Security & trust

Security your review team can verify.

ReportsVault holds sensitive legal, vendor, financial and HR information. Access is role-based, every action is logged, and your Administrators govern how data is used.

  • Role-based access
  • Every action logged
  • Never used to train AI
Security team monitoring systems in an operations room
Certifications

Certified. Independently audited.

Recognized standards for information security, quality and business continuity, with controls your review team can check.

SOC 2 Type IISecurity & availability
ISO 27001:2013Information security
ISO 9001:2015Quality management
ISO 22301:2019Business continuity

Encryption

Data encrypted in transit and at rest.

Access control

Role-based, configured by your Administrators.

Audit logging

Every action logged and attributable.

Access and identity

Who can reach what, and how.

Access is granted by role, not by person, so leavers and movers are handled by changing a role rather than hunting down permissions.

  • Single sign-onThrough your identity provider (SSO).
  • Automated provisioningProvisioning and deprovisioning via SCIM.
  • Role-based access controlConfigured by your Administrators.
  • Record-level permissionsFor sensitive matters and cases.
Library of legal records
Data handling

Retention and purge, on your terms.

Data is encrypted in transit and at rest. Retention periods are configured per record type, and purge runs on that schedule rather than on request.

  • Retention periodsSet by your Administrators.
  • Scheduled purgeWith the action written to the audit log.
  • ExportYour data, on request and at exit.
Shelves of archived records in binders
AI processing

Contract Intelligence, and the two modes.

Contract Intelligence, AI-assisted contract review, checks contracts against your organization's own standards and returns grounded, cited findings for human review.

Full Analysis

Uses the complete document context.

Extra Privacy

Keeps more of the work inside your environment, with reduced analysis depth.

Your Administrators choose the mode per workflow.

Visible

Every AI suggestion is shown to a person. Nothing is applied silently.

Attributable

See what was suggested and who accepted it, on the record.

Reversible

Any AI-assisted change can be undone by your team.

No training on your data

Guaranteed by enterprise agreements with our AI providers.

Your data is never used to train any AI model. That is guaranteed by enterprise agreements with our AI providers, and your organization controls its data and how it is used. AI assists the review; every final decision rests with your team. Contract Intelligence provides workflow support, not legal advice.

Auditability

Every action, on the record.

Workflow history is attached to the record rather than reconstructed from mailboxes. An auditor sees who did what, when, and on what version.

  • Tamper-evident activity logs
  • Approval decisions recorded against the request
  • Document versions retained with the record
  • Independently audited each year
Document with version history and change attribution
Deployment

Cloud or on-premise.

Deployment models are aligned to your requirements rather than to ours. The control model is the same in both.

  • Cloud hostingIn an enterprise-grade environment.
  • On-premise deploymentWhere your requirements call for it.
  • Environment separationProduction and testing kept apart.
Fibre network equipment in a server rack

Start with one workflow. Then expand.

A walkthrough built around your department's real process.

Prefer to talk first? Contact our team