SecuritySOC 2 Type IIU.S. hostedAI optional

SOC 2 Type II, hosted in the U.S., with an off switch for the AI.

Contracts Connected is SOC 2 Type II and hosted in the U.S. on AWS, on a private network, with TLS 1.2 or higher in transit and every action on the record. The model vendor keeps none of your documents, and one setting turns the AI off for your whole account.

A closed matte white safe with a soft blue glow along its door seam.
The controls
  • SOC 2 Type II.
  • Hosted in the U.S. on AWS.
  • TLS 1.2 or higher in transit.
  • Private network.
  • Monitored continuously, with Vanta.
01Who can do what

Roles decide who on your team can approve and sign. Vendors see their own to-do list.

On Core and Max, permission groups set by role who can add, edit, approve or sign. Account and billing stay with your admins.

A vendor sets up a free account from the link in its email and sees its own to-do list: what it owes, what came in and what was approved. It never sees your AI’s read of its documents, only your decision and what to fix.

02Audit trail

Every action is on the record, with who and when.

Every approval and rejection is logged with who and when, and so is every request, upload and signature, including what your AI agent does. Pull it for any project or vendor when an auditor or a claim asks.

Signing stays inside too: e-signatures are built in, with no separate signing app.

See the permissions and the record on a sample project.

Book a demo
AI levels

The AI does what you allow. Or nothing at all.

Zero data retention at the model vendor. One setting covers the whole account, and on Do it yourself no AI model touches your documents.

Do it yourself · No AI

Your team runs it.

Contracts, approvals, signatures, reminders, the tracker and the record all work without the AI. No AI model touches your documents.

Done with you · The AI reads

The AI reads before you approve.

It reads the documents you switch it on for, tells you whether to approve or reject and why, drafts the rejection message, and explains each change a vendor makes in a redline.

Done for you · The AI agent

Your AI agent runs the loop.

From its own email address and phone number it drafts contracts from the award email, sends them once your approvals are in, chases what vendors owe and tells your PM who’s cleared. Human in the loop or Auto mode.

How the AI levels work The AI agent

The questions a security review asks first.

Answered the way we answer them on the questionnaire. Anything not here, ask us.

Is Contracts Connected SOC 2 compliant?

Yes. SOC 2 Type II. Hosted in the U.S. on AWS. TLS 1.2 or higher in transit. Private network. Monitored continuously, with Vanta.

Where is our data hosted?

Hosted in the U.S. on AWS, on a private network. TLS 1.2 or higher in transit.

Does the AI model vendor keep our documents?

No. Zero data retention at the model vendor. And on Do it yourself, no AI model touches your documents at all.

Can we turn the AI off?

Yes. Do it yourself is one setting for the whole account. No AI model touches your documents, and every other feature works the same.

Who on our team can approve or sign?

On Core and Max, permission groups set by role who can add, edit, approve or sign. Account and billing stay with your admins.

What can a vendor see?

Its own to-do list: what it owes, what came in and what was approved. It never sees your AI’s read of its documents, only your decision and what to fix.

Can the AI send anything without our approval?

No contract goes out for signature until your internal approvals are done, at every level. On Done for you, Human in the loop means a person approves what your AI agent prepares; in Auto mode it acts on its own, and everything it does is logged.

Do vendors need an account?

Vendors set up a free account from the link in their email. They never pay: not to register, not to upload, not to sign.

Who do we send a security questionnaire to?

support@contractsconnected.com. Attach it and a person answers.

Bring your security questions to a demo.

We’ll show the AI setting, the permissions and the record on a sample project.

Book a demoSend us a questionnaire