Security

Your contracts often hold pricing, scope and liability terms you would not want anyone else to see. This page explains, in plain language, how ReCo.Legal protects them.

Encryption

• All traffic to reco.legal uses HTTPS (TLS). Browsers are told to use HTTPS only.
• Files and data are encrypted at rest by our infrastructure provider.
• Contract files sit in private storage. Downloads use links that expire within minutes and are issued only after we check you are allowed to see the file.

Who can see your contracts

• Your company's portal is separate from every other client's. Access rules are enforced in the database, not just in the app.
• An attorney sees a contract only when it is assigned to them for review or sign-off.
• Staff sign in to a separate staff area, and staff sessions expire after 12 hours.
• Access is role-based. We review who has access every quarter and remove it when someone no longer needs it.

Audit logging

Sign-ins, role changes, contract actions and changes to client records are written to an audit log that cannot be edited or deleted. We use it to investigate any question about who did what and when.

Data retention

By default we delete contract files 12 months after a matter is closed. Clients can ask for a shorter or longer period. Files under a legal hold are kept until the hold is lifted. You can ask us to delete your data sooner at any time.

AI and your data

We do not use your contracts to train AI models. Every review is checked and confirmed by a licensed attorney before it is delivered to you.

Our security program

We are building our controls around the SOC 2 and ISO 27001 frameworks, including access reviews, change management, vendor reviews and incident response. If you need our security questionnaire answered for your procurement process, ask us.

Reporting a security issue

If you think you have found a vulnerability, email contact@reco.legal with the subject “Security”. Please give us a reasonable time to fix it before sharing it publicly.

ReCo.Legal is not a law firm. Legal services are provided by independent, licensed attorneys.