New: search every contract by what it means, not just the words.See search

TRUST CENTER

Your contracts are confidential.
Here’s how we keep them that way.

Where your data lives, who can see it, and what the AI does with it. Plainly stated, so you can check it.

Your region, your choice

Choose the EU or the US when you create a workspace. Your contracts are stored and analyzed only there.

Where your data lives →

Never used to train AI

Your documents are analyzed for you and for nothing else. No model is trained on them.

How the AI works →

Encrypted everywhere

Every connection is encrypted, and so is everything stored: servers, databases and backups.

Infrastructure →

Backed up continuously

Every change is copied to protected backup storage in your region, and restores are tested.

Backups →

Only the right people

One set of access rules for every list, search, report, export and assistant answer.

Access and sign-in →

Yours to take

Export every list to Excel and every file as a ZIP, whenever you want.

Your data →

WHERE YOUR DATA LIVES

Your contracts stay
in the region you choose.

ContractSorted runs as two separate installations, one in the EU and one in the US, each with its own servers, database, backups and AI. You choose the region when you create a workspace, and the workspace and everything in it stays there.

WhatWhere it’s kept
Your contracts and every file you uploadYour region, on Microsoft Azure
The text read from them, the AI analysis and the search indexYour region, on Microsoft Azure
Key dates, commitments, properties, comments and the activity logYour region, on Microsoft Azure
Backups of all of the aboveYour region, on Microsoft Azure
Your sign-in account: name and email addressAuth0
Emails we send you, such as reminders that name a contract, and documents you email in, on their way to your workspaceBrevo
Payments and invoicesStripe

The EU region runs in Microsoft Azure’s Sweden Central data centers, the US region in a US Azure region. Sign-in, email and payments are shared by both regions.

INFRASTRUCTURE

Built on Microsoft Azure.
Locked down by default.

Microsoft Azure

Each region runs on its own servers in Microsoft Azure data centers, with the application, its database and its backups in the same region.

Encrypted in transit

Every connection uses HTTPS with TLS 1.2 or newer, and browsers are told never to connect any other way.

Encrypted at rest

Servers, databases and backups are kept on encrypted Azure storage.

Continuous backups

Every change is copied to backup storage in the same region, protected against deletion. We can restore to any moment, and we test restores regularly.

No database on the internet

Databases accept connections only from the application on the same server. Server access is limited to named people with personal keys.

Kept up to date

Security updates are installed automatically, and every release goes to both regions together.

ACCESS AND SIGN-IN

Only the right people.
Everywhere in the product.

One set of access rules decides every list, search result, dashboard figure, report, export and assistant answer. There is no back door through search or reporting.

Workspaces kept apart

Each company’s contracts live in their own workspace. Every request is checked against the workspace and the person making it.

Roles and teams

Admins, members and read-only viewers. Access by team, by document type or by person, at edit, view or no access.

Confidential contracts

Restricted to named people, even if that excludes admins. Emergency access by an admin is recorded and the named viewers are told.

A complete audit log

Uploads, changes, decisions, deletions and exports, with who and when. Searchable and exportable for admins.

Secure sign-in

Sign-in is handled by Auth0, a dedicated identity service, and only verified email addresses can be invited or receive reminders.

Careful email

Reminders only ever go to people who can see the contract in question. Mail sent in from unknown senders waits for review instead of filing itself.

AI

AI that works for you.
Not on your data.

Azure OpenAI in your region

Documents are analyzed by Microsoft’s Azure OpenAI service in your workspace’s region. Microsoft doesn’t use them to train its models. We send them with storage turned off; Microsoft may keep a request for at most 30 days to check for misuse, then deletes it.

Sources, not guesses

Every finding carries a quotation from your contract, checked against the page before it’s shown. You can always see where an answer came from.

People decide

AI findings are suggestions. Nothing becomes a task or a reminder without a person approving it, and your corrections are never overwritten.

YOUR DATA

Yours to keep,
yours to take.

Export everything

Every list and report to Excel or CSV, and your original files as a ZIP with a folder per contract.

Mistakes you can undo

Deleted contracts wait 30 days in the trash with their files, commitments and comments before they’re removed for good.

Used only to run ContractSorted

Your contracts are processed to provide the service to you and for nothing else. We don’t sell data or show advertising.

COMMON QUESTIONS

What your
IT and legal ask.

Do you sign a data processing agreement?

Yes, for every customer on a paid plan. Our data processing agreement (DPA) sets out how we process your contracts on your behalf and lists the service providers we use. Once you’ve subscribed, a workspace admin can ask us for it and we’ll send it for signing.

Can you answer our security questionnaire?

Yes. Send it to us and we’ll answer it in writing.

Can we move a workspace to the other region?

Choose carefully when you sign up: a workspace stays in its region. If your needs change, talk to us.

How do I report a security issue?

Write to security@contractsorted.com. Details are also in our security.txt. We welcome reports made in good faith and won’t take legal action against them.

YOUR CONTRACTS. YOUR COMMITMENTS. SORTED.

Stop paying for contracts
you meant to cancel.

Upload your first contracts today. In a few minutes you’ll know every renewal date, notice period and obligation, and who is taking care of each one.

No credit card. Unlimited users. Set up in minutes.