Your contracts are the most sensitive documents you own.

We treat them that way. Here is exactly what happens to a document once it reaches us.

Data protection

Locked down from the moment it arrives.

Encrypted the whole way, opened only by the person working on it, and never fed to an AI model as training material.

Managed cloud infrastructure

The site, the intake service and your files run on established, professionally managed cloud platforms — the same class of infrastructure business software runs on. Nothing sits on a personal laptop or in a consumer file-sharing account.

Encrypted in transit and at rest

Everything you send travels over TLS and is stored encrypted. Access to the systems holding it is protected by credentials only we hold, and nothing sensitive is sent as an unprotected email attachment once your file is open with us.

Never used to train AI models

The AI step runs through a paid business API under terms that exclude using submitted content to train models. Your commercial terms do not end up as somebody else’s training data.

Need-to-know access

Only the contract expert assigned to your file opens it, plus where strictly necessary a second expert for quality control. Every expert is under a written confidentiality obligation, and the platforms we use record who opened what.

Retention and deletion

Uploaded documents and generated drafts are deleted automatically 180 days after the request. You can ask us to delete them sooner, at any point, and we confirm it in writing.

GDPR by default

We act as a processor under a written agreement, with a defined lawful basis, defined purposes and no secondary use. Every sub-processor we rely on is named, is under its own data processing agreement, and we will confirm the current list before you send us anything.

The human control

A person is accountable for every output.

The strongest safeguard is not technical. AI produces a first pass; a named contract expert reads it, corrects it and puts their name to it. Nothing reaches you on the strength of a model's confidence alone.

No output is delivered without human validation
Model suggestions are checked against the governing law you are actually under
Where the answer is genuinely uncertain, we tell you it is uncertain
We will decline work that falls outside our competence

Questions we get asked

Security FAQ

Who can see my contract?

Only the contract expert assigned to your request, and where strictly necessary a second expert for quality control. Both are bound by written confidentiality obligations. Access is logged.

Is my contract used to improve your AI?

No. Your document is never used to train AI models — the AI step runs through a paid business API under terms that exclude training on submitted content. What we do build from our work is an internal playbook of clause positions and fallback wording — written by our experts in generic terms, never containing your commercial details, party names or figures.

Where exactly is my data stored?

On managed cloud services that we hold under contract — hosting, document storage, the AI API and transactional email — not on personal devices or consumer accounts. Some of those providers are US-headquartered, so part of the processing happens outside the EEA under the standard safeguards for such transfers. We name every one of them in our privacy policy, and we will confirm the current list in writing before you send anything.

Can I have everything deleted?

Yes, at any time. Send the request to info@contractloop.eu and we delete the documents and confirm in writing. We retain only what we are legally required to keep for invoicing.

Do you sign an NDA before we start?

Happily — ours or yours. Given what we do, it would be a strange thing to refuse.

What if the AI gets something wrong?

That is precisely why a human validates every file. The AI pass is a first draft, not the deliverable. If an error still reaches you, tell us and we correct it at no cost.

Still have a question about how we handle your data?

Ask before you send anything. We would rather answer ten questions up front than have you wondering afterwards.

Ask us directly