Your negotiation data is sensitive. We treat it that way.
All data stored in ContractIQ is encrypted at rest using AES-256 encryption.
All data transmitted between your browser and ContractIQ is encrypted using TLS 1.2 or higher.
Role-based access controls ensure that users only see data they are authorized to see. Bargaining team members cannot access other teams' proposals or internal strategy notes.
Each organization's data is completely isolated. One union's proposals, sessions, and documents are never accessible to another organization under any circumstances.
User accounts are protected by password authentication with minimum complexity requirements. Session tokens expire automatically.
Every status change, user action, and document upload is logged with a timestamp and the identity of the user who took the action.
ContractIQ uses Anthropic's Claude AI for cross-article analysis, counter-strategy advice, and session summaries. When you use these features, relevant portions of your contract and proposal data are sent to Anthropic's API to generate the response.
Anthropic processes your data to generate AI responses — they are a sub-processor under our Data Processing Agreement. Anthropic does not use your data to train their models without explicit consent.
AI features are optional — you can use ContractIQ without enabling any AI features if your organization requires it.
ContractIQ complies with the California Consumer Privacy Act. California residents have the right to know what personal data we collect, request deletion of their data, and opt out of data sale (we do not sell data).
Enterprise customers who require a countersigned Data Processing Agreement for their procurement process can request one by contacting legal@contractiq.com.
Your data belongs to you. You can export your complete negotiation record at any time. Following account termination, data is retained for 90 days to allow export, after which it is permanently deleted.
ContractIQ is built on enterprise cloud infrastructure with redundant systems, automated backups, and 99.9% uptime SLA. Data is stored in the United States.