Security is our top priority.

ClearContract's approach to security is multi-faceted, emphasizing both preventive measures and rapid response capabilities. This includes strong authentication and access control, with unique user identifiers and hardware-backed FIDO2 multi-factor authentication for all personnel. ClearContract's secure development lifecycle incorporates best practices in coding, code reviews, and both static and dynamic application security testing. Network segmentation, firewalls, and Web Application Firewalls (WAFs) protect against unauthorized access, while security monitoring and intrusion detection systems guard against potential threats.

We provide full transparency on our infrastructure and data flows – reach out and we will be more than happy to assist you with any information about our data security processes.

We leverage Single-Sign-On (SSO) with SAML to authenticate customers. This way, organization administrators can centrally control who gets access to ClearContract and enforce security policies. Users can leverage their firm's credentials and do not need to remember an additional password.

We utilize Microsoft Azure Cloud, with all data storage occurring within the European Union for full GDPR compliance. We also support data storage in other countries upon request.

Unlike certain competitors, no data saved by our customers will be used to train or improve our machine-learning and large language models. Furthermore, we encrypt all customer data at rest and in transit, and can support customer-managed encryption keys upon request. We store and process all data within the European Union.