Security
How we protect your data
Your contracts are never stored
Contract text is processed in real time and discarded immediately after your diagnosis is generated. We do not save, log, cache, or retain any contract text on our servers. No document data is written to any database or file system at any point.
Real-time analysis, no persistence
When you paste or upload a contract, the text is sent to our server, forwarded to the AI for analysis, and the result is returned to your browser. The contract text exists in memory only for the duration of the API call and is not persisted anywhere. The PDF report is generated entirely in your browser — we never see or store the PDF file.
Secure data processing
All data transmitted between your browser and our servers is encrypted using HTTPS (TLS). Our servers are hosted on Vercel, which provides enterprise-grade infrastructure security. The AI analysis is performed by Anthropic (Claude), which does not train on API inputs and processes data under strict security protocols.
Email addresses
If you choose to download a PDF report, we collect your email address. Email addresses are stored securely and used only to send you the report. We never sell, rent, or share email addresses with third parties. You can request deletion of your email at any time.
GDPR compliance
ClauseCheck is built and operated from Luxembourg, in the European Union. We are fully subject to the General Data Protection Regulation (GDPR). You have the right to access, rectify, or delete any personal data we hold about you. Since we do not store contracts, there is no document data to access or delete.
No tracking cookies
ClauseCheck does not use advertising or tracking cookies. We use privacy-friendly analytics (Plausible) which is cookieless and GDPR-compliant by default. The only cookie used is for storing your cookie consent preference.
Report a security concern
If you discover a security vulnerability or have concerns about how your data is handled, please contact us immediately at hello@clausecheck.eu. We take all security reports seriously and will respond within one business day.