Security

Your contracts deserve careful handling.

Contracts contain sensitive business information. These are the security measures built into GuardMyContract today.

Secure document handling

Only PDF files are accepted, and every upload is checked before it is stored.
Every document is encrypted with its own key (AES-256-GCM) before it is written to storage.
A document is tied to its organisation: a copy moved to another organisation cannot be decrypted.

Separated organisations

Each organisation's contracts are kept apart in the database, enforced by the database itself on every query.
Membership of the organisation is checked again on every request.
Requests for another organisation's contracts or documents are answered as "not found".

Controlled access

Members have a role: owner, admin, editor or viewer.
Viewers can only read. Uploading and editing require an editor role or higher.
Permanently deleting a contract is limited to owners and admins.

Secure sign-in

Passwords are stored only as a strong one-way hash (scrypt), never in plain text.
Login attempts are rate limited.
Sessions are kept on the server and end after 12 hours of inactivity, or after 7 days at the latest.
Changing your password logs you out on your other devices.

Protection in the browser

Every form is protected against cross-site request forgery.
A strict content security policy: no third-party scripts, trackers or advertising.
Pages cannot be embedded in other websites.

Audit trail

Uploads, document views, confirmations, corrections and deletions are recorded with who did it and when.
Sign-ins and account changes are recorded as well.
The audit trail can only be added to, not changed.

AI with checks. The AI only extracts facts from your contract. Each value must come with the page and passage it was found on, and that passage is checked against the document. Values that cannot be verified are marked for review, and your own corrections are never overwritten.

This page describes how GuardMyContract is built today. It is not a certification or a legal guarantee.

Take control of your contracts.

Know what is coming up, what needs attention and where your contracts stand.

Get started