Security built on trust.

We run entirely on Microsoft Azure and use Microsoft Cloud Defender for continuous monitoring and threat detection. All data is encrypted at rest with Azure SQL TDE and in transit with TLS. We follow secure development practices including code reviews, static analysis, and regular security testing. Access control is handled through SSO with SAML, and our multi-tenant architecture ensures logical isolation between customers.

All data is stored within the European Union on Microsoft Azure, fully compliant with GDPR. You also have the option to store documents on your own infrastructure — such as SharePoint or Google Drive — so your files never have to leave your own environment if you prefer.

We use Single Sign-On (SSO) with SAML, so your team can log in with their existing company credentials. Organization administrators can centrally manage access and enforce security policies without requiring additional passwords.

All data at rest is protected by Azure SQL Transparent Data Encryption (TDE). All data in transit is encrypted with TLS across every channel. Encryption keys are managed through Azure Key Vault, keeping them securely separated from your data.

No. Your data is never used to train or improve any machine learning or language models. Your contract data belongs to you, and we treat it accordingly. All data is stored and processed within the EU, and we can provide full transparency on our data handling at any time.