FAQ: Security in Contract Management and Document Intelligence

Where are contracts stored?: Our database is hosted on Amazon Web Services.
Does Contract Management and Document Intelligence provide data backup?: Yes, we back up data stored in the Contract Management and Document Intelligence storage environment, but clients that host their data in their own environments are responsible for their security and backup. We don't copy data stored outside of the Contract Management and Document Intelligence or VPC locations.
How secure is Contract Management and Document Intelligence and what measures are in place to keep my documents secure?: We don't store or maintain personally identifiable data or credit card information. Contract Management and Document Intelligence has a security program based on ISO 27001 standards, and a formal, corporate-wide information security policy that is subject to regular reviews and updates on areas such as encryption, incident response, and patch management.

Security Measure
Description

SOC 2 Certified
Contract Management and Document Intelligence is SOC 2 certified and uses automated monitoring.

Vulnerability Management
We carry out regular penetration tests by third parties and use continuous internal scans to monitor for vulnerabilities.

Data Control and Monitoring
Contract Management and Document Intelligence has continuous monitoring in place, including network and host intrusion detection. We keep full audit logs and conduct vulnerability scans regularly.

Encryption Standards
Data is encrypted at rest and in transit (AES-256).

Access Control
Contract Management and Document Intelligence allows clients to create and manage access privileges for users such as administrators and read-only users. Administrators can also manage individual users' access to specific documents and folders.

Bounty Program
We run a bounty program that offers rewards to white-hat hackers when they discover vulnerabilities in Contract Management and Document Intelligence.

Security Measure	Description
SOC 2 Certified	Contract Management and Document Intelligence is SOC 2 certified and uses automated monitoring.
Vulnerability Management	We carry out regular penetration tests by third parties and use continuous internal scans to monitor for vulnerabilities.
Data Control and Monitoring	Contract Management and Document Intelligence has continuous monitoring in place, including network and host intrusion detection. We keep full audit logs and conduct vulnerability scans regularly.
Encryption Standards	Data is encrypted at rest and in transit (AES-256).
Access Control	Contract Management and Document Intelligence allows clients to create and manage access privileges for users such as administrators and read-only users. Administrators can also manage individual users' access to specific documents and folders.
Bounty Program	We run a bounty program that offers rewards to white-hat hackers when they discover vulnerabilities in Contract Management and Document Intelligence.