Security you can trust.
Your contracts contain your most sensitive business information. We treat security as a core product feature, not an afterthought.
Encryption at rest
Every document and all metadata is encrypted at rest with AES-256, the industry standard for data-at-rest encryption.
Encryption in transit
All communications use TLS 1.3. API endpoints enforce HTTPS. No data ever travels unencrypted.
Tenant isolation
Every request is scoped to your organization and enforced on every read and write — so your data is never visible to any other customer.
Edge protection
WAF, DDoS mitigation, and bot protection on every request. Per-tenant rate limits; abuse is handled at the edge before it reaches your data.
SOC 2 Type II
Independently audited controls across security, availability, and confidentiality. SOC 2 report available under NDA on request.
Data residency
Choose where your data lives. Deploy in US, EU, or Australia regions to meet local data sovereignty requirements.
Infrastructure & compliance
How it’s built.
Cloud infrastructure
Clment runs on Microsoft Azure, using enterprise-grade managed services for data, document storage, search, and AI inference — each with built-in redundancy and high availability.
Authentication & access control
Authentication is handled by Contract Eagle Identity Server using industry-standard JWT tokens with JWKS validation. Role-based access control ensures users can only access their organisation’s data. API keys use scoped permissions with rotation support.
AI data handling
Contract content sent to AI models is processed on Microsoft Azure’s hosted AI inference. Your data is never used to train models, never stored by the AI provider, and never shared with third parties. Processing is ephemeral — once a response is generated, the input is discarded.
Questions about security?
We’re happy to discuss our security practices, provide documentation for your vendor review process, or arrange a technical deep-dive with your security team.
Contact security team