Security and confidentiality
Uploading a commercial contract to any third party is a real decision. These are the controls ContractDesk commits to, drawn from its published Privacy Policy rather than written for this page.
How is my document protected in transit and at rest?
TLS 1.2 or higher for all data transmission, and encryption at rest for stored documents and personal data.
Who inside ContractDesk can open my contract?
Access is role-based and limited to personnel with a legitimate need. Internal systems and user accounts use multi-factor authentication. Lawyers working on your account are under NDA before they see anything.
How long do you keep my contract?
Uploaded documents are retained for the duration of your subscription plus a 30-day export window, then deleted within 90 days. Billing records are kept for 7 years because Indian tax law requires it. Technical logs are kept 90 days; security logs one year.
Is my contract used to train AI models?
No. ContractDesk’s agreements with its AI model providers are designed to prevent your document data being retained or used to train those providers’ general-purpose models.
Where is my data stored?
Primarily in India. Where data is processed outside India — for example by an AI model provider or cloud infrastructure — the Privacy Policy sets out the safeguards that apply.
What happens if there is a breach?
Affected customers are notified without undue delay and within 72 hours of ContractDesk becoming aware, with the nature and scope of the breach and the steps taken. CERT-In reporting obligations are followed.
Who else touches my data?
Cloud infrastructure, AI model providers, and the payment processor. All sub-processors are contractually required to process data only as ContractDesk directs and to maintain appropriate security standards. ContractDesk does not sell personal data or customer content.
ContractDesk does not hold a SOC 2 or ISO 27001 certification and makes no such claim. The controls above are the commitments set out in our Privacy Policy; if you need audit evidence for a procurement process, contact privacy@contractdesk.in.