Security at ContractVerfAi
Your contract documents are sensitive. We built our infrastructure with security as the foundation, not an afterthought.
Your Data, Your Eyes Only
We never use your contracts to train AI models, and we never sell your data to anyone — not to advertisers, not to data brokers, not to anyone. Full stop.
Encryption at Rest
All documents encrypted with AES-256 via AWS S3. Database encrypted with AWS RDS encryption.
Encryption in Transit
All connections use TLS 1.2+. HTTPS enforced everywhere with HSTS headers.
WAF Protection
AWS WAF with managed rule sets protects against SQL injection, XSS, and other OWASP Top 10 threats.
Zero-Knowledge Auth
Passwords are never stored. AWS Cognito manages authentication with SRP protocol and optional TOTP MFA.
Auto-Delete
Your contract documents are automatically deleted from storage after 90 days.
Private Network
Our database and AI processing infrastructure runs in a private VPC, inaccessible from the public internet.
Secrets Management
All API keys and credentials stored in AWS Secrets Manager, never in code or environment variables.
24/7 Monitoring
CloudWatch alarms alert our team instantly on errors, unusual activity, or infrastructure issues.
Infrastructure
Built entirely on AWS (us-east-1). Aurora Serverless v2 · S3 · CloudFront · Cognito · Lambda · SQS · SES · WAF · Secrets Manager
Found a security issue? security@contractverifai.com