Data and Security
Security is everything to us at Legly. Our customers trust us with their data to provide and continue developing excellent service. We cherish that trust. Therefore, we aim to be as transparent as possible as to what we do with your data. Here you can download our Information security program and see the most frequently asked questions about how we handle your data and security.
Please contact us if you have any questions.
Information Security Program
Frequently asked questions
Where is my data stored?
All uploaded data (documents, playbook guidelines, feedback texts, etc.) are stored in AWS Data Centers in Frankfurt, Germany. Personal information needed for identification communication and billing is stored through:
- Auth0 (identification) in Frankfurt, Germany
- HubSpot (CRM) data stored in the EU
- Fortnox (invoicing) in Sweden
- Stripe (online payments) in the US*
* Regarding the GDPR, Stripe’s existing measures include the EU Commission’s approved SCCs to accommodate international data transfers.
Is my data encrypted?
Yes. Stored user data (such as uploaded documents) is encrypted through our database providers with the industry-standard AES-256 algorithm. The data is both encrypted at rest in the database and when accessed, transferred over encrypted channels.
Who has access to my data?
Only very few select staff members have access to your data to ensure smooth operations in case problems arise. As an add-on, we can provide a setup where no one apart from you has access to the uploaded contracts, not even strictly managed key personnel.
Do you share my data with third parties?
No. We use some third-party services to run our service (Auth0 for account authentication and Stripe for billing, for example), but they only see the data necessary for their function.
Can I request my data to be deleted?
Yes. Your account, uploaded documents, and playbook guidelines can be deleted at your request.
What happens to my data if I decide to stop using your service?
Most data is deleted when you terminate your account. Some data, such as billing information we must store for legal reasons, is retained. Contract-related data is deleted upon your request at termination, or you can delete it yourself at any time before closing your account.
How is my data used to improve the AI service?
It is used to train the AI to improve classification, identification, extraction, and understanding of legal documents and concepts.
What kind of personal information do you collect and why?
We collect names, emails, and phone numbers for each user and the company's billing information. These are used to identify and link companies and individuals with their accounts. Legal documents are required for the actual reviewing process.
Do you comply with GDPR?
Yes. Stored user data (such as uploaded documents) is encrypted through our database providers with the industry-standard AES-256 algorithm. The data is both encrypted at rest in the database and when accessed, transferred over encrypted channels.