What safeguards are in place to protect my data in DraftPilot?

Your data is protected as follows:

• DraftPilot does not store a copy of customer’s contracts on its servers and does not train its version of OpenAI’s AI models based on customer contracts or interactions. Only a customer’s playbooks are by default stored on our AWS servers in Ireland. (On our Enterprise plan you can also elect US only hosting).

• The contracts are sent to OpenAI’s models via the ChatGPT API for analysis.  

• OpenAI does not train any of its models based on inputs and outputs sent and received via its API (see here for additional detail on that, under “API Platform FAQ”).

• We have agreed Zero Data Retention with OpenAI, so they will immediately delete inputs/outputs (i.e. no storage for abuse monitoring).

• DraftPilot is SOC2 and ISO27001 certified. OpenAI is SOC2 certified. We protect your data with AES-256 encryption at rest and TLS 1.2 in transit.

Learn more about our security measure here.