What safeguards are in place to protect my data in DraftPilot?

Your data is protected as follows:

• DraftPilot does not store a copy of customer’s contracts on its servers and does not train its version of OpenAI’s AI models based on customer contracts or interactions. Only a customer’s playbooks are by default stored on our AWS servers in Ireland. (On our Enterprise plan you can also elect US only hosting).

• The contracts are sent to OpenAI’s models via the ChatGPT API for analysis.  

• OpenAI does not train any of its models based on inputs and outputs sent and received via its API (see here for additional detail on that, under “API Platform FAQ”).

• We have agreed Zero Data Retention with OpenAI, so they will immediately delete inputs/outputs (i.e. no storage for abuse monitoring).

• DraftPilot is SOC2 and ISO27001 certified. OpenAI is SOC2 certified. We protect your data with AES-256 encryption at rest and TLS 1.2 in transit.

Learn more about our security measures in the DraftPilot Trust Center. To get our SOC 2 report, ISO 27001 certificate, DPA or other security documents, see Requesting security documents from the Trust Center.