS encryption in transit, provided by Supabase and Amazon Web Services. Those are our suppliers' protections rather than our own, and we describe them as such. Our own part: back-office database functions — the ones that grant credits, change plans or settle charges — can be called only by our server, never from a browser.
ContractIQ uses PostgreSQL Row Level Security (RLS) to enforce account isolation at the database layer. Every query automatically filters data by the authenticated user's account ID. No user can query, update, or delete another account's data through the app or its API — the database enforces it, not the interface. Your contracts, analyses, and credit ledgers are visible only to your team.
ContractIQ is built on Supabase, a managed PostgreSQL service on AWS infrastructure. Your data is held in a PostgreSQL database in London (AWS eu-west-2), backed up automatically every day with seven days of backups kept. All data at rest is encrypted with AES-256. The server functions that handle your documents are pinned to London too, wherever you are when you use the app. US hosting can be arranged for Enterprise customers who need it.
Business accounts with individual sign-ins, admin-managed membership and viewer/member/admin roles — so the right people see the right contracts.
Plain-English terms and a privacy policy written to be read, not skimmed. ContractIQ is a screening aid, and says so everywhere it matters.
Security descriptions on this page reflect the production architecture design. Formal certifications (e.g. SOC 2, ISO 27001) will be listed here as they are attained — none are currently claimed.