Trust
Where your contract goes
What happens to your document, step by step — and how you can check it.
You upload
Access is scoped to your own account, so other users can't see your documents or analyses unless you create a share link.
Stored in Frankfurt
Your data is encrypted in transit (TLS) and at rest.
Analyzed
Analyzed by Anthropic — possibly outside the EU. Never used to train AI.
File deleted after 30 days
Your report stays until you delete it.
Your documents and account are stored in Frankfurt, Germany. The AI analysis itself may run outside the EU; such transfers rely on safeguards such as Standard Contractual Clauses.
977 / 977
quotes found word for word
How we test what we say
In a test on 27 public commercial contracts (October 2, 2026), 977 of 977 quotes in the final reports appeared word-for-word in the contract (one differs only in a capital letter); 1 finding carried no quote. This checks that quotes are copied exactly — not whether every finding is right. Measured on a public test set of contracts, not on real users' reports.
Every report goes through the same check before you see it: a quote that isn't found word-for-word in your document is corrected, removed or clearly labeled.
Your controls
- Delete everything yourself: Settings → Delete my account — permanent and immediate. It leaves our encrypted backups within 28 days.
- FixMyContract does not train AI models on your contracts, and Anthropic, which runs the analysis, is contractually barred from doing so (Anthropic's commercial terms).
- The file you upload is deleted automatically 30 days after upload. From September 30, 2026, your report stays in your account until you delete it. Anything you delete yourself is removed from the service right away, and from our encrypted backups within 28 days.
- Anthropic deletes the text we send it, and the analysis it returns, within 30 days at most. If a request is flagged under its Usage Policy, it may be kept for up to 2 years, and related safety scores for up to 7 years.
- We never sell your data.
What we don't claim
- AI-generated analysis — informational, not legal advice. No lawyer reviews your report.
- For scanned or photographed pages, the report tells you the quotes couldn’t be matched.
- We don’t hold a security certification (such as SOC 2).
- Stored data is encrypted at rest by our database provider. The service has to read your contract to analyze it, so this is not encryption that hides it from us.
Who processes your data
| AI analysis | Anthropic |
| Database, sign-in & files | Supabase |
| Hosting & cookie-free measurement | Vercel |
| Error monitoring (documents stripped) | Sentry |
| Email delivery | Resend |
| Encrypted database backups | GitHub |
Same list as our Privacy Policy, section 07.
Found a security issue?
Our disclosure policy and contact are published at /.well-known/security.txt.
Using another AI tool?
Before uploading a contract to any AI tool, check its data settings. According to OpenAI’s own help pages (September 2026), what you submit to a personal ChatGPT account may be used to improve its models depending on your settings under Settings → Data controls, and authorized people, including service providers, may access content for that purpose unless you opt out. According to Google’s own help pages (September 2026), free and personal Gemini accounts may use chats to improve models unless you turn that off, and Google notes that some Gemini chats are reviewed by people. Business and enterprise versions of both have different defaults.