Snapshot 29771
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Security at Spellbook Spellbook is the AI infrastructure for contracts trusted by over 5,000 in-house legal teams and law firms in over 80 countries. From intake to insight, it analyzes, reviews, and stores every contract. This Trust Center provides current and prospective customers with access to our security documentation, compliance certifications, and security practices. To see the organizations that trust Spellbook, visit our Customers Page.Opens in new tab [email protected] Privacy PolicyOpens in new tab Compliance SOC 2 Type II TX-RAMP Level 2 HIPAA GDPR EU AI ACT Resources View all Security Documentation SOC 2 Type II - 2026 HIPAA Type I - 2026 EU AI Act Opinion Letter View 7 more LLM Agreements OpenAI DPA OpenAI Zero Data Retention (ZDR) Amendment Anthropic AI Services Agreement and DPA Anthropic Zero Data Retention Certificate Policies Information Security Policy Code of Conduct Human Rights Working Policy Health and Safety Policy View 5 more Vendor Signed BAAs Amazon Web Services (AWS) BAA Anthropic BAA OpenAI BAA MongoDB BAA View 1 more Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 17 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View 11 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 31 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Data collected and retention Customer personally identifiable information OpenAI and Anthropic Zero Data Retention (ZDR) Credit card information (Handled by Stripe as Payment Processor) Subprocessors View all Amazon Web Services • Cloud Provider Canada Primary hosting provider for the Spellbook application, file data and other services. MongoDB Atlas • Database Canada Primary database used by the Spellbook application. OpenAI • Large Language Model (LLM) Provider US Large Language Models (LLM) and other API services used by the Spellbook application. Anthropic • Large Language Model (LLM) Provider US Large Language Models (LLM) and other API services used by the Spellbook application. FAQ View all Updates View all Privacy Updates to Subprocessor List Published June 4, 2026 The following changes are being made to our subprocessor list: Addition: Raindrop - Provides observability and monitoring functionality for Large Language Models (LLMs) that support application features. Privacy Updates to Subprocessor List Published April 5, 2026 The following changes are being made to our subprocessor list: Addition Reducto (Associate) - Provides document data extraction capabilities in Spellbook Associate. Removal SpiceDB - Provides service for fine grained access (FGA) controls within the Spellbook application. Braintrust - Provides service for evaluations of different LLM providers and used for customer support. Update WorkOS - Provides customer identity and access management services within the Spellbook application. Privacy Update to Subprocessor List Published March 5, 2026 The following changes are being made to our subprocessor list: Removal: Startquestion (Customer Optional) - Provides survey features in the Spellbook application. Privacy Update to Subprocessor List Published January 21, 2026 The following changes are being made to our subprocessor list: Addition: Oso - Provides service for fine grained access (FGA) controls within the Spellbook application. Removal: Retellio - Customer call recording and analysis. Read more about Updates to Subprocessor List Security at Spellbook Spellbook is the AI infrastructure for contracts trusted by over 5,000 in-house legal teams and law firms in over 80 countries. From intake to insight, it analyzes, reviews, and stores every contract. This Trust Center provides current and prospective customers with access to our security documentation, compliance certifications, and security practices. To see the organizations that trust Spellbook, visit our Customers Page.Opens in new tab [email protected] Privacy PolicyOpens in new tab Compliance SOC 2 Type II TX-RAMP Level 2 HIPAA GDPR EU AI ACT Resources View all Security Documentation SOC 2 Type II - 2026 HIPAA Type I - 2026 EU AI Act Opinion Letter View 7 more LLM Agreements OpenAI DPA OpenAI Zero Data Retention (ZDR) Amendment Anthropic AI Services Agreement and DPA Anthropic Zero Data Retention Certificate Policies Information Security Policy Code of Conduct Human Rights Working Policy Health and Safety Policy View 5 more Vendor Signed BAAs Amazon Web Services (AWS) BAA Anthropic BAA OpenAI BAA MongoDB BAA View 1 more Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 17 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View 11 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 31 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Data collected and retention Customer personally identifiable information OpenAI and Anthropic Zero Data Retention (ZDR) Credit card information (Handled by Stripe as Payment Processor) Subprocessors View all Amazon Web Services • Cloud Provider Canada Primary hosting provider for the Spellbook application, file data and other services. MongoDB Atlas • Database Canada Primary database used by the Spellbook application. OpenAI • Large Language Model (LLM) Provider US Large Language Models (LLM) and other API services used by the Spellbook application. Anthropic • Large Language Model (LLM) Provider US Large Language Models (LLM) and other API services used by the Spellbook application. FAQ View all Updates View all Privacy Updates to Subprocessor List Published June 4, 2026 The following changes are being made to our subprocessor list: Addition: Raindrop - Provides observability and monitoring functionality for Large Language Models (LLMs) that support application features. Privacy Updates to Subprocessor List Published April 5, 2026 The following changes are being made to our subprocessor list: Addition Reducto (Associate) - Provides document data extraction capabilities in Spellbook Associate. Removal SpiceDB - Provides service for fine grained access (FGA) controls within the Spellbook application. Braintrust - Provides service for evaluations of different LLM providers and used for customer support. Update WorkOS - Provides customer identity and access management services within the Spellbook application. Privacy Update to Subprocessor List Published March 5, 2026 The following changes are being made to our subprocessor list: Removal: Startquestion (Customer Optional) - Provides survey features in the Spellbook application. Privacy Update to Subprocessor List Published January 21, 2026 The following changes are being made to our subprocessor list: Addition: Oso - Provides service for fine grained access (FGA) controls within the Spellbook application. Removal: Retellio - Customer call recording and analysis. Read more about Update to Subprocessor List Security at Spellbook Spellbook is the AI infrastructure for contracts trusted by over 5,000 in-house legal teams and law firms in over 80 countries. From intake to insight, it analyzes, reviews, and stores every contract. This Trust Center provides current and prospective customers with access to our security documentation, compliance certifications, and security practices. To see the organizations that trust Spellbook, visit our Customers Page.Opens in new tab [email protected] Privacy PolicyOpens in new tab Compliance SOC 2 Type II TX-RAMP Level 2 HIPAA GDPR EU AI ACT Resources View all Security Documentation SOC 2 Type II - 2026 HIPAA Type I - 2026 EU AI Act Opinion Letter View 7 more LLM Agreements OpenAI DPA OpenAI Zero Data Retention (ZDR) Amendment Anthropic AI Services Agreement and DPA Anthropic Zero Data Retention Certificate Policies Information Security Policy Code of Conduct Human Rights Working Policy Health and Safety Policy View 5 more Vendor Signed BAAs Amazon Web Services (AWS) BAA Anthropic BAA OpenAI BAA MongoDB BAA View 1 more Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 17 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View 11 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 31 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Data collected and retention Customer personally identifiable information OpenAI and Anthropic Zero Data Retention (ZDR) Credit card information (Handled by Stripe as Payment Processor) Subprocessors View all Amazon Web Services • Cloud Provider Canada Primary hosting provider for the Spellbook application, file data and other services. MongoDB Atlas • Database Canada Primary database used by the Spellbook application. OpenAI • Large Language Model (LLM) Provider US Large Language Models (LLM) and other API services used by the Spellbook application. Anthropic • Large Language Model (LLM) Provider US Large Language Models (LLM) and other API services used by the Spellbook application. FAQ View all Updates View all Privacy Updates to Subprocessor List Published June 4, 2026 The following changes are being made to our subprocessor list: Addition: Raindrop - Provides observability and monitoring functionality for Large Language Models (LLMs) that support application features. Privacy Updates to Subprocessor List Published April 5, 2026 The following changes are being made to our subprocessor list: Addition Reducto (Associate) - Provides document data extraction capabilities in Spellbook Associate. Removal SpiceDB - Provides service for fine grained access (FGA) controls within the Spellbook application. Braintrust - Provides service for evaluations of different LLM providers and used for customer support. Update WorkOS - Provides customer identity and access management services within the Spellbook application. Privacy Update to Subprocessor List Published March 5, 2026 The following changes are being made to our subprocessor list: Removal: Startquestion (Customer Optional) - Provides survey features in the Spellbook application. Privacy Update to Subprocessor List Published January 21, 2026 The following changes are being made to our subprocessor list: Addition: Oso - Provides service for fine grained access (FGA) controls within the Spellbook application. Removal: Retellio - Customer call recording and analysis.