Skip to content

Privacy, compliance and data

Privacy & compliance

Settings → Privacy & compliance describes how your data is protected and gives each person their data rights.

Settings, Privacy & compliance

  • Compliance status: controls aligned with SOC 2, GDPR and security best practice.
  • Encryption at rest: contract content is encrypted with AES-256-GCM, with a unique nonce per value. It is never stored in plain text.
  • Audit trail: every create, update, delete, sign-in, approval and signing action is recorded with time, user, IP address and changed fields. Entries are never modified or deleted.
  • Export my data (GDPR Article 20): downloads your personal data.
  • Delete my account (GDPR Article 17): anonymises your name, email and other personal details and signs you out. You confirm with your password. Contracts and their history stay with the workspace.

Data

Settings → Data shows storage use and lets admins restore deleted items.

Settings, Data

  • Storage: how much space attachments use, including earlier versions. On a trial, uploads stop at the trial's storage limit.

Deleted contracts and files

  • Deleted contracts: uploaded signed contracts deleted in the last 30 days, with their signed copies. Select Restore to bring one back.
  • Deleted files: attachments deleted in the last 30 days.

After 30 days, deleted items are removed permanently.

Deleted contracts