Snapshot 48558
Normalized text
Scripts and page chrome removed; this is what change detection compares.
What does this mean in concrete terms? ISO 27001 certified We have placed safety issues at the heart of both our software and internal development. Tomorro is ISO 27001 certified. Annual penetration tests. Physical security Tomorro is committed to guaranteeing the physical integrity of your data: employees, physical security, data access, hosting and networks. Access to the Tomorro premises is protected by individual badges. Tomorro's premises are monitored 24 hours a day by an alarm and video surveillance system. Visitors are directly supervised by a Tomorro member for the duration of their visit. Hosting Tomorro strictly controls access to your data, both online and in-house, to ensure that your documents are protected from modification. And for added security, we make daily backups. Your production data (infrastructure and data) is hosted exclusively in France, on AWS in the eu-west-3 region (Paris). Cross-region backups are stored on AWS eu-central-1 (Frankfurt, Germany) to ensure resilience against regional incidents. All data remains within the European Union. Hosting is provided by Amazon Web Services, world leader in web hosting, ISO 27001 certified, which also hosts solutions such as Engie, Véolia, Siemens... Test and production environments are strictly distinct. Access to Tomorro's systems is protected by AWS's rights management policies. User authentication by email and password is mandatory for a short session (controlled by a strict policy). Internal access to data is restricted to duly authorized employees only. Read our privacy policy Data encryption Access to your account is secured by several protection mechanisms. We scrupulously protect your data, which we encrypt both in transit and at rest in our databases. All data is encrypted, including backups, using different encryption keys during transmission as well as during storage. Data and backup encryption keys are changed regularly. Data transmission is only carried out using the TLS/SSL protocol. All transmissions between clients and servers are end-to-end encrypted using the HTTPS protocol. Compliance Tomorro complies with all applicable regulations and we ensure that our service providers are compliant. Stripe, our payment provider, has been audited by an independent PCI Qualified Security Assessor (QSA) and is certified as a Level 1 PCI Service Provider. Our privacy and data processing policy complies with the General Data Protection Regulation. Availability and resilience Your production data is replicated in real time across 3 distinct AWS Availability Zones (AZs) — each AZ corresponding to an independent physical data center — within the eu-west-3 region (Paris), with automatic failover within seconds in the event of an incident. Two complementary backup mechanisms are in place: automatic daily snapshots retained for 365 days, and continuous backups enabling Point-in-Time Recovery (PITR) with a maximum data loss of 5 minutes (RPO 5 min). All backups are stored in an isolated AWS account, cross-region in eu-central-1 (Frankfurt, Germany), for maximum resilience against regional incidents. Incident response In the event of an incident, Tomorro's teams are mobilised to protect your data and ensure a return to normal within the shortest possible time. Tomorro has a clear procedure in place for security events and has trained all staff members internally on this subject. Automatic alerts are set up to notify our team in case of an incident. When security events are detected, they are transmitted to our emergency alias, teams are called, notified and assembled to react quickly. The analysis is done in person, distributed throughout the company and includes measures that will facilitate the detection and prevention of a similar event in the future. Security-related events must be systematically reviewed for closure by the engineering and security services and, where appropriate, by the services specifically concerned. Security center For the sake of transparency and awareness, we have documented all questions relative to security on a dedicated platform accessible to all. Informations are certified by an external provider (Vanta) Documentation regularly checked and updated by our teams All security topics covered Access the documentation Contact us If you need help or have any questions about security or the use of our services, our team is at your disposal. Contact our team A single, secure platform Protecting our customers' data is at the heart of what we do. At Tomorro, we apply the highest standards of security, confidentiality, and compliance to guarantee the integrity of every contract and document managed on our platform. Trust center Compliance & Certifications Tomorro is committed to meeting the most rigorous international compliance standards: ISO 27001:2022 certified GDPR compliant Digital Operational Resilience Act (DORA) EU AI Act readiness Our compliance and security posture are continuously monitored through Vanta to ensure full transparency. Hosted in France, with resilient backups in Europe Hosted on Amazon Web Services (AWS) in France: production in eu-west-3 (Paris), with cross-region backups in eu-central-1 (Frankfurt) for resilience. All data remains exclusively within the European Union. Certified ISO 27001 hosting infrastructure. Data redundancy across 3 distinct Availability Zones (AZs) in the Paris region, with cross-region backups in Frankfurt, ensuring resilience and business continuity. Continuous monitoring and alerting of infrastructure performance and security. Product & Application Security Secure software development lifecycle (SDLC) with code reviews, automated testing, and vulnerability scanning. Isolated development, staging, and production environments. Independent penetration tests carried out annually by third-party experts. Continuous monitoring via Datadog and incident management through Sentry. Monitoring & Transparency Public Trust Center: trust.tomorro.com Public Status Page: tomorro.instatus.com Regular third-party audits and penetration test reports available upon request. Contact our Security Team If you have any questions or would like to report a vulnerability, please reach out to our security team. Contact our team 2000+ companies manage their contracts with Tomorro our customers talk about it better than us "Tomorro a permis de réduire drastiquement le temps de traitement des documents RH, passant en moyenne de 20 jours à un seul." Alexandra Guichard Chargée RH & Administration du personnel, Cafpi "Tomorro est un excellent outil pour les personnes de l'équipe qui doivent rédiger des accords mais qui ne sont pas issues du domaine juridique." Kader Zedek Responsable Juridique et Conformité, Pretto "Le soutien et la réactivité des équipes de Tomorro ont fait la différence." Valentine Alagnat Responsable Achats Informatiques, Vinci "Adopting Tomorro has transformed our contract management. We have cut the time spent on contracts by a factor of three, while reducing legal and financial risks. Thanks to Oro AI, document analysis is faster, making decision-making smoother and operational teams more autonomous." Béranger Pène General Manager - Legal & Compliance Nestlé "Tomorro has become an indispensable tool in the day-to-day work of our team, guaranteeing speed in the contractualization process and making it easier to follow negotiations through to signature.” Nassim Ameli Legal Advisor Voodoo "The support and responsiveness of Tomorro's teams made all the difference.” Valentine Alagnat IT Pursharing Vinci "Tomorro is a great tool for people on the team who need to draft agreements but don't come from a legal background.” Kader Zedek Head of Legal and Compliance Pretto "We opted for Tomorro for its easy-to-implement tool, which we deployed across the legal and sales teams to streamline our contract drafting and negotiation processes.” Florence Rivat Général Counsel Evaneos "Tomorro has changed my daily life, and is enabling Lano to absorb the volume of contracts linked to the company's growth." Bhagyashree Pancholy Général Counsel Lano "Tomorro has dramatically improved our ability to manage contracts accurately and quickly. Its intuitive interface and robust feature set perfectly match the requirements of our industry.” Alexia Delahousse VP Legal Qonto "Tomorro's Oro AI integrates naturally into our work processes, continuously enriching our existing workflows." Hugo Ruggieri General Counsel and Public Affairs Doctrine "Tomorro has drastically reduced the time it takes to process HR documents, from an average of 20 days to just one." Alexandra Guichard HR & Personnel Administration Officer Cafpi “Our Tomorro CLM makes it easier for non-lawyers to own contracts, while acting as a safeguard for the processes we want to enforce.” Mehdi Cupaiolo General Counsel Foodles Speed up your contract management with AI Book a demo Manage your contracts with AI "Adopting Tomorro has transformed our contract management. We have cut the time spent on contracts by a factor of three, while reducing legal and financial risks. Thanks to Oro AI, document analysis is faster, making decision-making smoother and operational teams more autonomous." Béranger Pène General Manager - Legal & Compliance Discover Tomorro in 2 minutes