Security & Privacy

We understand that construction contracts contain commercially sensitive information — pricing, insurance details, liquidated damages clauses, and trade secrets. Protecting your data is not an afterthought; it is foundational to everything we build.

Bank-Grade Encryption

Every contract you upload is encrypted at rest using AES-256 encryption — the same standard used by banks and government agencies. All data transmitted between your browser and our servers is protected with TLS 1.2+ encryption, ensuring your documents cannot be intercepted in transit.

Strict Access Control

Your company operates in a complete silo. No other company, user, or administrator can see your contracts, analysis results, or payment claims. Access is controlled through role-based permissions — only your Company Admin can add team members, and each user sees only the contracts assigned to their company. When you share a contract with a lawyer for review, they receive a secure, time-limited link.

We Never Train AI on Your Data

This is a firm, non-negotiable policy. Your contracts, clauses, pricing, and analysis results are never used to train, fine-tune, or improve any AI model — ours or anyone else's. When our AI analyses your contract, the content is processed in a stateless session and is not retained after the analysis is complete. Your data exists solely for your benefit.

Secure Cloud Infrastructure

ContractGuard runs on enterprise-grade cloud infrastructure with automatic backups, redundancy, and monitoring. Our systems are designed for high availability and are regularly updated with the latest security patches. File storage uses dedicated, access-controlled cloud storage buckets with server-side encryption enabled by default.

Data Handling & Retention

You own your data. We store your contracts and analysis results only for as long as your account is active and you choose to retain them. You can delete individual contracts at any time, which removes the files from our storage. If you close your account, all associated data is permanently deleted within 30 days.

Questions or Concerns?

If you have any questions about how we handle your data, or if you believe you have found a security issue, please contact us at [email protected]. We take every report seriously and will respond promptly.

Last updated: June 2026. This policy applies to all ContractGuard NZ services.